tracking.netmediamobile.com/index.php/redirect/index/61fd05ad432a8
172.67.169.41302 Found 0 B URL HTTP/1.1 tracking.netmediamobile.com/index.php/redirect/index/61fd05ad432a8
IP 172.67.169.41:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /index.php/redirect/index/61fd05ad432a8 HTTP/1.1
Host: tracking.netmediamobile.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 30 Nov 2022 07:06:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: https://gr.spacewin.fun/optimized/iphone12?cid=603&reqId=441717325
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hhq1WQgLLueMgbOFGkVJYty5r3wRTZTa9r%2BNvWWlO2ToBNjLNn%2FWjJ1toPQTSOIqAgeRTHlrTQ%2FUXhp2VuBPZk1yHurphjGJRjfE342clvUjc0UR853BfjFykH7so8jedLvZvo%2Fy08yasG6aNiM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Set-Cookie: ci_session=bpbh3t6v3je3o1n7d58n4cutaq8cjbff; expires=Wed, 30-Nov-2022 08:06:52 GMT; Max-Age=3600; path=/; HttpOnly
code=61fd05ad432a8; expires=Tue, 29-Oct-2075 15:13:44 GMT; Max-Age=1669795612; path=/
reqid=441717325; expires=Tue, 29-Oct-2075 15:13:44 GMT; Max-Age=1669795612; path=/
extras=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
__cflb=02DiuHAteUKp77ybtwmHqHvoob14ULLHuk4fe6Wx544bE; SameSite=Lax; path=/; expires=Thu, 01-Dec-22 06:06:52 GMT; HttpOnly
Server: cloudflare
CF-RAY: 7721be2ba857b4f3-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2503
Expires: Wed, 30 Nov 2022 07:48:35 GMT
Date: Wed, 30 Nov 2022 07:06:52 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 4ed065cb23b5fca1a179dd73b3c5b7b2
4422eb24688f5e056fc1b18b127c7f63b1dbf5e0
b723d770d0dec7441d8505dc5a4e7d34f55c9f564ec52f20d9b70c7c3a0d9d35
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3312
Cache-Control: max-age=101971
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 07:06:52 GMT
Etag: "6385df6f-1d7"
Expires: Thu, 01 Dec 2022 11:26:23 GMT
Last-Modified: Tue, 29 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6d9d34c96b9a826ae5676640c966469c
8052a16d41a637e420478b7de1ff5a2dc951fccd
f18ac558cb786126bb7efb159e03353d268d5f5796bcfd2691a349dfc68d863c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F18AC558CB786126BB7EFB159E03353D268D5F5796BCFD2691A349DFC68D863C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8829
Expires: Wed, 30 Nov 2022 09:34:01 GMT
Date: Wed, 30 Nov 2022 07:06:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 06:17:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2933
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vS2/aPFxrbuErpm8FdJi4ULjRHDx6FEAn25uXmUf3XNLfoowtK1opKRGSb+IVyGI+8ofsYb7a9+nzkxBDfVOWg==
x-amz-request-id: 5ABCJGBMNP4GQ7J3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 06:45:46 GMT
age: 1266
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 07:06:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3c60983d3fbc41ceb9f2a4b54ec293ef
7f68b6a3c6e998a349ea8af976eeaace92d10120
36464096810d5fc6508d332d9f90acbf5f683804f840bcd88850932594cbb608
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=101883
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 07:06:52 GMT
Etag: "6385ec07-117"
Expires: Thu, 01 Dec 2022 11:24:55 GMT
Last-Modified: Tue, 29 Nov 2022 11:24:55 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3c60983d3fbc41ceb9f2a4b54ec293ef
7f68b6a3c6e998a349ea8af976eeaace92d10120
36464096810d5fc6508d332d9f90acbf5f683804f840bcd88850932594cbb608
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=101883
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 07:06:52 GMT
Etag: "6385ec07-117"
Expires: Thu, 01 Dec 2022 11:24:55 GMT
Last-Modified: Tue, 29 Nov 2022 11:24:55 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279
gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
188.114.97.1200 OK 3.7 kB URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (308)
Hash d46db49b0a06e359745e3d90ead6938f
2307841b7ac718a373ad29c2deb5f9da9a0b00db
b3439526e1d01438e73ab740f1f66535beb729e89a87c31f999166e3bbcbbba5
GET /optimized/iphone12/?cid=603&reqId=441717325 HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: greece=603; expires=Thu, 01-Dec-2022 07:06:52 GMT; Max-Age=86400
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=um8Do6P8gndyhjcklnd%2FhzHYKKtTMrYmlxBRhDXuW506ajtvsCx53SGUzdhwhawLpPcvVk6zI6xFwpm0B2xMsqMlNRsbZ9WR2R%2F1o4ZTKmg06WnqsnymGLG8RZqcGu%2BEX2c%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be301b1bb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 06:11:14 GMT
cache-control: public,max-age=3600
age: 3338
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
gr.spacewin.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
188.114.97.1200 OK 655 B URL HTTP/1.1 gr.spacewin.fun/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 188.114.97.1:0
File type HTML document, ASCII text, with very long lines (1238)
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 28 Nov 2022 15:39:19 GMT
ETag: W/"6384d627-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VcZe1syxe6qTZLiR7gMvB4%2Bxx53QQ89rS6jES3C4euVC3TdXCW59Jrpv%2BQYYOq8GS2L7no72QMt5M%2FRqAGWRiJBRvtJEgn8TnTz%2Fr47d1zYYTaGPyeY9U3tcK2cxfICdrHg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be318e1b0b61-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 02 Dec 2022 07:06:53 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
gr.spacewin.fun/optimized/iphone12/css/legal.css
188.114.97.1200 OK 1.3 kB URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/css/legal.css
IP 188.114.97.1:0
Hash 7e8eff33367fde06e58ba9048df1ea33
5104153fdd6930c46d0acc35c05cd8af8033d087
7eba0bb5781af0dcc4c8eff889b85288a3eaeab8eba444153ad1d07f0994c1a5
GET /optimized/iphone12/css/legal.css HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: text/css
Content-Length: 1265
Connection: keep-alive
Last-Modified: Mon, 29 Mar 2021 17:31:58 GMT
ETag: "106a-5beb0423a033f-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lWyfcrwCKpxJlEVwt0wGGQYdujlo2IYfYFiAZsrU3UFb7fMhubRTTGAsr9aYa8W%2F%2FDJw%2FwCYsxQSSIV3HpRxmfCpG1CpOyuw%2FubUzf4SCZHEzFGhMbpFKtmWuTm5Ob376Wo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be317c71b51d-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/scripts/pinflow.js
188.114.97.1200 OK 1.2 kB URL HTTP/1.1 gr.spacewin.fun/scripts/pinflow.js
IP 188.114.97.1:0
Hash 2000d5b7f8b76e2db223639629d0689b
4134f50049f8d4fa60770e85e2876a90b0e71808
c2b8bd1d0e5d85c480e73b3631469cc0c8546ac17eca4e0f70c4b01576c4d757
GET /scripts/pinflow.js HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: application/javascript
Content-Length: 1192
Connection: keep-alive
Last-Modified: Tue, 31 Mar 2020 18:24:33 GMT
ETag: "d2a-5a22aade998b1-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cITINZZ5XVDVxki9MVcAe%2BWzmyhRvU7ys4eE%2FXmdAJIA%2Fhvg3SG2fMcxIxCPfIzasLZmC8U3lLFM7arkNnFNYM3%2Fdg5b3fpEJBSee%2Fib36HTJNlRIgriMlLUfOyYDBEa7Q0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be318d99b523-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3c8c689bd654417640d85f3da51af313
85123b6d46230a23d03768bf304b386e5d301305
516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3293
Cache-Control: max-age=96888
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 07:06:53 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 10:01:41 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
gr.spacewin.fun/scripts/optimization1.js
188.114.97.1200 OK 1.6 kB URL HTTP/1.1 gr.spacewin.fun/scripts/optimization1.js
IP 188.114.97.1:0
Hash 76509926af04f5db101da112065a4a04
f6594efddcb52dd8614d522fe476b2162a93c912
d91df11200cf1da90ed88ab1614022aeed3560f2ee66ddcce48410ceb3aa5fc8
GET /scripts/optimization1.js HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: application/javascript
Content-Length: 1579
Connection: keep-alive
Last-Modified: Mon, 11 Jan 2021 22:18:10 GMT
ETag: "124d-5b8a747f7e584-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nNyjW1ujERoD%2FlPLavACyPZFkqoW51OKK8oq784fGwbfXMkj3tVgWL254ohSjiQIxnXUPtiENqhUHGNgvbOY6bhCNajhRO6XKgUosRXWzE4RqBIshuSmoPhiGLCqt5nNvFc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be318e250b61-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/scripts/modal.css
188.114.97.1200 OK 906 B URL HTTP/1.1 gr.spacewin.fun/scripts/modal.css
IP 188.114.97.1:0
Hash 011607988ea44682db527498ffffdc16
e55c9d367ea1fd732ea76055d3449df64789f3ea
2bd299b682c6b4eb1921bc6b35b805f704290481b72ea820617f6d933f87a862
GET /scripts/modal.css HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: text/css
Content-Length: 906
Connection: keep-alive
Last-Modified: Tue, 16 Apr 2019 16:32:42 GMT
ETag: "7fd-586a851744860-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BBr0NPTT6j2ptgOHxe0XNkPRytwRMhK1deg%2FaKggoOv9FHJhWc7rTyem7qa3qzJ6pY3o3mU1xQoTQ8qaKQZzG3ut%2FyWhp8HjfKMupLXCn0wRazbKbmNRFASJ1t%2BRqkx4Jc4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be317d97b523-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/optimized/iphone12/css/style.css
188.114.97.1200 OK 1.5 kB URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/css/style.css
IP 188.114.97.1:0
File type assembler source, ASCII text
Hash 455ad1b2d42fe86b2b49fef624a1e281
dc72a634459d0b91bdf6eb5308206a67c127f6a5
603b66174cdc79f6e470186ac3d0efe71f78c78e71c25087fac3ca11b5a59596
GET /optimized/iphone12/css/style.css HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: text/css
Content-Length: 1528
Connection: keep-alive
Last-Modified: Tue, 20 Oct 2020 16:09:37 GMT
ETag: "14aa-5b21c7527f4f2-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6MTD8UMjeNr7P2F23WJq8vmY3o0QhQPCCPMa8WkiXSTCP7jzLoOPKhuazPt5AjZAXO9JAnb9pL4uJwpICyzhxJvtWp8I64N%2Bdm%2FlJ8SC39yWir4XOTzedFcTqAXYg%2BonuP8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be317c2dfab8-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/scripts/jquery.min.js
188.114.97.1200 OK 30 kB URL HTTP/1.1 gr.spacewin.fun/scripts/jquery.min.js
IP 188.114.97.1:0
File type ASCII text, with very long lines (32014)
Hash 183af0f6b68dccffff9f4c1a09cf892c
636dacf3473c4d3a445da114646d8ea56549a99c
338753f2c518025ca22f83b47361d460b987641a3a4c1f0b0ca15e47dd793a05
GET /scripts/jquery.min.js HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: application/javascript
Content-Length: 30028
Connection: keep-alive
Last-Modified: Tue, 16 Apr 2019 16:32:42 GMT
ETag: "1514e-586a851744860-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gH4DxYETjUKzKqccJRQ8b0xzu%2Fsv%2FursJe4yikoYVWrJ4hhA9qJ5csoRq9%2BCnPsWJUzpXBLaVpr8yo4lZ%2FxUgTdJNwDYcrJLM%2FI%2FHbiVC6fPxFTvpXF35YLmy2XNtow7hZg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be318943b4eb-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/scripts/countdown_timer.js
188.114.97.1200 OK 228 B URL HTTP/1.1 gr.spacewin.fun/scripts/countdown_timer.js
IP 188.114.97.1:0
Hash 717b073f08d8c8efce17aed0e1d390e5
27653633d7052add36dc796fbc3a8a6c7a264f1b
cc92a45980a921938e583a5c92099affb8432c90f21b6587f6351de1a62fa12d
GET /scripts/countdown_timer.js HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: application/javascript
Content-Length: 228
Connection: keep-alive
Last-Modified: Fri, 27 Mar 2020 19:42:33 GMT
ETag: "1ef-5a1db4d794c16-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ae45xmH3OiherforVB5KeYOZDI4ra1VmPHUTz5uWEA2oKqBk1Wj4LI06WqAVaq%2BCLCODHprztyYUJpQDcPvRVNyulBsaWSf9QJOGuauS2wQ1yJ%2F%2Br%2BkFNhjqJaibRYwFJFA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7721be31ccb3b51d-OSL
alt-svc: h2=":443"; ma=60
fonts.googleapis.com/css?family=Plaster&subset=latin,latin-ext
142.250.74.106200 OK 333 B URL HTTP/1.1 fonts.googleapis.com/css?family=Plaster&subset=latin,latin-ext
IP 142.250.74.106:0
Hash 15f7e0d4ff2e6efd6d3f3f34c6536cc9
c46896e647e37e96a34242d6f35974b699885343
eb82cf2cf451a9ba77e8cbbbe40064aaf5709633fd4126a0aeea0d04e0a0f107
GET /css?family=Plaster&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 30 Nov 2022 07:06:53 GMT
Date: Wed, 30 Nov 2022 07:06:53 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
gr.spacewin.fun/optimized/iphone12/images/arrow-green.png
188.114.97.1200 OK 296 B URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/images/arrow-green.png
IP 188.114.97.1:0
File type PNG image data, 31 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 905b592e6e137a9410fed7dc894c2152
3a7068ca3a856de499566474b4e81ab76f39a4a7
4de6141664dc2993ea8f20ef4495341224d3e45d13d4df89b36ae64ee68663af
GET /optimized/iphone12/images/arrow-green.png HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: image/png
Content-Length: 296
Connection: keep-alive
Last-Modified: Tue, 20 Oct 2020 16:09:53 GMT
ETag: "128-5b21c761c76cd"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=waAdMTZyFpuhy2LwXcCXCfoHLEAzhcmg5DdkFuFjMQf%2BBPn6mT0efo9bfbR4%2FB9JREB7SXVg1zXNccsLMaFb6NHlLDcDa9xeO6bULh352H2xhG99vtjEscSz0AkMleFQQS4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be31edfdb523-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/optimized/iphone12/images/iphone14.png
188.114.97.1200 OK 203 kB URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/images/iphone14.png
IP 188.114.97.1:0
File type PNG image data, 830 x 950, 8-bit colormap, non-interlaced\012- data
Size 203 kB (203240 bytes)
Hash 4a461369fff562ea391b265e0ed456b5
7b17d5e33b5af8d27f707b75a315a12600e61d1a
d1ab2c1ce6f4f0fe7cc6a9d0a169a715f3c21dd43ac7ca9abfa2724f80504445
GET /optimized/iphone12/images/iphone14.png HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: image/png
Content-Length: 203240
Connection: keep-alive
Last-Modified: Fri, 28 Oct 2022 21:48:18 GMT
ETag: "319e8-5ec1f373b69c0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q3FL%2B%2FGOeuy4tmSMOp0yYOVBRamr2%2FinFqLLw3D%2Br%2B244EwuLYDEf5sRDDM5T3dcbFfYAGJZeX9DhFnxpjGXJncjSLpNz6B%2BHT8kxRK7fQVw0I07BRAPudyEz5mgzNMLYOE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be31ee570b61-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/optimized/iphone12/images/info.png
188.114.97.1200 OK 961 B URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/images/info.png
IP 188.114.97.1:0
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash c2aa556c329af71d1cd923a6a71af150
87436d828f25a5dafef5c7bae501ca1acc010c2a
ce712577bb6a23a2b0051bf468307e9391de3e9e4f00ac66c337e4a86b278410
GET /optimized/iphone12/images/info.png HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: image/png
Content-Length: 961
Connection: keep-alive
Last-Modified: Mon, 29 Mar 2021 18:10:27 GMT
ETag: "3c1-5beb0cbe22d88"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7DTtf2iLZRezh9tMsmE6pZ1fXHRLcaSUbpOfMUa2SuK%2BD%2FWCX5KYuLL8IpZVbRlP2L5I4OeurenZhLUjipPwpCfZYMfA7gL5OuXq5nV7seQyigVsS%2FpkCAX0J%2BPrPy2kgU0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be31edfeb523-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/optimized/iphone12/images/mesa.png
188.114.97.1200 OK 2.5 kB URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/images/mesa.png
IP 188.114.97.1:0
File type PNG image data, 92 x 86, 8-bit colormap, non-interlaced\012- data
Hash 804a918778b2096319a7c299116e3ee7
aa50abf4e0a885c369b4a98c02c284fe30663b22
84b04605f000647a284d3b6cd6e4a64f14eef00d6ce183cf9abb4848c7c4b78f
GET /optimized/iphone12/images/mesa.png HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: image/png
Content-Length: 2461
Connection: keep-alive
Last-Modified: Tue, 20 Oct 2020 16:09:53 GMT
ETag: "99d-5b21c761c76cd"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8cNHpcjkx%2BrpaDRkBlrqNDF%2B2ykv1%2FFPjkrPMrBHMqBwBmM78BfpbcTf6l3mqrJpSkZ%2BXAmkRTb%2Bp1Pf1gsofLS33BQH1cmtBBTf1eJvN8srqAIz7%2BwGlycKACO2k2iSz%2B8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be31ec62fab8-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/optimized/iphone12/images/icon-phone-gray.png
188.114.97.1200 OK 164 B URL HTTP/1.1 gr.spacewin.fun/optimized/iphone12/images/icon-phone-gray.png
IP 188.114.97.1:0
File type PNG image data, 18 x 24, 8-bit gray+alpha, non-interlaced\012- data
Hash 20baa599cc1b0957f6244c5a9e09ea54
b1af614a262850ad5f8457ea909eb7ffff2c7344
b9be7bcf9d7763f032625cce551cc2435c1223b8838d9ca04bf7849d6a6be863
GET /optimized/iphone12/images/icon-phone-gray.png HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/css/style.css
Cookie: greece=603
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: image/png
Content-Length: 164
Connection: keep-alive
Last-Modified: Tue, 20 Oct 2020 16:09:53 GMT
ETag: "a4-5b21c761c76cd"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpMOuurkg0mLi%2FZXPq99hRfGbxotyfpAHex1gwnv%2F3CgdNDUcNYtj6JWsQ1vrj1QGNEQdBCp%2Btjh7PvjYNgmXZakvJUY387abwAEN2RnK9KwB0scdqYeDUk5W5IckfXURuQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be327ea00b61-OSL
alt-svc: h2=":443"; ma=60
gr.spacewin.fun/favicon.ico
188.114.97.1404 Not Found 231 B URL HTTP/1.1 gr.spacewin.fun/favicon.ico
IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7a519c040342045535cb032d7db6a467
ed0ffca90d7490c54f7ccc42d1d5cb9ebf9b0123
6ca4f9d1c455571a4fe8ae940938c6ac18a8abc0b63f11a193fd714b128947e8
GET /favicon.ico HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
HTTP/1.1 404 Not Found
Date: Wed, 30 Nov 2022 07:06:53 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aPPFqZEW10H028GlMaalcPG7VDFDAmAWKH5tJlepvjNHGewKUOC7r6hMB%2FO%2F0FVi0tQkbC43SyOLkA4AtWHBkX3fWM0zJUXXzOGiGmUnKx%2Fw0jQJ5liDSELrS%2Bjd4LLRZC4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7721be334adeb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
44.237.51.86101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.237.51.86:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fVj4zajmNN8IgHC7skPwqg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ndmGtd/Y2Z+Ct5MmT8ZCrzpRFS8=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19018
Expires: Wed, 30 Nov 2022 12:23:52 GMT
Date: Wed, 30 Nov 2022 07:06:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19018
Expires: Wed, 30 Nov 2022 12:23:52 GMT
Date: Wed, 30 Nov 2022 07:06:54 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19018
Expires: Wed, 30 Nov 2022 12:23:52 GMT
Date: Wed, 30 Nov 2022 07:06:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 32122
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48df8a6f-5803-4ce0-ab84-1efc8ca3e251.jpeg
34.120.237.76200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48df8a6f-5803-4ce0-ab84-1efc8ca3e251.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8825a2c5c0d98323f489e0b816b7f1d8
05f46985ea4ace57460120876da8e19db08857b3
1d12590a78b32146d6f1d107fb93bdb6cb45228d15babd087c0111495d7138e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48df8a6f-5803-4ce0-ab84-1efc8ca3e251.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 67e1ba67-b4fb-42c8-985d-f34164101c7b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhIGGtloAMFxjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bcd-295995bb1123430c55659fe3;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d64lSE184IwrwZKVC8KOUINEBclth9b7xRGV9T1uNfAptgXz0bxKhw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:14:25 GMT
age: 31949
etag: "05f46985ea4ace57460120876da8e19db08857b3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bad627-8bb4-4de1-a2da-92da8f9ec614.webp
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bad627-8bb4-4de1-a2da-92da8f9ec614.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 536cd283dee06cf1ceb9e15e4850db92
47aafca572d34f9726a0174ac902178556e581d8
63a5acf87962da6656f828422545af0ccc0888f0a2a15ebd2160ffb3714e6241
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6bad627-8bb4-4de1-a2da-92da8f9ec614.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7658
x-amzn-requestid: e729e5b6-0c92-4ed3-b449-4a30d5bb4b89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEyEQSIAMFWsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1e-1bba7e9a2d15d66779b1896c;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AuN9hTb4YydNZjvpnTGyE313wl-O3F_p4jC_NUSe8kr3RB_4AjOEMw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:09 GMT
age: 33045
etag: "47aafca572d34f9726a0174ac902178556e581d8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7a6f598-362e-4a6c-ba04-330df636e33b.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7a6f598-362e-4a6c-ba04-330df636e33b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f3c7e8351884491aeab9323c004bc3f3
127ac68bac21c88ffc6e09cc6666e93de4746a1f
e6fa04c502105c43c85c00d39481d2598c6d8fd56540e10107b6668c51597ae4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7a6f598-362e-4a6c-ba04-330df636e33b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8498
x-amzn-requestid: f6b92060-88d4-49bd-b60e-94d99feca4e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYiBaGPOIAMFu1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867d3c-331dacfb087d23881924eef9;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:44:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Zv5zu1q8h4GFU6agEcDzSVFYuvF74qu7UBnovs3vH5jpu17cmyxjQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:50 GMT
age: 33724
etag: "127ac68bac21c88ffc6e09cc6666e93de4746a1f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59baec8db5ced0210ab766ea5636a5fd
f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GydenCzPtpFdVLqN4ssiZ4dKN48WGneS3mwzEdDE81pobtLznfC4VQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:07:59 GMT
age: 32335
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9e135c29a8769eb12ef8c26f99097400
87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d
ce41ff79c382efc54aa2fd3ab64293d2d2b706a7f21585f4bd8bbcd9a3566126
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7971
x-amzn-requestid: e47d10e4-2b60-4998-b5fa-5b145e60aac2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgWHgGoAMFcLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-5b9710a07b0a59730e73dce4;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OURSF_raDXrHV3-3ScaEdorNpW9ZKSIQjv6WUCQYHhruGz372BU_QA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 32122
etag: "87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
gr.spacewin.fun/optimized/iphone12?cid=603&reqId=441717325
188.114.96.1301 Moved Permanently 0 B URL HTTP/2 gr.spacewin.fun/optimized/iphone12?cid=603&reqId=441717325
IP 188.114.96.1:0
GET /optimized/iphone12?cid=603&reqId=441717325 HTTP/1.1
Host: gr.spacewin.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Wed, 30 Nov 2022 07:06:52 GMT
content-type: text/html; charset=iso-8859-1
location: http://gr.spacewin.fun/optimized/iphone12/?cid=603&reqId=441717325
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UhpKm5Jk8oHUC61RILvL0nFh7fjmnGkRn%2BuMTgE%2BW0JUKWA5kLwRXeUOrNerXtC%2B0hGd6xlsNgF7hH3Tu4zIUXZysUqDC6rHVgSOKCzJMckC4ZwY7tjuWzKPA4T6GJIQj38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7721be2f9fd6b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2