nsw2u.com/doom-switch-xci-nsp
188.114.96.1
403 Forbidden
4470
URL
User Request
GET
HTTP/3
nsw2u.com/doom-switch-xci-nsp
IP
188.114.96.1:443
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3311)
Hash
052918e4206bb9aff518e10bfb4c2644
2059a7d3a13407f7cc55922922156774e48543b2
9eb461569c21eeb8427a01efb2decd9ea330c79480212b1c52325ae2ccc19c46
GET /doom-switch-xci-nsp HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Mon, 05 Jun 2023 18:48:22 GMT
content-type: text/html; charset=UTF-8
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cf-mitigated: challenge
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ySWHDrPjHARPiEHyqUFsUo8AbKoHc3TcbBherYTGnb78sIvKCyCTZNmw4fEPgeu1GrC3HuY88Vdt9B7AQoFLzq2rcp5e3Vt38xsLikZoz3nZmbzJRB62JcWAmoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d2a96e349bcb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nsw2u.com/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d2a96e498b5fab8
188.114.96.1
42
URL
nsw2u.com/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d2a96e498b5fab8
IP
188.114.96.1:0
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
GIF image data, version 89a, 1 x 1\012- data
Hash
d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d2a96e498b5fab8 HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nsw2u.com/doom-switch-xci-nsp
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 18:48:22 GMT
content-type: image/gif
content-length: 42
last-modified: Tue, 30 May 2023 15:20:42 GMT
etag: "6476144a-2a"
server: cloudflare
cf-ray: 7d2a96e64a38fab8-OSL
x-frame-options: DENY
x-content-type-options: nosniff
vary: Accept-Encoding
expires: Mon, 05 Jun 2023 20:48:22 GMT
cache-control: max-age=7200, public
accept-ranges: bytes
c0.wp.com/c/6.2.2/wp-includes/css/classic-themes.min.css
192.0.77.37
200 OK
291
URL
GET
HTTP/2
c0.wp.com/c/6.2.2/wp-includes/css/classic-themes.min.css
IP
192.0.77.37:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Hash
1a0804b1a9d09705657f91fe7cad4c5a
feeece6f0b3e0bcf090547c475329a2772f6b26b
dcd9f488bd62ba0ee403b07a97e40b9ffd63a0eff61091588c913b16d5153d48
GET /c/6.2.2/wp-includes/css/classic-themes.min.css HTTP/1.1
Host: c0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: text/css
content-length: 291
last-modified: Mon, 13 Feb 2023 20:50:19 GMT
expires: Tue, 04 Jun 2024 18:48:27 GMT
cache-control: max-age=31536000
strict-transport-security: max-age=15552000
x-nc: HIT arn 2
timing-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
nsw2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png
188.114.96.1
200 OK
15671
URL
GET
HTTP/3
nsw2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png
IP
188.114.96.1:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
PNG image data, 350 x 350, 8-bit colormap, non-interlaced\012- data
Hash
134fce13c189ed0e483a1bddb6406204
eed559ac52e9731c56a1fb03eb94fc82e551bb66
723597ec6e9461e79c420faf0454170cf6f9243246a4fac3cef5f05a4b5be791
GET /wp-content/plugins/chp-ads-block-detector/assets/img/icon.png HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/doom-switch-xci-nsp
Cookie: cf_clearance=8NtV7LxXnMmKah26IYPww0KY_LVcM_RhHjdzWk._u9k-1685990902-0-160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/png
content-length: 15671
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Mon, 15 May 2023 23:42:50 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 34025
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fP5l8QT5Lp%2FnuoqmPw6vXeOJzQ5v%2BVSsK%2FP5DaLIgQ7pWtfCIdvZn%2B6psaNDLhvuzz8zGmsWSeEr5VW%2BOs5YLGVJjwmx0TiFr8HH63xnX5%2Fd%2Bz3UsQWkDZOXkFM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2a97026e9dfab8-OSL
alt-svc: h3=":443"; ma=86400
i0.wp.com/images.vfl.ru/ii/1667485067/b3f90ee8/38633676.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
10874
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1667485067/b3f90ee8/38633676.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
55473ced46ee7b2c3ebfe99006c8fcbc
c4fcc42638388d595c03927b0661ecbf7ad69678
53981062ac0743bf339898075ec08151de47c5b0fa9039b708bd80e679f668b5
GET /images.vfl.ru/ii/1667485067/b3f90ee8/38633676.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 10874
last-modified: Wed, 17 May 2023 13:16:59 GMT
expires: Sat, 17 May 2025 01:16:59 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1667485067/b3f90ee8/38633676.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "60e070fa86c100a6"
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.28
188.114.96.1
200 OK
21
URL
GET
HTTP/3
nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.28
IP
188.114.96.1:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
ASCII text, with no line terminators
Hash
7b5568740085d86e99a5b2b3e3451cf7
0e46d43f176a16789e65b3a786fd418fec4d1c38
c1673ed04d0735a2c9fcfcb9c77d9f19e5fc6937feb503e99090bdc24ea0eea2
GET /wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.28 HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/doom-switch-xci-nsp
Cookie: cf_clearance=8NtV7LxXnMmKah26IYPww0KY_LVcM_RhHjdzWk._u9k-1685990902-0-160
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: application/javascript
content-length: 21
cache-control: public, max-age=16070400
cf-bgj: minify
alt-svc: h3=":443"; ma=86400
expires: max-age=A10368000, public
last-modified: Fri, 14 Apr 2023 19:16:18 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 34025
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0toqFIGlYbtbZ4PHkPZ%2BXbbXP5O5QHNDzftqPQpGc3Xrdin%2BqBWW8PsBxxtL%2F7G0ikwNXeupsrYdmhLpvO7b3zlDn1sDjk7JqETNX7tLuSI%2FMZhNxq3ZuAogk04%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2a9702df09fab8-OSL
nsw2u.com/wp-content/plugins/ad-inserter/images/ads.png
188.114.96.1
200 OK
95
URL
GET
HTTP/3
nsw2u.com/wp-content/plugins/ad-inserter/images/ads.png
IP
188.114.96.1:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
PNG image data, 1 x 1, 1-bit colormap, non-interlaced\012- data
Hash
71a50dbba44c78128b221b7df7bb51f1
0ec63b140374ba704a58fa0c743cb357683313dd
3eb10792d1f0c7e07e7248273540f1952d9a5a2996f4b5df70ab026cd9f05517
GET /wp-content/plugins/ad-inserter/images/ads.png HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/doom-switch-xci-nsp
Cookie: cf_clearance=8NtV7LxXnMmKah26IYPww0KY_LVcM_RhHjdzWk._u9k-1685990902-0-160
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/png
content-length: 95
cache-control: public, max-age=16070400
expires: max-age=A10368000, public
last-modified: Fri, 14 Apr 2023 19:16:17 GMT
vary: User-Agent, Accept-Encoding
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 34025
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ypF6Yzg8Uzxu9rZv0ItxeIzdTb4KsmsixA1AKo2z8noCAZboFrLLGRZIwNTrO3CrNLcjmJNCspSea9ukETqqIyPtq1PRIC28aSvRzJ2OsNKAoLe9yGqUW8VPCMQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2a9702df0afab8-OSL
nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.28
188.114.96.1
200 OK
22
URL
GET
HTTP/3
nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.28
IP
188.114.96.1:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
ASCII text, with no line terminators
Hash
41bd53fe0ee631d5cfd895e18a53291d
9d9d3c42c53ad7f906cb083a0d2d37afb4537764
dfb2e16986e257b608b45d14396378a8f2ac6a7321c0dc2f13c66a33ec8e4a40
GET /wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.28 HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/doom-switch-xci-nsp
Cookie: cf_clearance=8NtV7LxXnMmKah26IYPww0KY_LVcM_RhHjdzWk._u9k-1685990902-0-160
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: application/javascript
content-length: 22
cache-control: public, max-age=16070400
cf-bgj: minify
cf-polished: origSize=24
expires: max-age=A10368000, public
last-modified: Fri, 14 Apr 2023 19:16:17 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 34025
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FdM%2FFnVstSlOTpwEXvXkI0Jn3Q2gHUzEtcspfpb9i5opSvce9uwSghYiFZtlz1j13m%2Fm%2BrnnV7Jq7PcwT7tKVqWM5ts4gX5IAkI1qD0p1Ka1NIz8Nqjqes6GgNc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2a9702df0cfab8-OSL
alt-svc: h3=":443"; ma=86400
i0.wp.com/images.vfl.ru/ii/1669375359/243cfd1a/38654662.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
14008
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1669375359/243cfd1a/38654662.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
2d0de84889daf001d4fe25311de7c748
438167bbd8a4da998c94107a9da9a885e60c9b35
5e05c163fb80b4076fa2986037c539ddc56d2011e5fc44f60bd0a0910f2de20e
GET /images.vfl.ru/ii/1669375359/243cfd1a/38654662.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 14008
last-modified: Wed, 17 May 2023 13:16:59 GMT
expires: Sat, 17 May 2025 01:16:59 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1669375359/243cfd1a/38654662.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "eb9b1bb61c41d633"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1
192.0.77.2
200 OK
31608
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
3dde27351094fd110611b7099df7612d
1f8633afc647ab96114d9cd7b87b2e1bd9d73fae
f7118208621987432e4309b2429b3ca26191166ec2b5b4dfab15204958f9de33
GET /images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 31608
last-modified: Sat, 25 Mar 2023 13:28:37 GMT
expires: Tue, 25 Mar 2025 01:28:37 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "5948b74d64865dea"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1679738619/4429b61e/38826218.jpg?ssl=1
192.0.77.2
200 OK
23824
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1679738619/4429b61e/38826218.jpg?ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
0d5d00d2bddc5fc46b487ee7526be1b1
70f1125a9b148ca9ca45b8150bb0d9e64446d405
d2846967d75c27d3e1693d3f91532d1bfbb6750bcc1c544d3d9e200c34b5b3ad
GET /images.vfl.ru/ii/1679738619/4429b61e/38826218.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 23824
last-modified: Sat, 25 Mar 2023 10:05:58 GMT
expires: Mon, 24 Mar 2025 22:05:58 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1679738619/4429b61e/38826218.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "ffe38a63a8792d3c"
vary: Accept
x-nc: HIT arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2023/03/The-Last-Spell-GoldBerg-PC.jpg?ssl=1
192.0.77.2
200 OK
21598
URL
GET
HTTP/2
i0.wp.com/game-2u.com/wp-content/uploads/2023/03/The-Last-Spell-GoldBerg-PC.jpg?ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
92cbf9f8ad7b96112ce683c394cfdc91
a529da1890b74e024926b93070329875c2269e3d
9a7588c1f43249cfda1bc2d0903f2072f9237208c427ede323b4d2738323f8e6
GET /game-2u.com/wp-content/uploads/2023/03/The-Last-Spell-GoldBerg-PC.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 21598
last-modified: Wed, 24 May 2023 00:17:23 GMT
expires: Fri, 23 May 2025 12:17:23 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2023/03/The-Last-Spell-GoldBerg-PC.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7308288dd0a397e9"
vary: Accept
x-nc: HIT arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?ssl=1
192.0.77.2
200 OK
12042
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 549x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
10a8a711c6faa0d08703483686e5b8f7
fa2a6bbfa09a005d6c900c354301c42856e11d96
c010cae4bd876aded1ddef373f4b06fb6501f4258766ea2a1d225a18580ecb0c
GET /images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 12042
last-modified: Sat, 25 Mar 2023 01:33:02 GMT
expires: Mon, 24 Mar 2025 13:33:02 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1679707845/154521c0/38824712.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "c4584129a86ae2c1"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1667922247/a3e9c55a/38637769.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
10442
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1667922247/a3e9c55a/38637769.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
79b891d5bcb9e78dd5305869191dcd3d
dde0f92b92e027e9c606728ece6576923cbc52e3
d6edc51ee1a374d31a5e8b8d0520e0760b8338aab27ccdf2aa30a6a8337679fd
GET /images.vfl.ru/ii/1667922247/a3e9c55a/38637769.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 10442
last-modified: Mon, 15 May 2023 22:03:02 GMT
expires: Thu, 15 May 2025 10:03:02 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1667922247/a3e9c55a/38637769.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7156d99e3892042c"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1667922429/c6e5e3fa/38637770.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
11726
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1667922429/c6e5e3fa/38637770.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
aa6aea40861f4e4163b87b450cde9c7e
a88ede460723f410745c4b2451a2031550545b2e
eb9b54ea9bf370a939ae445f9a413474174f65ecff82f1dae7e09cb40687bb5b
GET /images.vfl.ru/ii/1667922429/c6e5e3fa/38637770.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 11726
last-modified: Tue, 16 May 2023 17:52:37 GMT
expires: Fri, 16 May 2025 05:52:37 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1667922429/c6e5e3fa/38637770.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "0f945ea115012a60"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=200%2C200&ssl=1
192.0.77.2
200 OK
2734
URL
GET
HTTP/2
i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image\012- data
Hash
ae58f5f8d93958f30ee4edffe1e3c6bb
7957b10b6f0faabd5ffc655a9698ca0bbc6bd708
dd21bb2f24c912107f1df2b4f6adc9ac747047e1c911a4f5319aa8966e532f1c
GET /nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 2734
last-modified: Fri, 28 Oct 2022 09:04:59 GMT
expires: Sun, 27 Oct 2024 21:04:59 GMT
cache-control: public, max-age=63115200
link: <https://nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ab7fb3ec3d012ba6"
vary: Accept
x-nc: HIT arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1669801198/18d9647c/38657837.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
7818
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1669801198/18d9647c/38657837.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
be07a3f2db2eace56f7df3f78894fca8
8e65dbde4ea2283e2bcbb7d0d911ef861142d403
6845300d33cae612d9492b78ead6b905dc8a767f85a31676a4edceb40127845c
GET /images.vfl.ru/ii/1669801198/18d9647c/38657837.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 7818
last-modified: Wed, 17 May 2023 13:16:59 GMT
expires: Sat, 17 May 2025 01:16:59 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1669801198/18d9647c/38657837.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "cfc6705945ce67d3"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1669564070/c5cf1365/38655710.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
7762
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1669564070/c5cf1365/38655710.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
e7baefad47d6e5eba8c00e698ec40a9b
2ae1da7acfe323e61bb8591bf4e21718eec0a07f
dcc5fbc1a06a25afada7603483c9bd22dbb18912e9f04b84bf58ba049ec27b88
GET /images.vfl.ru/ii/1669564070/c5cf1365/38655710.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 7762
last-modified: Wed, 17 May 2023 13:16:59 GMT
expires: Sat, 17 May 2025 01:16:59 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1669564070/c5cf1365/38655710.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "35c83120a522250c"
vary: Accept
x-nc: HIT arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1642250333/fb2e40a2/37551870.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
6586
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1642250333/fb2e40a2/37551870.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
a8b7bd9d71982a5d6ccdba5d85599d82
5f016a731c8a7acb86f11f65d1d1ac39684bccde
1b4ab922121786f4c16ddb863b08b91d3c4fb9caba7ad5e7339c823d362cb1ff
GET /images.vfl.ru/ii/1642250333/fb2e40a2/37551870.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 6586
last-modified: Wed, 17 May 2023 09:09:41 GMT
expires: Fri, 16 May 2025 21:09:41 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1642250333/fb2e40a2/37551870.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "62f6acd8ad9d53ed"
vary: Accept
x-nc: HIT arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2023/04/Card-Survival-Tropical-Island-v104k-PC.jpg?ssl=1
192.0.77.2
200 OK
13678
URL
GET
HTTP/2
i0.wp.com/game-2u.com/wp-content/uploads/2023/04/Card-Survival-Tropical-Island-v104k-PC.jpg?ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
410f75c51e485a92a4098f7445c4475b
548fcc333f432bd29c3c97cee7da741edc3ba799
90897b670aaf6e92a9996bc5b7c790b6ba8297f1ed722f2f179521d3847811c7
GET /game-2u.com/wp-content/uploads/2023/04/Card-Survival-Tropical-Island-v104k-PC.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 13678
last-modified: Mon, 29 May 2023 12:07:38 GMT
expires: Thu, 29 May 2025 00:07:38 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2023/04/Card-Survival-Tropical-Island-v104k-PC.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "839b70c5a6b17157"
vary: Accept
x-nc: HIT arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/game-2u.com/wp-content/uploads/2023/05/Absolute-Drift-v253b773-PC.jpg?ssl=1
192.0.77.2
200 OK
6024
URL
GET
HTTP/2
i0.wp.com/game-2u.com/wp-content/uploads/2023/05/Absolute-Drift-v253b773-PC.jpg?ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 241x339, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
7f3069a9095359a32d3eff2f9e5339df
9e40b86f9c5773256f33c0f4d5fd72a91bce2156
351fb05724f4df4fe8472b3e8f8e9141cb217f6bfc1e1ca0b64a53ffa5385ca1
GET /game-2u.com/wp-content/uploads/2023/05/Absolute-Drift-v253b773-PC.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 6024
last-modified: Mon, 29 May 2023 12:15:09 GMT
expires: Thu, 29 May 2025 00:15:09 GMT
cache-control: public, max-age=63115200
link: <https://game-2u.com/wp-content/uploads/2023/05/Absolute-Drift-v253b773-PC.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f7f279af8bc4a343"
vary: Accept
x-nc: HIT arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.vfl.ru/ii/1659626961/946b2a41/38516846.jpg?resize=200%2C200&ssl=1
192.0.77.2
200 OK
9702
URL
GET
HTTP/2
i0.wp.com/images.vfl.ru/ii/1659626961/946b2a41/38516846.jpg?resize=200%2C200&ssl=1
IP
192.0.77.2:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Magic
RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash
1bb636cbc4bf45105ea09f678ec75095
95ab741b213cdf879782c361d4b305eaa169627d
bab239986bea594efd10c82ca1bb36dab2fd45a75c18448c6ba963cc59ab41a6
GET /images.vfl.ru/ii/1659626961/946b2a41/38516846.jpg?resize=200%2C200&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: image/webp
content-length: 9702
last-modified: Tue, 18 Oct 2022 22:29:18 GMT
expires: Fri, 18 Oct 2024 10:29:18 GMT
cache-control: public, max-age=63115200
link: <https://images.vfl.ru/ii/1659626961/946b2a41/38516846.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "3fe814ac9b579a80"
vary: Accept
x-nc: HIT arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.28
188.114.96.1
200 OK
23
URL
GET
HTTP/3
nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.28
IP
188.114.96.1:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintC3:E1:F1:94:E2:4D:02:FF:E7:22:0C:84:DB:E0:04:E6:FA:70:3B:41
ValidityTue, 12 Jul 2022 00:00:00 GMT - Wed, 12 Jul 2023 23:59:59 GMT
Magic
ASCII text, with no line terminators
Hash
e509c98a0bcad0ce8e6248ac8eb31de1
ec5fe203df631088270b5f2b0b7a85498a2aeb8b
352ea4dd2d545563bef7eb0ba6d6ebfe4bc9d9e51ab00d9c925cb9e103edee63
GET /wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.28 HTTP/1.1
Host: nsw2u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/doom-switch-xci-nsp
Cookie: cf_clearance=8NtV7LxXnMmKah26IYPww0KY_LVcM_RhHjdzWk._u9k-1685990902-0-160
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: application/javascript
content-length: 23
cache-control: public, max-age=16070400
cf-bgj: minify
cf-polished: origSize=25
expires: max-age=A10368000, public
last-modified: Fri, 14 Apr 2023 19:16:17 GMT
vary: User-Agent, Accept-Encoding
cf-cache-status: HIT
age: 34025
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B0Gy6dI3w7STwK6l%2BvTmlOWrJKfCSx7X6TD9KxJCYZhr0XPC%2BSbLY7VsnGSclPr4NHu6LtRmpsvUxQv4sZoMk%2FW4%2FZJ%2B8FAX7v0hiPEVtcP4NGqGxRZd3YS0ZwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2a97031f4ffab8-OSL
alt-svc: h3=":443"; ma=86400
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.2.2
104.17.25.14
200 OK
1101
URL
GET
HTTP/2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.2.2
IP
104.17.25.14:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (3036)
Hash
94279a9a0c4060a96efcf1da47716f86
ea88b3fd8b01a8b86edfd0f4120cc9a834893018
d41c6733a8c4a3a7f08204de8e3d60e1d2baf17dd7f675a26830fb1047fac40a
GET /ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.2.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 1101
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-bf7"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 512522
expires: Sat, 25 May 2024 18:48:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=utPkviu0IDMOVPBTNbKrbDGg5hWQgR87of3ORtVMg%2BDWZwbZNjHJ1rNLW0x3LTB5ix9gAyP%2FbeAVOIuDzTgw4hC1u0bDNT3gqD1H%2FP41nSI0x1oorpvDAaNBl%2FGtA%2BviD8rptXmD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2a97036f310b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.2.2
104.17.25.14
200 OK
677
URL
GET
HTTP/2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.2.2
IP
104.17.25.14:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (1845)
Hash
f6a3dd4ecbf227acbafcff33d68dc71d
7421115ddcd5d436b89a1fd27e0cdce5a01978e6
30b2271be76ee2dd43122d0611f8aa498b9781f4cd03904ca12e12d2e91e9421
GET /ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.2.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 677
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-750"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1478003
expires: Sat, 25 May 2024 18:48:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qjgyg9ZzUHrXkTlX7iy84jAjG%2BQqNOewmToYScroDCzch4y%2FsOCAkhp7fA%2Bp2oMrZhrXgNbuDb55pnzuJNXE2S9yfNsUH0mNVDa0CpylAMVjLnWMw1lEhQlW6FHdMLTTDyCCUxqR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2a97037f3a0b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.2.2
104.17.25.14
200 OK
3150
URL
GET
HTTP/2
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.2.2
IP
104.17.25.14:443
Requested by
https://nsw2u.com/doom-switch-xci-nsp
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintA9:11:71:07:07:92:48:7E:A9:3C:E8:32:25:3F:EB:AC:7D:51:7E:8F
ValidityWed, 03 Aug 2022 00:00:00 GMT - Wed, 02 Aug 2023 23:59:59 GMT
Magic
ASCII text, with very long lines (7862)
Hash
45bacd312d5098b4b59f563d8756c15d
fa55e2cff078381e5365d95782a95a787d0b7192
3d9120fa621da6d613c1698b7014ec6bdf4620366e8f2b7b547059f4b6f6272b
GET /ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.2.2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nsw2u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Jun 2023 18:48:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 3150
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60641588-1ed1"
last-modified: Wed, 31 Mar 2021 06:24:08 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 6982864
expires: Sat, 25 May 2024 18:48:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SljZxi50O3X1RTmywqHsA31N9tfyxlJfcTIi8GUILB8EiwPMnnYVd2vsULyjcOpKowZvBJiYxDDAU4Yq9YJQoJNx90%2BEKh5%2FiwPsD329JJ%2BcGWLn%2FTW66XHstay2xFbDdO8v52TK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7d2a97036f360b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131
471