Overview

URL go.rickolderman.com/
IP104.16.12.194
ASNCLOUDFLARENET
Location
Report completed2022-09-24 14:36:22 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-24 2 go.rickolderman.com/ Phishing
2022-09-24 2 go.rickolderman.com/vendor.js Phishing
2022-09-24 2 go.rickolderman.com/assets/userevents/application.js Phishing
2022-09-24 2 go.rickolderman.com/cdn-cgi/rum? Phishing
2022-09-24 2 go.rickolderman.com/cdn-cgi/rum? Phishing
2022-09-24 2 go.rickolderman.com/assets/pushcrew.js Phishing
2022-09-24 2 go.rickolderman.com/rickolderman Phishing
2022-09-24 2 go.rickolderman.com/cf_stripe_orders.js Phishing
2022-09-24 2 go.rickolderman.com/assets/lander.js Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (30)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-24 04:22:23 UTC 34.117.237.239
mnemonic passive DNS i.vimeocdn.com (2) 3126 2014-03-27 22:24:57 UTC 2022-09-24 07:08:15 UTC 151.101.86.109
mnemonic passive DNS fonts.googleapis.com (2) 8877 2013-06-10 20:14:26 UTC 2022-09-24 07:25:21 UTC 142.250.74.10
mnemonic passive DNS 49vod-adaptive.akamaized.net (1) 119237 2019-11-05 10:46:53 UTC 2022-09-23 18:39:28 UTC 23.36.76.144
mnemonic passive DNS go.rickolderman.com (90) 0 2019-11-20 13:49:43 UTC 2022-08-15 11:41:51 UTC 104.16.14.194 Unknown ranking
mnemonic passive DNS player.vimeo.com (2) 1858 2013-09-26 03:16:08 UTC 2022-09-24 04:45:00 UTC 162.159.128.61
mnemonic passive DNS use.fontawesome.com (2) 942 2017-01-30 04:43:25 UTC 2022-09-24 04:25:54 UTC 172.64.132.15
mnemonic passive DNS prod.cbstatic.net (1) 108120 2020-02-07 18:16:03 UTC 2022-09-24 11:31:30 UTC 18.165.122.81
mnemonic passive DNS www.facebook.com (1) 99 2017-01-30 05:00:00 UTC 2022-09-24 04:14:02 UTC 157.240.200.35
mnemonic passive DNS fresnel.vimeocdn.com (1) 3128 2014-12-13 09:04:00 UTC 2022-09-24 07:08:15 UTC 34.120.202.204
mnemonic passive DNS static.cloudflareinsights.com (1) 1294 2019-09-24 14:34:56 UTC 2022-09-24 07:11:24 UTC 172.64.156.26
mnemonic passive DNS wallstreet.thetrapperuniversity.com (1) 0 2021-09-28 23:04:38 UTC 2022-08-28 13:27:05 UTC 104.16.14.194 Unknown ranking
mnemonic passive DNS fonts.gstatic.com (6) 0 2014-08-29 13:43:22 UTC 2022-09-24 04:21:47 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-24 04:22:29 UTC 34.120.237.76
mnemonic passive DNS ocsp.digicert.com (7) 86 2012-05-21 07:02:23 UTC 2022-09-24 10:17:28 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-24 05:36:42 UTC 52.43.61.95
mnemonic passive DNS ocsp.sca1b.amazontrust.com (2) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 13.224.246.193
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-24 09:41:35 UTC 13.224.245.4
mnemonic passive DNS go.rickolderman.com (90) 0 2019-11-20 13:49:43 UTC 2022-08-15 11:41:51 UTC 104.16.13.194 Unknown ranking
mnemonic passive DNS cdn.cfptaddons.com (3) 237703 2020-10-09 14:11:19 UTC 2022-09-24 11:08:45 UTC 151.101.86.133
mnemonic passive DNS r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-09-24 04:21:50 UTC 23.36.77.32
mnemonic passive DNS connect.facebook.net (1) 139 2012-05-22 02:51:28 UTC 2022-09-24 04:21:59 UTC 157.240.200.14
mnemonic passive DNS app.clickfunnels.com (5) 34727 2015-03-12 08:40:23 UTC 2022-09-24 11:08:45 UTC 104.16.14.194
mnemonic passive DNS bam.nr-data.net (1) 630 2015-02-10 00:06:27 UTC 2022-09-24 04:30:38 UTC 162.247.241.14
mnemonic passive DNS assets.clickfunnels.com (1) 64830 2014-10-08 20:00:20 UTC 2022-09-24 00:08:49 UTC 104.16.14.194
mnemonic passive DNS cbtb.clickbank.net (1) 103233 2015-11-12 08:51:45 UTC 2022-09-24 11:31:29 UTC 52.33.226.99
mnemonic passive DNS f.vimeocdn.com (2) 3234 2014-04-09 18:24:34 UTC 2022-09-24 07:08:14 UTC 151.101.86.109
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-24 04:26:56 UTC 13.224.245.66
mnemonic passive DNS ocsp.pki.goog (11) 175 2017-06-14 07:23:31 UTC 2022-09-24 04:23:20 UTC 142.250.74.3
mnemonic passive DNS js-agent.newrelic.com (1) 378 2017-01-30 05:00:15 UTC 2022-09-24 04:54:11 UTC 151.101.86.137


Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 104.16.12.194

Date UQ / IDS / BL URL IP
2022-11-29 21:55:54 +0000
0 - 0 - 1 internettenpara.biz/ 104.16.12.194
2022-11-23 13:17:41 +0000
0 - 0 - 2 eco-innovation.info/primes-chauffage?utm_sour (...) 104.16.12.194
2022-11-22 00:50:51 +0000
0 - 0 - 5 www.safierussellcpa.com/fofg/?olJ82r7=/WYyZ8X (...) 104.16.12.194
2022-11-05 09:45:43 +0000
0 - 0 - 4 www.safierussellcpa.com/fofg/?8pqld=/WYyZ8XHr (...) 104.16.12.194
2022-11-01 02:33:28 +0000
0 - 0 - 1 fortmyerscoolsculpting.com/ 104.16.12.194

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-12-07 17:08:18 +0000
4 - 0 - 0 www.musclemaximizerreview.com/files/login.php (...) 104.21.89.175
2022-12-07 17:08:16 +0000
4 - 0 - 0 www.musclemaximizerreview.com/files/login.php (...) 104.21.89.175
2022-12-07 17:03:57 +0000
0 - 0 - 5 redirect.accretiveadvisor.com/files/login.php (...) 188.114.97.1
2022-12-07 17:03:35 +0000
0 - 0 - 2 asahidakeropeway.com/files/login.php?user=true 104.21.37.175
2022-12-07 16:57:13 +0000
12 - 0 - 0 verificationspro.com/navyFederal/Sigin-in/NFO (...) 104.21.33.24

Last 2 reports on domain: rickolderman.com

Date UQ / IDS / BL URL IP
2022-10-25 19:43:02 +0000
0 - 0 - 3 www.rickolderman.com/ 172.67.215.26
2022-09-24 14:36:22 +0000
0 - 0 - 9 go.rickolderman.com/ 104.16.12.194

No other reports with similar screenshot



JavaScript

Executed Scripts (38)


Executed Evals (3)

#1 JavaScript::Eval (size: 119, repeated: 1) - SHA256: d7bb5dd71d1e995a9a2e8f188fdf159000e158eee6668a7f1f2cc2a0d6c611f7

                                        createCookie('is_eu', false);
createCookie('c2i5uj6tzv1rh9rc', true, 365);
createCookie('11806611_viewed_1', '6', 365);
                                    

#2 JavaScript::Eval (size: 479, repeated: 1) - SHA256: 1cf61eebb7ee37409dae6d734e51566e77a2ed7caaf76cdc13b82d737f5bc5f5

                                        var slideIndex = 1;
showDivs(slideIndex);

function plusDivs(n) {
    showDivs(slideIndex += n);
}

function showDivs(n) {
    var i;
    var x = document.getElementsByClassName("t");
    if (n > x.length) {
        slideIndex = 1
    }
    if (n < 1) {
        slideIndex = x.length
    }
    for (i = 0; i < x.length; i++) {
        x[i].style.display = "none";
    }
    x[slideIndex - 1].style.display = "flex";
}
                                    

#3 JavaScript::Eval (size: 20304, repeated: 1) - SHA256: 9c1ea695852f01d2fc6027d572b126b740a9c4634540fb0d39ea3656377eef77

                                        function $d(d) {
    return document.getElementById(d)
}
var proc = location.protocol;
if (proc != 'https:') {
    proc = 'http:'
}
var _image_path = proc + '//addthisevent.com/gfx/icon-calendar-t1.png';
var _ate_license = '';
var _ate_mouse = false;
var _ate_css = 'true';
var _ate_callback = '';
var _ate_dropdown = '';
var _ate_lbl_outlook = 'Outlook Calendar';
var _ate_lbl_google = 'Google Calendar';
var _ate_lbl_yahoo = 'Yahoo Calendar';
var _ate_lbl_hotmail = 'Hotmail Calendar';
var _ate_lbl_ical = 'iCal Calendar';
var _ate_lbl_fb_event = 'Facebook Event';
var _ate_show_outlook = true;
var _ate_show_google = true;
var _ate_show_yahoo = true;
var _ate_show_hotmail = true;
var _ate_show_ical = true;
var _ate_show_facebook = true;
var _d_rd = false;
var _ate_btn_found = false;
var _ate_btn_expo = false;
var addthisevent = function() {
    var D = false,
        dropzcx = 1,
        olddrop = '',
        dropmousetim, css1 = false,
        css2 = false;
    return {
        generate: function() {
            try {
                _image_path = _image_path
            } catch (e) {
                _image_path = proc + '//addthisevent.com/gfx/icon-calendar-t1.png'
            }
            try {
                _ate_license = _license
            } catch (e) {}
            try {
                _ate_mouse = _mouse
            } catch (e) {}
            try {
                _ate_css = _css
            } catch (e) {}
            var b = addthisevent.glicense(_ate_license);
            var c = document.getElementsByTagName('*');
            for (var d = 0; d < c.length; d += 1) {
                var f = '',
                    fbevent = false,
                    str = c[d].className,
                    htmx = '';
                if (addthisevent.hasclass(c[d], 'addthisevent')) {
                    var g = c[d].getElementsByTagName('span');
                    for (var m = 0; m < g.length; m += 1) {
                        if (addthisevent.hasclass(g[m], '_url')) {
                            g[m].style.display = 'none'
                        }
                        if (addthisevent.hasclass(g[m], '_start')) {
                            g[m].style.display = 'none';
                            f += '&dstart=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_end')) {
                            g[m].style.display = 'none';
                            f += '&dend=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_zonecode')) {
                            g[m].style.display = 'none';
                            f += '&dzone=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_summary')) {
                            g[m].style.display = 'none';
                            f += '&dsum=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_description')) {
                            g[m].style.display = 'none';
                            f += '&ddesc=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_location')) {
                            g[m].style.display = 'none';
                            f += '&dloca=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_organizer')) {
                            g[m].style.display = 'none';
                            f += '&dorga=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_organizer_email')) {
                            g[m].style.display = 'none';
                            f += '&dorgaem=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_attendees')) {
                            g[m].style.display = 'none';
                            f += '&datte=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_all_day_event')) {
                            g[m].style.display = 'none';
                            f += '&dallday=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_date_format')) {
                            g[m].style.display = 'none';
                            f += '&dateformat=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_alarm_reminder')) {
                            g[m].style.display = 'none';
                            f += '&alarm=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_recurring')) {
                            g[m].style.display = 'none';
                            f += '&drule=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_uid')) {
                            g[m].style.display = 'none';
                            f += '&uid=' + encodeURIComponent(addthisevent.htmlencode(g[m].innerHTML))
                        }
                        if (addthisevent.hasclass(g[m], '_facebook_event')) {
                            if (g[m].innerHTML != '') {
                                g[m].style.display = 'none';
                                var h = g[m].innerHTML.replace(/ /gi, "");
                                f += '&fbevent=' + encodeURIComponent(h);
                                fbevent = true
                            }
                        }
                    }
                    if (b) {
                        f += '&credits=false'
                    }
                    f = f.replace(/'/gi, "�");
                    if (_ate_dropdown != '') {
                        _ate_dropdown = _ate_dropdown + ',';
                        _ate_dropdown = _ate_dropdown.replace(/ /gi, '');
                        var i = _ate_dropdown.split(',');
                        for (var a = 0; a < i.length; a += 1) {
                            if (_ate_show_outlook && i[a] == 'outlook') {
                                htmx += '<span class="ateoutlook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'outlook\',\'' + f + '\');">' + _ate_lbl_outlook + '</span>'
                            }
                            if (_ate_show_google && i[a] == 'google') {
                                htmx += '<span class="ategoogle" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'google\',\'' + f + '\');">' + _ate_lbl_google + '</span>'
                            }
                            if (_ate_show_yahoo && i[a] == 'yahoo') {
                                htmx += '<span class="ateyahoo" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'yahoo\',\'' + f + '\');">' + _ate_lbl_yahoo + '</span>'
                            }
                            if (_ate_show_hotmail && i[a] == 'hotmail') {
                                htmx += '<span class="atehotmail" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'hotmail\',\'' + f + '\');">' + _ate_lbl_hotmail + '</span>'
                            }
                            if (_ate_show_ical && i[a] == 'ical') {
                                htmx += '<span class="ateical" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'ical\',\'' + f + '\');">' + _ate_lbl_ical + '</span>'
                            }
                            if (fbevent && i[a] == 'facebook') {
                                if (_ate_show_facebook && i[a] == 'facebook') {
                                    htmx += '<span class="atefacebook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'facebook\',\'' + f + '\');">' + _ate_lbl_fb_event + '</span>'
                                }
                            }
                        }
                    } else {
                        if (_ate_show_outlook) {
                            htmx += '<span class="ateoutlook" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'outlook\',\'' + f + '\');">' + _ate_lbl_outlook + '</span>'
                        }
                        if (_ate_show_google) {
                            htmx += '<span class="ategoogle" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'google\',\'' + f + '\');">' + _ate_lbl_google + '</span>'
                        }
                        if (_ate_show_yahoo) {
                            htmx += '<span class="ateyahoo" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'yahoo\',\'' + f + '\');">' + _ate_lbl_yahoo + '</span>'
                        }
                        if (_ate_show_hotmail) {
                            htmx += '<span class="atehotmail" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'hotmail\',\'' + f + '\');">' + _ate_lbl_hotmail + '</span>'
                        }
                        if (_ate_show_ical) {
                            htmx += '<span class="ateical" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'ical\',\'' + f + '\');">' + _ate_lbl_ical + '</span>'
                        }
                        if (fbevent) {
                            if (_ate_show_facebook) {
                                htmx += '<span data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'facebook\',\'' + f + '\');">' + _ate_lbl_fb_event + '</span>'
                            }
                        }
                    }
                    if (!b) {
                        htmx += '<em class="copyx"><em class="brx"></em><em class="frs" data-ref="' + dropzcx + '" onclick="addthisevent.cli(this,\'home\');">AddThisEvent</em></em>'
                    }
                    c[d].id = 'atedrop' + dropzcx;
                    c[d].className = c[d].className.replace(/addthisevent/gi, '');
                    c[d].className = c[d].className + ' addthisevent-drop';
                    c[d].title = '';
                    var j = c[d].getAttribute('data-direct');
                    if (j) {
                        c[d].setAttribute('data-url', f);
                        c[d].setAttribute('data-ref', dropzcx);
                        c[d].onclick = function() {
                            addthisevent.direct(this);
                            return false
                        }
                    } else {
                        if (_ate_mouse) {
                            c[d].onmouseover = function() {
                                clearTimeout(dropmousetim);
                                addthisevent.show(this, 'auto', 'auto', true)
                            };
                            c[d].onmouseout = function() {
                                dropmousetim = setTimeout("addthisevent.out();", 200)
                            };
                            c[d].onclick = function() {
                                return false
                            }
                        } else {
                            c[d].onclick = function() {
                                addthisevent.show(this, 'auto', 'auto');
                                return false
                            }
                        }
                    }
                    var k = c[d];
                    var l = document.createElement('span');
                    l.id = 'atedrop' + dropzcx + '-drop';
                    l.className = 'addthisevent_dropdown';
                    l.innerHTML = htmx;
                    k.appendChild(l);
                    dropzcx++;
                    _ate_btn_found = true
                }
            }
            if (_ate_css == 'false') {
                addthisevent.trycss()
            } else {
                addthisevent.applycss(b)
            }
            if (_ate_btn_found && !_ate_btn_expo) {
                _ate_btn_expo = true;
                addthisevent.track({
                    typ: 'exposure',
                    cal: ''
                })
            }
        },
        direct: function(f) {
            var a = f.getAttribute('data-url');
            var b = f.getAttribute('data-direct');
            addthisevent.cli(f, b, a)
        },
        cli: function(f, a, b) {
            var c = '',
                ref = location.href,
                nw = true,
                now = new Date();
            if (a == 'outlook') {
                c = proc + '//addthisevent.com/create/?service=OUTLOOK' + b + '&reference=' + ref;
                nw = false
            }
            if (a == 'google') {
                c = proc + '//addthisevent.com/create/?service=GOOGLE' + b + '&reference=' + ref
            }
            if (a == 'yahoo') {
                c = proc + '//addthisevent.com/create/?service=YAHOO' + b + '&reference=' + ref
            }
            if (a == 'hotmail') {
                c = proc + '//addthisevent.com/create/?service=HOTMAIL' + b + '&reference=' + ref
            }
            if (a == 'ical') {
                c = proc + '//addthisevent.com/create/?service=ICAL' + b + '&reference=' + ref;
                nw = false
            }
            if (a == 'facebook') {
                c = proc + '//addthisevent.com/create/?service=FACEBOOK' + b + '&reference=' + ref
            }
            if (a == 'home') {
                c = proc + '//addthisevent.com/'
            }
            if (c != '') {
                if (a != 'home') {
                    var d = f.getAttribute('data-ref');
                    var g = $d('atedrop' + d);
                    if (g) {
                        var h = g.getAttribute('data-track');
                        if (h != null) {
                            h = h.replace(/ate-calendar/gi, a);
                            try {
                                eval(h)
                            } catch (e) {}
                        }
                    }
                }
                if (!$d('atecllink')) {
                    var j = document.createElement("a");
                    j.id = 'atecllink';
                    j.rel = 'external';
                    j.innerHTML = '{addthisevent-ghost-link}';
                    j.style.display = 'none';
                    document.body.appendChild(j)
                }
                var k = $d('atecllink');
                if (nw) {
                    k.target = '_blank'
                } else {
                    k.target = '_self'
                }
                k.href = c;
                addthisevent.eclick('atecllink')
            }
            addthisevent.track({
                typ: 'click',
                cal: a
            });
            if (_ate_callback) {
                for (var i = 0; i < _ate_callback.length; i++) {
                    try {
                        eval(_ate_callback[i])
                    } catch (e) {
                        alert(e.description)
                    }
                }
            }
        },
        applycss: function(a) {
            if (!css2) {
                var b;
                b = '.addthisevent-drop {display:inline-block;position:relative;font-family:arial;color:#333!important;background:#f4f4f4 url(' + _image_path + ') no-repeat 9px 50%;text-decoration:none!important;border:1px solid #d9d9d9;color:#555;font-weight:bold;font-size:14px;text-decoration:none;padding:9px 12px 8px 35px;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-touch-callout:none;-webkit-user-select:none;-khtml-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;}';
                b += '.addthisevent-drop:hover {border:1px solid #aab9d4;color:#555;font-weight:bold;font-size:14px;text-decoration:none!important;}';
                b += '.addthisevent-drop:active {top:1px;}';
                b += '.addthisevent-selected {background-color:#f7f7f7;}';
                if (a) {
                    b += '.addthisevent_dropdown {width:200px;position:absolute;z-index:99999;padding:0px 0px 0px 0px;background:#fff;text-align:left;display:none;margin-top:-2px;margin-left:-1px;border-top:1px solid #c8c8c8;border-right:1px solid #bebebe;border-bottom:1px solid #a8a8a8;border-left:1px solid #bebebe;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-box-shadow:1px 3px 6px rgba(0,0,0,0.15);-moz-box-shadow:1px 3px 6px rgba(0,0,0,0.15);box-shadow:1px 3px 6px rgba(0,0,0,0.15);}'
                } else {
                    b += '.addthisevent_dropdown {width:200px;position:absolute;z-index:99999;padding:6px 0px 0px 0px;background:#fff;text-align:left;display:none;margin-top:-2px;margin-left:-1px;border-top:1px solid #c8c8c8;border-right:1px solid #bebebe;border-bottom:1px solid #a8a8a8;border-left:1px solid #bebebe;-moz-border-radius:2px;-webkit-border-radius:2px;-webkit-box-shadow:1px 3px 6px rgba(0,0,0,0.15);-moz-box-shadow:1px 3px 6px rgba(0,0,0,0.15);box-shadow:1px 3px 6px rgba(0,0,0,0.15);}'
                }
                b += '.addthisevent_dropdown span {display:block;cursor:pointer;line-height:110%;background:#fff;text-decoration:none;font-size:12px;color:#6d84b4;padding:8px 10px 9px 15px;}';
                b += '.addthisevent_dropdown span:hover {background:#f4f4f4;color:#6d84b4;text-decoration:none;font-size:12px;}';
                b += '.addthisevent span {display:none!important;}';
                b += '.addthisevent-drop ._url,.addthisevent-drop ._start,.addthisevent-drop ._end,.addthisevent-drop ._zonecode,.addthisevent-drop ._summary,.addthisevent-drop ._description,.addthisevent-drop ._location,.addthisevent-drop ._organizer,.addthisevent-drop ._organizer_email,.addthisevent-drop ._facebook_event,.addthisevent-drop ._all_day_event {display:none!important;}';
                b += '.addthisevent_dropdown .copyx {width:200px;height:21px;display:block;position:relative;cursor:default;}';
                b += '.addthisevent_dropdown .brx {width:180px;height:1px;overflow:hidden;background:#e0e0e0;position:absolute;z-index:100;left:10px;top:9px;}';
                b += '.addthisevent_dropdown .frs {position:absolute;top:5px;cursor:pointer;right:10px;padding-left:10px;font-style:normal;font-weight:normal;text-align:right;z-index:101;line-height:110%;background:#fff;text-decoration:none;font-size:9px;color:#cacaca;}';
                b += '.addthisevent_dropdown .frs:hover {color:#999!important;}';
                var c = document.createElement("style");
                c.type = "text/css";
                c.id = "ate_css";
                if (c.styleSheet) {
                    c.styleSheet.cssText = b
                } else {
                    c.appendChild(document.createTextNode(b))
                }
                document.getElementsByTagName("head")[0].appendChild(c);
                css2 = true
            }
        },
        trycss: function() {
            if (!css1) {
                try {
                    var a = '.addthisevent {visibility:hidden;}';
                    a += '.addthisevent-drop ._url,.addthisevent-drop ._start,.addthisevent-drop ._end,.addthisevent-drop ._zonecode,.addthisevent-drop ._summary,.addthisevent-drop ._description,.addthisevent-drop ._location,.addthisevent-drop ._organizer,.addthisevent-drop ._organizer_email,.addthisevent-drop ._attendees,.addthisevent-drop ._facebook_event,.addthisevent-drop ._all_day_event {display:none!important;}';
                    var b = document.createElement("style");
                    b.type = "text/css";
                    if (b.styleSheet) {
                        b.styleSheet.cssText = a
                    } else {
                        b.appendChild(document.createTextNode(a))
                    }
                    document.getElementsByTagName("head")[0].appendChild(b)
                } catch (e) {}
                css1 = true;
                addthisevent.track({
                    typ: 'jsinit',
                    cal: ''
                })
            }
        },
        removecss: function() {
            try {
                return (hdx = $d('ate_css')) ? hdx.parentNode.removeChild(hdx) : false
            } catch (e) {}
        },
        show: function(f, o, a, b) {
            var c = f.id;
            var d = $d(c);
            var g = $d(c + '-drop');
            if (d && g) {
                if (olddrop != c) {
                    addthisevent.hide(olddrop)
                }
                var h = addthisevent.getstyle(g, 'display');
                try {
                    f.blur()
                } catch (e) {};
                if (h == 'block') {
                    if (b) {} else {
                        addthisevent.hide(c)
                    }
                } else {
                    olddrop = c;
                    d.className = d.className + ' addthisevent-selected';
                    d.style.zIndex = addthisevent.topzindex();
                    g.style.left = '0px';
                    g.style.top = '0px';
                    g.style.display = 'block';
                    setTimeout("addthisevent.tim();", 350);
                    D = false;
                    var i = parseInt(d.offsetHeight);
                    var j = parseInt(d.offsetWidth);
                    var k = parseInt(g.offsetHeight);
                    var l = parseInt(g.offsetWidth);
                    var m = addthisevent.viewport();
                    var n = m.split('/');
                    var p = parseInt(n[0]);
                    var q = parseInt(n[1]);
                    var r = parseInt(n[2]);
                    var s = parseInt(n[3]);
                    var t = addthisevent.elementposition(g);
                    var u = t.split('/');
                    var v = parseInt(u[0]);
                    var w = parseInt(u[1]);
                    var x = w + k;
                    var y = q + s;
                    var z = v + l;
                    var A = p + r;
                    var B = 0,
                        dropy = 0;
                    if (o == 'down' && a == 'left') {
                        B = '0px';
                        dropy = i + 'px'
                    } else if (o == 'up' && a == 'left') {
                        B = '0px';
                        dropy = -k + 'px'
                    } else if (o == 'down' && a == 'right') {
                        B = -(l - j) + 'px';
                        dropy = i + 'px'
                    } else if (o == 'up' && a == 'right') {
                        B = -(l - j) + 'px';
                        dropy = -k + 'px'
                    } else if (o == 'auto' && a == 'left') {
                        B = '0px';
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                    } else if (o == 'auto' && a == 'right') {
                        B = -(l - j) + 'px';
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                    } else {
                        if (x > y) {
                            dropy = -k + 'px'
                        } else {
                            dropy = i + 'px'
                        }
                        if (z > A) {
                            B = -(l - j) + 'px'
                        } else {
                            B = '0px'
                        }
                    }
                    g.style.left = B;
                    g.style.top = dropy;
                    var C = 'ontouchstart' in document.documentElement ? 'touchstart' : 'click';
                    if (document.addEventListener) {
                        document.addEventListener(C, function() {
                            if (D) {
                                setTimeout(function() {
                                    addthisevent.force(c)
                                }, 300)
                            }
                        }, false)
                    } else if (document.attachEvent) {
                        document.attachEvent("on" + C, function() {
                            if (D) {
                                setTimeout(function() {
                                    addthisevent.force(c)
                                }, 300)
                            }
                        })
                    } else {
                        document.onclick = function() {
                            addthisevent.force(c)
                        }
                    }
                }
            }
        },
        force: function(f) {
            var a = $d(f);
            var b = $d(f + '-drop');
            if (a && b) {
                if (D && b.style.display == 'block') {
                    setTimeout("addthisevent.hide('" + f + "');", 350)
                }
            }
        },
        out: function() {
            addthisevent.force(olddrop)
        },
        hide: function(f) {
            var a = $d(f);
            var b = $d(f + '-drop');
            if (a && b) {
                a.className = a.className.replace(/addthisevent-selected/gi, '');
                b.style.display = 'none';
                b.style.zIndex = ''
            }
        },
        tim: function() {
            D = true
        },
        topzindex: function() {
            var a = 99999;
            var b = document.getElementsByTagName('*');
            for (var d = 0; d < b.length; d += 1) {
                if (addthisevent.hasclass(b[d], 'addthisevent-drop') || addthisevent.hasclass(b[d], 'addeventstc-drop')) {
                    var c = addthisevent.getstyle(b[d], 'z-index');
                    if (!isNaN(parseFloat(c)) && isFinite(c)) {
                        c = parseInt(c);
                        if (c > a) {
                            a = c
                        }
                    }
                }
            }
            a++;
            return a
        },
        viewport: function() {
            var w = 0,
                h = 0,
                y = 0,
                x = 0;
            if (typeof(window.innerWidth) == 'number') {
                w = window.innerWidth;
                h = window.innerHeight
            } else if (document.documentElement && (document.documentElement.clientWidth || document.documentElement.clientHeight)) {
                w = document.documentElement.clientWidth;
                h = document.documentElement.clientHeight
            } else if (document.body && (document.body.clientWidth || document.body.clientHeight)) {
                w = document.body.clientWidth;
                h = document.body.clientHeight
            }
            if (document.all) {
                x = (document.documentElement.scrollLeft) ? document.documentElement.scrollLeft : document.body.scrollLeft;
                y = (document.documentElement.scrollTop) ? document.documentElement.scrollTop : document.body.scrollTop
            } else {
                x = window.pageXOffset;
                y = window.pageYOffset
            }
            return w + '/' + h + '/' + x + '/' + y
        },
        elementposition: function(a) {
            var x = 0,
                y = 0;
            if (a.offsetParent) {
                x = a.offsetLeft;
                y = a.offsetTop;
                while (a = a.offsetParent) {
                    x += a.offsetLeft;
                    y += a.offsetTop
                }
            }
            return x + '/' + y
        },
        getstyle: function(a, b) {
            var x = a;
            var y;
            if (x.currentStyle) {
                y = x.currentStyle[b]
            } else if (window.getComputedStyle) {
                y = document.defaultView.getComputedStyle(x, null).getPropertyValue(b)
            }
            return y
        },
        glicense: function(f) {
            var b = location.href;
            var c = true;
            var d = f;
            var e = d.length;
            if (e == 20) {
                var a = d.substring(0, 1);
                var z = d.substring(9, 10);
                var m = d.substring(17, 18);
                if (a != 'a') {
                    c = false
                }
                if (z != 'z') {
                    c = false
                }
                if (m != 'm') {
                    c = false
                }
            } else {
                c = false
            }
            if (b.indexOf('addthisevent.com') == -1 && d == 'aao8iuet5zp9iqw5sm9z') {
                c = false
            }
            return c
        },
        refresh: function() {
            var a = document.getElementsByTagName('*');
            for (var d = 0; d < a.length; d += 1) {
                if (addthisevent.hasclass(a[d], 'addthisevent-drop')) {
                    a[d].className = a[d].className.replace(/addthisevent-drop/gi, '');
                    a[d].className = a[d].className.replace(/addthisevent/gi, '');
                    a[d].className = a[d].className + ' addthisevent'
                }
            }
            _ate_btn_expo = false;
            addthisevent.generate()
        },
        callcack: function(f) {
            _ate_callback = f
        },
        setlabel: function(l, t) {
            var x = l.toLowerCase();
            if (x == 'outlook') {
                _ate_lbl_outlook = t
            }
            if (x == 'google') {
                _ate_lbl_google = t
            }
            if (x == 'yahoo') {
                _ate_lbl_yahoo = t
            }
            if (x == 'ical') {
                _ate_lbl_ical = t
            }
            if (x == 'facebookevent') {
                _ate_lbl_fb_event = t
            }
        },
        settings: function(c) {
            if (c.license != undefined) {
                _ate_license = c.license
            }
            if (c.css != undefined) {
                if (c.css) {
                    _ate_css = 'true'
                } else {
                    _ate_css = 'false';
                    addthisevent.removecss()
                }
            }
            if (c.mouse != undefined) {
                _ate_mouse = c.mouse
            }
            if (c.outlook != undefined) {
                if (c.outlook.show != undefined) {
                    _ate_show_outlook = c.outlook.show
                }
            }
            if (c.google != undefined) {
                if (c.google.show != undefined) {
                    _ate_show_google = c.google.show
                }
            }
            if (c.yahoo != undefined) {
                if (c.yahoo.show != undefined) {
                    _ate_show_yahoo = c.yahoo.show
                }
            }
            if (c.hotmail != undefined) {
                if (c.hotmail.show != undefined) {
                    _ate_show_hotmail = c.hotmail.show
                }
            }
            if (c.ical != undefined) {
                if (c.ical.show != undefined) {
                    _ate_show_ical = c.ical.show
                }
            }
            if (c.facebook != undefined) {
                if (c.facebook.show != undefined) {
                    _ate_show_facebook = c.facebook.show
                }
            }
            if (c.outlook != undefined) {
                if (c.outlook.text != undefined) {
                    _ate_lbl_outlook = c.outlook.text
                }
            }
            if (c.google != undefined) {
                if (c.google.text != undefined) {
                    _ate_lbl_google = c.google.text
                }
            }
            if (c.yahoo != undefined) {
                if (c.yahoo.text != undefined) {
                    _ate_lbl_yahoo = c.yahoo.text
                }
            }
            if (c.hotmail != undefined) {
                if (c.hotmail.text != undefined) {
                    _ate_lbl_hotmail = c.hotmail.text
                }
            }
            if (c.ical != undefined) {
                if (c.ical.text != undefined) {
                    _ate_lbl_ical = c.ical.text
                }
            }
            if (c.facebook != undefined) {
                if (c.facebook.text != undefined) {
                    _ate_lbl_fb_event = c.facebook.text
                }
            }
            if (c.dropdown != undefined) {
                if (c.dropdown.order != undefined) {
                    _ate_dropdown = c.dropdown.order
                }
            }
            if (c.callback != undefined) {
                _ate_callback = c.callback
            }
        },
        hasclass: function(e, c) {
            return new RegExp('(\\s|^)' + c + '(\\s|$)').test(e.className)
        },
        htmlencode: function(a) {
            var b = a.replace(/<br\s*[\/]?>/gi, "\n");
            b = b.replace(/<(?:.|\n)*?>/gm, '');
            b = b.replace(/(^\s+|\s+$)/g, '');
            var c = document.createElement("div");
            var d = document.createTextNode(b);
            c.appendChild(d);
            return c.innerHTML
        },
        eclick: function(a) {
            var b = document.getElementById(a);
            if (b.click) {
                b.click()
            } else if (document.createEvent) {
                var c = document.createEvent('MouseEvents');
                c.initEvent('click', true, true);
                b.dispatchEvent(c)
            }
        },
        track: function(a) {
            var b = new Image(1, 1);
            var d = new Date();
            var c = d.getTime();
            var e = encodeURIComponent(window.location.href);
            b.src = proc + '//track.addevent.com/atc/?trktyp=' + a.typ + '&trkcal=' + a.cal + '&guid=' + addthisevent.getguid() + '&url=' + e + '&cache=' + c
        },
        getguid: function() {
            var a = "addevent_track_cookie=",
                coov = '';
            var b = document.cookie.split(';');
            for (var i = 0; i < b.length; i++) {
                var c = b[i];
                while (c.charAt(0) == ' ') {
                    c = c.substring(1, c.length)
                }
                if (c.indexOf(a) == 0) {
                    coov = c.substring(a.length, c.length)
                }
            }
            if (coov == '') {
                var d = (addthisevent.s4() + addthisevent.s4() + "-" + addthisevent.s4() + "-4" + addthisevent.s4().substr(0, 3) + "-" + addthisevent.s4() + "-" + addthisevent.s4() + addthisevent.s4() + addthisevent.s4()).toLowerCase();
                var e = new Date();
                e.setTime(e.getTime() + (365 * 24 * 60 * 60 * 1000));
                var f = "expires=" + e.toUTCString();
                document.cookie = "addevent_track_cookie=" + d + "; " + f;
                coov = d
            }
            return coov
        },
        s4: function() {
            return (((1 + Math.random()) * 0x10000) | 0).toString(16).substring(1)
        }
    }
}();
if (window.addEventListener) {
    window.addEventListener("DOMContentLoaded", function() {
        _d_rd = true;
        addthisevent.trycss();
        addthisevent.generate()
    }, false);
    window.addEventListener("load", function() {
        addthisevent.generate()
    }, false)
} else if (window.attachEvent) {
    window.attachEvent("onreadystatechange", function() {
        _d_rd = true;
        addthisevent.trycss();
        addthisevent.generate()
    });
    window.attachEvent("onload", function() {
        addthisevent.generate()
    })
} else {
    window.onload = function() {
        addthisevent.generate()
    }
}
if (!_d_rd) {
    setTimeout("addthisevent.trycss();addthisevent.generate();", 20)
}
                                    

Executed Writes (0)



HTTP Transactions (160)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         13.224.245.4
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 24 Sep 2022 14:05:41 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 91a147ab5e7c2b851b79e3f97fa5cb38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR62-C3
X-Amz-Cf-Id: A-3_yueIElXOYK-WyV68BNrYWidF1mvOeQvLJSBndO3QGVokNG8tOQ==
Age: 1830


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7101
Expires: Sat, 24 Sep 2022 16:34:32 GMT
Date: Sat, 24 Sep 2022 14:36:11 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         13.224.245.66
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 24 Sep 2022 04:13:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 7945124cc4b7caf5a8180cc1189567ee.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR62-C3
x-amz-cf-id: AZK3l4DbDCRCnffhB-OXl_V0gap3IE8rrFM5WVpZIVQ442yKuNViGA==
age: 37388
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 24 Sep 2022 14:36:11 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         13.224.245.4
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sat, 24 Sep 2022 14:20:46 GMT
Expires: Sat, 24 Sep 2022 14:54:46 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 68589ba2b1a9a54786dcb97934f8038c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR62-C3
X-Amz-Cf-Id: vCuKCPe6pyyca1Il7e4bmjPEzCRQeSkTR2GSh9yo3ocr8Xu27QFk5w==
Age: 925


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET / HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         104.16.13.194
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 24 Sep 2022 14:36:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://go.rickolderman.com/rickolderman
CF-Ray: 74fc403a8aa7b4eb-OSL
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store
Vary: Accept-Encoding
CF-Cache-Status: BYPASS
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
Access-Control-Request-Method: *
Pragma: no-cache
Status: 302 Found
X-Frame-Options: ALLOWALL
X-Powered-By: Phusion Passenger Enterprise 6.0.7
X-Rack-Cache: miss
X-Request-Id: ebaf9935a3ed06b6324671b73f856527
X-Runtime: 0.766378
Set-Cookie: __cf_bm=5I5NL03ZuS8uQhAz_.PhxJ7CIbR2pZz5F21CF2izoGc-1664030172-0-AcZYUR6n2/+GAJG/uedVmbH5TWfkwGk32JVivJrovlj9i8Jy3cjHyaAAJb2TKB846kTYYNAdC+J8J+ej/nioJf05HNAx5KI/C8AZnxFDPARy; path=/; expires=Sat, 24-Sep-22 15:06:12 GMT; domain=.go.rickolderman.com; HttpOnly; SameSite=None
Server: cloudflare
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (471)
Size:   486
Md5:    71ffed1f5b8a8f34bb7b5baee7ed0b62
Sha1:   4f573ecffbb4f9935831c9845db4c99c5a2982dd
Sha256: 043d1e54069a04323f279e0c8964ac93b2ae6e36b0237e02d1c33e7d3cc3abf9

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5741
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:12 GMT
Last-Modified: Sat, 24 Sep 2022 13:00:31 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: IWuuZE6cns1+f1DpxppamA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         52.43.61.95
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EZBRqcrFpsB49oEZNU8lbDyHvJ8=

                                        
                                            GET /images/closemodal.png HTTP/1.1 
Host: assets.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/webp
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 672
cf-ray: 74fc4042af580b02-OSL
accept-ranges: bytes
access-control-allow-origin: *
age: 839214
cache-control: public, max-age=2678400
content-disposition: inline; filename="closemodal.webp"
etag: "630e9cfc-314"
expires: Tue, 25 Oct 2022 14:36:12 GMT
last-modified: Tue, 30 Aug 2022 23:27:56 GMT
strict-transport-security: max-age=0
vary: Accept, Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=788
set-cookie: __cf_bm=CBx1vPqg1KcxpCoOSaWw8KkxmJ6.0SrcbIV0lL5E5S0-1664030172-0-AdfWG6K9nDmZE/G3SjDK2SP4iBt+GZmd7V9q/Del0oQWb6Ttorw1PLin6OlxgerUoIRbQlBsw4GQLGvPQzmv3ycV+3XrAlfHr84HCHZscJJj; path=/; expires=Sat, 24-Sep-22 15:06:12 GMT; domain=.clickfunnels.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   672
Md5:    19754ed4d508cf576c80cf36e0db8c50
Sha1:   f459beac714e5be68aa75349fa806a5642af456a
Sha256: 5216f197f782f4bb872e02a677986af90a488015910f8d3864b796ad68dbd389
                                        
                                            GET /hosted/images/e8/4bf0fd1b43485fbe094c4f94ebb7f8/edqw23.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 6388
cf-ray: 74fc40426a96fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "63b5f5785249401b0815630752bdf977"
last-modified: Mon, 18 Oct 2021 15:07:33 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=idHMU51EBApKG7GofnLNzCeUT2igaXNm7iXd.3e_1Ok-1664030172-0-Ab0-WRyB0GW1l9TNtak_E6wYPtMrUuE3V5pAqjvzB07CTMXIFX_auwQqus3NFMg6SMCEgUC49edcwLqEcxROZwP0n1FXBJ1q3AwbShl7_M5J"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=idHMU51EBApKG7GofnLNzCeUT2igaXNm7iXd.3e_1Ok-1664030172-0-Ab0-WRyB0GW1l9TNtak_E6wYPtMrUuE3V5pAqjvzB07CTMXIFX_auwQqus3NFMg6SMCEgUC49edcwLqEcxROZwP0n1FXBJ1q3AwbShl7_M5J; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 562 x 44, 8-bit gray+alpha, non-interlaced\012- data
Size:   6388
Md5:    63b5f5785249401b0815630752bdf977
Sha1:   7593ea35902399ebc00964e701ad03ae84d9f189
Sha256: 485e76cb731acbe77270488567e8438c38222d1a60e0222b67023a6360c7e8f7
                                        
                                            GET /hosted/images/4a/ce6cdd266442a08bc5744d3a18c731/EW23.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 5444
cf-ray: 74fc40427aa5fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "cf9445b63b165be1fd97d0b86aee3cd7"
last-modified: Mon, 18 Oct 2021 15:52:08 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 179 x 149, 8-bit colormap, non-interlaced\012- data
Size:   5444
Md5:    cf9445b63b165be1fd97d0b86aee3cd7
Sha1:   412e49862ccb4be6ece2ce9d6064d4133668c1da
Sha256: 37329591379f4ddee8958ed6d55062488d37cf39dbc5758b7863bf3453cf7785
                                        
                                            GET /hosted/images/38/4fbcc23657449ab737b4e663532fb2/SDCWE.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 4806
cf-ray: 74fc40427aa6fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d3cd12a5183460bae9ebaaf3409a1579"
last-modified: Mon, 18 Oct 2021 15:57:18 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 184 x 153, 8-bit colormap, non-interlaced\012- data
Size:   4806
Md5:    d3cd12a5183460bae9ebaaf3409a1579
Sha1:   6e0ee825e7b8c84bfd55661d18ba7936aa1ba2a2
Sha256: dedb80b578d632ba631b6a09357ce96d60c7796a31aa041620056f042d7be27f
                                        
                                            GET /hosted/images/92/83b330551c11e8a71c67b351fa171d/screen.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 66864
cf-ray: 74fc40426a95fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "1d9e44a9fe43775f45f4e18b73c37989"
last-modified: Fri, 11 May 2018 13:09:49 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC (Macintosh), datetime=2018:05:11 23:09:11], progressive, precision 8, 1275x717, components 3\012- data
Size:   66864
Md5:    1d9e44a9fe43775f45f4e18b73c37989
Sha1:   943d1bcbcf7a04a616f5a8074ea1c7aca6b3e216
Sha256: cb6f5b7f5cef5551242b002a99935e25c02f4a686a7a4d914504145893332ec4
                                        
                                            GET /hosted/images/0a/8895b545e14ff5b0fdd1dc45d81570/product-p.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 139230
cf-ray: 74fc40427a9ffab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "267b71761403c33fdae5567aa4505504"
last-modified: Sun, 13 Dec 2020 05:41:48 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 720 x 326, 8-bit/color RGBA, non-interlaced\012- data
Size:   139230
Md5:    267b71761403c33fdae5567aa4505504
Sha1:   01f11ac8e0ad071036ee8b0d627fb7b0efec9f70
Sha256: 3692c7ee251fb8c07f4a0d3e1744869798f939e0914dbc61f95bd4c252e1c8ed
                                        
                                            GET /hosted/images/77/35a28f47274bacbc259f80b5d9b2ea/arrow-dotted-down.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 8185
cf-ray: 74fc40429ad3fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "97c8ff7a089ace5b964586c6328fc8c3"
last-modified: Sun, 05 Jul 2020 14:25:37 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 498 x 499, 8-bit colormap, non-interlaced\012- data
Size:   8185
Md5:    97c8ff7a089ace5b964586c6328fc8c3
Sha1:   451e104c2622ef0fe79dd97064968eab1d0caf75
Sha256: 3dcead7a551cd23f6bf43843a4374e09615c0fc5b5742543b7f0ba7222deb913
                                        
                                            GET /hosted/images/20/df38b752544707a2d7a07d517d01db/bills.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 20520
cf-ray: 74fc40426a98fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b40b5c774787e4ab6da80d3c3e279886"
last-modified: Sun, 23 Aug 2020 15:29:26 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, description=Tablets, syringe vaccine and euro bills on white background. Expensive medicine concept.\377\342\014XICC_PROFILE], progressive, precision 8, 509x339, components 3\012- data
Size:   20520
Md5:    b40b5c774787e4ab6da80d3c3e279886
Sha1:   a8660c826dee45695a073abbe706b620ac676484
Sha256: 771768d50c3a9ba77c65c092c44778f282d79d23f1ccf748b32853c0d0718452
                                        
                                            GET /hosted/images/a6/8ff6a5e3a0425c8e75363e3233dcb3/WEQ23.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 4776
cf-ray: 74fc40427aa7fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "0b490dcd695598ef518ffac6bbac500e"
last-modified: Mon, 18 Oct 2021 15:59:24 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 169 x 137, 8-bit colormap, non-interlaced\012- data
Size:   4776
Md5:    0b490dcd695598ef518ffac6bbac500e
Sha1:   c1f7f035947df37511fe834d18ee19ec7103844d
Sha256: 0f9935b8021771899be1c112e4559c8d2c5c3afc1dcac10240dd1f37c2b8c439
                                        
                                            GET /hosted/images/29/fe2b270285490aa7eb36ce2c57b783/arrow-dotted-right.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 7810
cf-ray: 74fc40429ad6fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "4d8e87e78abacc0907ec1aead0abb0e4"
last-modified: Wed, 29 Apr 2020 20:09:51 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 498 x 499, 8-bit colormap, non-interlaced\012- data
Size:   7810
Md5:    4d8e87e78abacc0907ec1aead0abb0e4
Sha1:   8cd1775d2710c28d86016d866796d8b780fa3ffe
Sha256: d795e98cfbfa57ea334e185512d41277684157a7d4f2245659b48bd89897a402
                                        
                                            GET /hosted/images/96/1d98590536469dbff2f0460f6d2191/ESAESDQW32.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 4878
cf-ray: 74fc40428aacfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "43fd309d8957a45352d48408c8fdbdc2"
last-modified: Mon, 18 Oct 2021 16:05:48 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 153 x 131, 8-bit colormap, non-interlaced\012- data
Size:   4878
Md5:    43fd309d8957a45352d48408c8fdbdc2
Sha1:   3ee5dc2a504253a6a1c66e29bcca6ee58e2f3ebc
Sha256: d60300c9875454a917705e12513c412616bdcc4d97a514323ebaff8cb41e3d28
                                        
                                            GET /hosted/images/49/c4c93835b047388ca50f3a5eb36e5b/addCart.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 22719
cf-ray: 74fc40427aa4fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "5e5c6081116b9da4e0b64be8d8157c12"
last-modified: Mon, 06 Jul 2020 04:58:45 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 540 x 190, 8-bit colormap, non-interlaced\012- data
Size:   22719
Md5:    5e5c6081116b9da4e0b64be8d8157c12
Sha1:   3a0587f417969f72b851fea059b7b3d0229662e2
Sha256: ab9844422e31836eeafc10057c3d735c5c04156889159f245803162e6e2466ee
                                        
                                            GET /hosted/images/e0/06cfd994f947dcac1ee310d9f89fab/index.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 7892
cf-ray: 74fc4042aaeafab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6a462ee6a86bfc5968d6c9a42b5553ac"
last-modified: Thu, 27 Aug 2020 06:51:10 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 286x176, components 3\012- data
Size:   7892
Md5:    6a462ee6a86bfc5968d6c9a42b5553ac
Sha1:   6ebce9964e2a0a60f3a4e1bc9b0dd63beb3d4c2e
Sha256: 75b43fe79b5a7348e4e4e63e8f81da265efd0b17e651e3632e25bd350d26e041
                                        
                                            GET /hosted/images/4d/7b5e4d35624408981577cf7bfc0ce6/Rick_Seminar2.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 334916
cf-ray: 74fc40428ab6fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e4cb1126bb24c0472abfbcdb4252c2fe"
last-modified: Sat, 29 Aug 2020 09:59:25 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 2000x1331, components 3\012- data
Size:   334916
Md5:    e4cb1126bb24c0472abfbcdb4252c2fe
Sha1:   97abd9ab8d6a156c1318ee75b0f5082512d7aeab
Sha256: 2d02737a88dbd269bdefdb24a9ebf5425db8cec0003a11d99f469d9f6505f073
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /hosted/images/9f/9ccf3aa0794a74bdc14373c0be1247/HIP.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 77158
cf-ray: 74fc4042bafbfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "5f6536e4aa66e3affed744be4daaac10"
last-modified: Sun, 30 Aug 2020 10:06:49 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "AppleMark", Exif Standard: [TIFF image data, big-endian, direntries=12, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, orientation=upper-left, xresolution=178, yresolution=186, resolutionunit=2, software=QuickTime 7.7.1, datetime=2012:10:20 15:55:42, hostcomputer=Mac OS X 10.7.4], progressive, precision 8, 1152x1728, components 3\012- data
Size:   77158
Md5:    5f6536e4aa66e3affed744be4daaac10
Sha1:   1f35e24af0a43dc42214b79e76823949c569cb96
Sha256: 1bde96a3672cb89f3a91064930b8f08ebf1690b2cfc660993bca62f6546e277d
                                        
                                            GET /hosted/images/10/47e16a3ddf4f948a79927f5374a355/EW3232.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 4821
cf-ray: 74fc40428aabfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "0a7ea0f9a43a7359f0d32b5972956ccc"
last-modified: Mon, 18 Oct 2021 16:03:31 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 159 x 135, 8-bit colormap, non-interlaced\012- data
Size:   4821
Md5:    0a7ea0f9a43a7359f0d32b5972956ccc
Sha1:   f6613c046104a286362a3f5f408bb229764688f4
Sha256: d622067011d5b831f635c125db59b0bdfff459cc952a03861533cb02a34667dc
                                        
                                            GET /hosted/images/bf/612d5489bc4a55b025e563ebc21a79/product-d.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 52152
cf-ray: 74fc40427a9dfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "12b39400cbe083a90f34b28eea28071a"
last-modified: Sun, 13 Dec 2020 05:43:36 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 720 x 326, 8-bit/color RGBA, non-interlaced\012- data
Size:   52152
Md5:    12b39400cbe083a90f34b28eea28071a
Sha1:   0979609331882621e0b18bcf95899e113295a49c
Sha256: 610b4ad19cd0479c9ad979a84784cf4a835d82224c866cc52ebd3342ddcdd2b3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /hosted/images/55/633eae701a4801bb4b21ed51bd2e22/check.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 20245
cf-ray: 74fc40427a9cfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6503825592ae455142077f195edd6c56"
last-modified: Sun, 23 Aug 2020 15:50:54 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1792 x 1792, 8-bit colormap, non-interlaced\012- data
Size:   20245
Md5:    6503825592ae455142077f195edd6c56
Sha1:   068f79b196901444d4fc0aba598644469b8281c1
Sha256: 50c849ab8e08fd5838873a3978c36705011e28cb55906d9d7a25c28768ea67b2
                                        
                                            GET /hosted/images/b5/27414841a846cb9fab538abfda8d1d/ROTATION.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 80488
cf-ray: 74fc4042baf7fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "8212b2a5e33f3a7c7ba936eacdc162c3"
last-modified: Sun, 30 Aug 2020 10:06:03 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, xresolution=160, yresolution=168, resolutionunit=2, datetime=2012:10:20 15:41:48], progressive, precision 8, 1728x1152, components 3\012- data
Size:   80488
Md5:    8212b2a5e33f3a7c7ba936eacdc162c3
Sha1:   3b92c9431689fd85b1439a0c8120b2211707df74
Sha256: 00a0fd462e8503f2ea5cb178c44ebddbcd7d18467a4d66ae5284b9eed28199ea
                                        
                                            GET /hosted/images/57/494df715c6402b9a66bece4aa5d4a2/edqw2323.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 13608
cf-ray: 74fc4042bafffab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "84a7ca83fd7003e93d479e80ab3646d2"
last-modified: Mon, 18 Oct 2021 16:52:27 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 425 x 641, 8-bit colormap, non-interlaced\012- data
Size:   13608
Md5:    84a7ca83fd7003e93d479e80ab3646d2
Sha1:   c1ffbeeda996b6492bb3db90c7f067defe3d8eba
Sha256: a971ecd72015e9f0bb2706f890277c97decdc719558752d6f985cfd73a2ed304
                                        
                                            GET /hosted/images/20/dab7384a5744f3a2c78dd58f0f46db/bfa_arrow-circle-o-down3.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 2745
cf-ray: 74fc40427a9bfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "ee39e2c63e46f08853af6d472411e019"
last-modified: Sun, 23 Aug 2020 16:45:29 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 85 x 85, 8-bit/color RGBA, non-interlaced\012- data
Size:   2745
Md5:    ee39e2c63e46f08853af6d472411e019
Sha1:   7a46daf353350a884dd312f546a5455184cb18be
Sha256: 0bdbf5ebb47a074585ebdfdbb04377d06132878d3cbe4cbba2c957b73cef52ff
                                        
                                            GET /hosted/images/f9/b1a4368dbd4c189e045bf750f772f8/images.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 5164
cf-ray: 74fc4042aae8fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d03e940605f73b6a5ad2a4451ec48679"
last-modified: Sun, 23 Aug 2020 17:54:51 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=vmwnszZipZfvlPqDUXncAoZMf1v47ti5BipROQ.Oxzk-1664030172-0-AcOW2qDDSrxBJnMt-YJ2_edGiDt1aHRx33ns6SDPKq_6Fc68ts-omV68_WIyF1EJ0gibkfTn8JnDzBXLU1Osr0kOIQzeRiHI6fHrW1SwaIuQ"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=vmwnszZipZfvlPqDUXncAoZMf1v47ti5BipROQ.Oxzk-1664030172-0-AcOW2qDDSrxBJnMt-YJ2_edGiDt1aHRx33ns6SDPKq_6Fc68ts-omV68_WIyF1EJ0gibkfTn8JnDzBXLU1Osr0kOIQzeRiHI6fHrW1SwaIuQ; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 275x183, components 3\012- data
Size:   5164
Md5:    d03e940605f73b6a5ad2a4451ec48679
Sha1:   ec3b0118247f85066c11d93800230c31519280ed
Sha256: 02d4f310daf778660979bb2385d06fb9720b04f571cff46d5209ccc6b6da89f4
                                        
                                            GET /hosted/images/be/e54d3a375c4ab98d196edc85852aa4/BACK.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 51457
cf-ray: 74fc4042baf1fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b648f789820b99d983f2f3b7f9ad3ca6"
last-modified: Sun, 30 Aug 2020 10:04:52 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, xresolution=160, yresolution=168, resolutionunit=2, datetime=2012:10:20 10:03:02], progressive, precision 8, 1728x1152, components 3\012- data
Size:   51457
Md5:    b648f789820b99d983f2f3b7f9ad3ca6
Sha1:   00cfdcc1bb2edc5a56b8d9857b069accfa2a8f5e
Sha256: b44effddd337778866b532068accf70d4ad0807d5644266c97e7a1146478c9cd
                                        
                                            GET /hosted/images/c8/051c8e06d447049d6edbda49b04c97/posture-power-how-to-correct-your-bodys-alignment-header-v2-830x467.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 60846
cf-ray: 74fc4042aadffab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "48e1d024c4ef95a543e210e2e6cf8952"
last-modified: Thu, 27 Aug 2020 06:42:47 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=12, height=467, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=830], progressive, precision 8, 830x467, components 3\012- data
Size:   60846
Md5:    48e1d024c4ef95a543e210e2e6cf8952
Sha1:   1dc0225084eb92cd9d343c9b15542fa356527f67
Sha256: 724451a07db9431e6ec5084efebfc869e468e7e5039d4ca65c9de30ef549e232
                                        
                                            GET /hosted/images/7d/1fb95cc85645e78ba3cd2a13f8b2fb/NECK.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 129135
cf-ray: 74fc4042aaedfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "c5bac904f603ddcd9945f8eb1775a68a"
last-modified: Sun, 30 Aug 2020 10:00:09 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=G7yJmYTxXQKkj..oRJnDzZ16T8poX5bEV_suTtyR2tw-1664030172-0-AWa_34d4P5fsliO8Wx0Vn2A9XsnUGgH4SLRbSU9k0pGeQNI38oqOvJyhlLiVlgxW2hbZv_eU5clJQiCAuKGWU9ttF7vBVHlDaHEcYJcUPSoU"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=G7yJmYTxXQKkj..oRJnDzZ16T8poX5bEV_suTtyR2tw-1664030172-0-AWa_34d4P5fsliO8Wx0Vn2A9XsnUGgH4SLRbSU9k0pGeQNI38oqOvJyhlLiVlgxW2hbZv_eU5clJQiCAuKGWU9ttF7vBVHlDaHEcYJcUPSoU; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, xresolution=160, yresolution=168, resolutionunit=2, datetime=2012:10:20 11:23:01], progressive, precision 8, 1728x1152, components 3\012- data
Size:   129135
Md5:    c5bac904f603ddcd9945f8eb1775a68a
Sha1:   888092ec463f77b58278208033d18779b454ec77
Sha256: 99e9f758b3cbb18ea1237c9c489510449ea38f93665de770466edc882711cadd
                                        
                                            GET /hosted/images/11/96e09646c84ac3a919e5ba5dabf502/FRONT.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 93770
cf-ray: 74fc4042baf3fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "2f0cc8103ab2bfdd888c1ffb3d573c47"
last-modified: Sun, 30 Aug 2020 10:05:31 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, xresolution=160, yresolution=168, resolutionunit=2, datetime=2012:10:20 15:29:48], progressive, precision 8, 1728x1152, components 3\012- data
Size:   93770
Md5:    2f0cc8103ab2bfdd888c1ffb3d573c47
Sha1:   aa1b8f9696c98a06c192964c1d66b466572ec236
Sha256: 92aa2f18c8dfa9952415851b5ab89f9a94948c323b2d7f16787a39d3be86e615
                                        
                                            GET /hosted/images/90/5955fd85a14c4e8a7130249add88ac/bigstock-Senior-Group-Friends-Exercise-152470844-1080x675.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 110495
cf-ray: 74fc4042aae4fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "eba1723b588ac5397a83f65634700063"
last-modified: Thu, 27 Aug 2020 06:29:36 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", progressive, precision 8, 1080x675, components 3\012- data
Size:   110495
Md5:    eba1723b588ac5397a83f65634700063
Sha1:   b680e9ea36f5637bec450668c950c522bdf2b742
Sha256: 167aea7cb5a98d53c405d105e07284ad025d612db7a2a2534fed963237627a19
                                        
                                            GET /hosted/images/c5/48f602123340f68038aad3584ee688/banner-figure.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 210390
cf-ray: 74fc4042aaebfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7539ef49b748f460cb78b920f2247a9c"
last-modified: Sun, 23 Aug 2020 19:17:38 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 815 x 550, 8-bit colormap, non-interlaced\012- data
Size:   210390
Md5:    7539ef49b748f460cb78b920f2247a9c
Sha1:   8ee92cfd48c4ac99590117ffa1f9dad468214152
Sha256: 5ea6550cb884d937f0f985a6db32affdcdcb1b586b855be2434308d19a6080b2
                                        
                                            GET /hosted/images/23/e12f0c90c44d0f91f779925992804a/depositphotos_129593440-stock-photo-senior-friends-have-fun-at.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 125619
cf-ray: 74fc4042aae0fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d8d6cbf9a8c179b05a807feb576f5e90"
last-modified: Thu, 27 Aug 2020 06:34:47 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", progressive, precision 8, 1023x592, components 3\012- data
Size:   125619
Md5:    d8d6cbf9a8c179b05a807feb576f5e90
Sha1:   35714f6d1361014cae90d8a6d2accdab1e3905c8
Sha256: 13b6848e78256b8fb67215c8edfeb6785fa1ca528b6e65cbe46ecbe79187852d
                                        
                                            GET /hosted/images/bb/2066ac09814b63820ec684174ad9fe/back-uc.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 59582
cf-ray: 74fc4042cb06fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9c4afd52d52fb1ab6d145c029c4145d0"
last-modified: Fri, 10 Sep 2021 09:20:58 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   59582
Md5:    9c4afd52d52fb1ab6d145c029c4145d0
Sha1:   9466d62f385813cd6cba24bfde142571945c292b
Sha256: 0d7df6ed0b906e45e13c8daa334d188acdc5e5bed9fb4d2342ef13fcaab33204
                                        
                                            GET /hosted/images/e8/44acfc1e8748ab912aabd813582faa/couples.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 248398
cf-ray: 74fc4042aae1fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "674bd4eda7b193ddb8e8cb659eb04ffc"
last-modified: Thu, 27 Aug 2020 06:30:21 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80", progressive, precision 8, 1600x1068, components 3\012- data
Size:   248398
Md5:    674bd4eda7b193ddb8e8cb659eb04ffc
Sha1:   2cf7bc8b8eaaddc975348c6339e72a7549a9dce5
Sha256: 14c1814e64824dd5fce8517f53099e70f730e9915b9e64d105b7480a4d85636a
                                        
                                            GET /hosted/images/0d/21b0ea0cf749138a3c01b8788cbda5/Footandankle.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 61397
cf-ray: 74fc4042db14fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "f15e08ee0d595d39612c7041fc6a4348"
last-modified: Fri, 10 Sep 2021 09:24:06 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   61397
Md5:    f15e08ee0d595d39612c7041fc6a4348
Sha1:   309197986f4c3277f3799874e52d9a4b77ae010f
Sha256: 6399669ff1e78f0e414c45f5e068a7962ed820b94d9bb518cb0f0afe2e89c415
                                        
                                            GET /hosted/images/88/f335cbf1d44113b729763cc61ab0e5/product-Recovered.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 49153
cf-ray: 74fc4042bb00fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9203d7560d512eadd09ae89450df8880"
last-modified: Sat, 29 Aug 2020 10:06:27 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 448 x 326, 8-bit/color RGBA, non-interlaced\012- data
Size:   49153
Md5:    9203d7560d512eadd09ae89450df8880
Sha1:   143e0d9e716cf933f0da5624eec3309cf13d5794
Sha256: d1739c9738ebed81e94314c6fb27769f17a890d2600ce6b88090f4de73f3d152
                                        
                                            GET /hosted/images/9a/538a1f727a43778b3429a75b6e6321/FixingYouMthod.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 25455
cf-ray: 74fc4042aaecfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "c5288fef7dbbbdd15d1d79c5f58a992c"
last-modified: Sat, 29 Aug 2020 09:56:12 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:08:29 14:55:46], progressive, precision 8, 360x216, components 3\012- data
Size:   25455
Md5:    c5288fef7dbbbdd15d1d79c5f58a992c
Sha1:   a13fffcd7a4ba488f935997a7f4e291426f0d0b3
Sha256: 50bc527c12d4862f6bbb55952160bcb4c1b0d63b51417139846d5fe484505c70
                                        
                                            GET /hosted/images/fb/b9e8a67be749cab19aefdf2c2422f1/fiital.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 51701
cf-ray: 74fc4042cb03fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fa7461a8ae38643dccddfa062edd3848"
last-modified: Fri, 04 Feb 2022 14:13:07 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 720 x 326, 8-bit/color RGBA, non-interlaced\012- data
Size:   51701
Md5:    fa7461a8ae38643dccddfa062edd3848
Sha1:   3ac50d68ab9d0ff64fa940efc2426559da60fe9b
Sha256: 6965a13baf3b34eb074f30371f5e607664686924fdce2e680178e1d0ed837298
                                        
                                            GET /hosted/images/57/f0e4c6e5e14d49a63900a3c116dceb/Footandankle-uc.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 60553
cf-ray: 74fc4042db11fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7a492a89ae1737ac130293ac7d1bb008"
last-modified: Fri, 10 Sep 2021 09:23:42 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   60553
Md5:    7a492a89ae1737ac130293ac7d1bb008
Sha1:   4393003cd10a11eb95f38cb07caefa8c68242a72
Sha256: fe932ffd0b2d475a8899acbee13816a927f3a320f70a55f605e510b78595950e
                                        
                                            GET /hosted/images/2f/87df3ddd5c4d9a8769c7450c265ae5/Rick-Olderman-Hip-Pain-Thubmnail-2.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 89368
cf-ray: 74fc40428ab8fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "b49d77f7c190f7d148832939f39bb865"
last-modified: Sun, 05 Jul 2020 13:24:22 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2020:07:05 18:23:41], progressive, precision 8, 1000x558, components 3\012- data
Size:   89368
Md5:    b49d77f7c190f7d148832939f39bb865
Sha1:   368347570f3197f6b7894f58e97e029cb352f16e
Sha256: 14921d9ae0704471b58338191ba41245934c07afb1df40f588d38e9ab8d7e192
                                        
                                            GET /hosted/images/ab/a28dd58f1646fe89969e2c3311ff62/Headache-un.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 59587
cf-ray: 74fc4042db15fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "08b3f78c3095f8220daf2740d3396717"
last-modified: Fri, 10 Sep 2021 09:24:38 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   59587
Md5:    08b3f78c3095f8220daf2740d3396717
Sha1:   2fdc1dc9a10b68487854c570a0599efc0819a7b2
Sha256: a15044cda629d83b23d151b2fc4bd78cfb862457e27005c3007fc7052c9a9b3e
                                        
                                            GET /hosted/images/87/e25771769446c7a2e76258320056df/Foot-Ankle---uncheked.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 132969
cf-ray: 74fc4042eb25fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e512a83b2864c7de919c84ecfd920c57"
last-modified: Fri, 10 Sep 2021 08:50:11 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   132969
Md5:    e512a83b2864c7de919c84ecfd920c57
Sha1:   a3e784541a03e1640d5f7ef3e7c1d1cd9213625b
Sha256: 5f4a33998ae5749aa68d0253bb955e00d3ec3cf3bc15be2378d1c2e3214b947e
                                        
                                            GET /hosted/images/f9/14438e9de34fe5b8bc244df05012da/Simple-Exercises-and-Healthy-Recipes.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 47041
cf-ray: 74fc4042aae5fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "20e988f0435f07b6f418f58323003086"
last-modified: Sun, 23 Aug 2020 17:41:37 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x540, components 3\012- data
Size:   47041
Md5:    20e988f0435f07b6f418f58323003086
Sha1:   00fa881b7cdfefac15e430eeb27ff6cacadbd98b
Sha256: 2caa387e5795efb2ec704fe57863e95565b62876ed05a1f2aa2bd2d8373c9fd1
                                        
                                            GET /hosted/images/3d/eb3747d083467b8cd4581cad56158c/tips-save-time-money-1068x713.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 29546
cf-ray: 74fc4042aadefab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "05b540f71f64cd6785a2070439fb88a2"
last-modified: Thu, 27 Aug 2020 06:35:53 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1068x713, components 3\012- data
Size:   29546
Md5:    05b540f71f64cd6785a2070439fb88a2
Sha1:   9ef2d23565aa61d3d3e9aac03fffbae24975683b
Sha256: d08b8393a9bf41421db4033f48375f06f749d9d3d30465a6ed21bdef368230de
                                        
                                            GET /hosted/images/f0/12fa5743a34490817fcff59d284888/Headache.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 60417
cf-ray: 74fc4042db17fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "11a09b3ad81fdf1d26d5864fad8b9d2d"
last-modified: Fri, 10 Sep 2021 09:25:06 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   60417
Md5:    11a09b3ad81fdf1d26d5864fad8b9d2d
Sha1:   604f270a34514e815d22c895458c3ead456cbc48
Sha256: 41421ecf8b61712d13f46a0bacfc82092926cf3ced2f3f4405fc35891a4ac445
                                        
                                            GET /hosted/images/62/625a9669c649a0b2bcbc3edf2778de/swd32.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 59255
cf-ray: 74fc4042db19fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "4c628776babc26a8aaaf5d95c56212aa"
last-modified: Fri, 10 Sep 2021 09:44:45 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   59255
Md5:    4c628776babc26a8aaaf5d95c56212aa
Sha1:   eee62ed3b039992a18a2f23f14a5c2efa73ce6b6
Sha256: 562feac8c9b461801b8d06c110eb1998c177aec5f79896e0877f995405f6cd01
                                        
                                            GET /hosted/images/2d/7a0fa9f7b942bcafcd19bc71230e5c/WAIST.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 73034
cf-ray: 74fc4042baf8fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "bea7368e6183d12fbf8ca6a1b7c87286"
last-modified: Sun, 30 Aug 2020 10:06:28 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, xresolution=160, yresolution=168, resolutionunit=2, datetime=2012:10:20 10:16:35], progressive, precision 8, 1728x1152, components 3\012- data
Size:   73034
Md5:    bea7368e6183d12fbf8ca6a1b7c87286
Sha1:   b83224266969750d181426e4203f57105e3e4798
Sha256: 403a7c14a9a80b1eff565d8ebea2841e4e8d416bf1ca391a9f800adf7fb7c091
                                        
                                            GET /hosted/images/33/5c36e46bbc4d3189b6121f9aae7e90/kneee.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 140136
cf-ray: 74fc4042eb24fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "bb063c9fce5983699701ca480e1eaf38"
last-modified: Wed, 15 Sep 2021 16:23:44 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   140136
Md5:    bb063c9fce5983699701ca480e1eaf38
Sha1:   b5c9b588ea557a5b9ad79c430603116fdd5278bc
Sha256: 55a4e114728ef5d6978513468019d642ce2ee2fba640e1fb3cf5b3603af29472
                                        
                                            GET /hosted/images/0f/32636145ed4b3abfaf8fb13f946685/relieve-muscle-tension.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 50028
cf-ray: 74fc40429ad9fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d718b52d1f9cb0f4e7cf0e53e9885e76"
last-modified: Thu, 27 Aug 2020 06:38:06 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 693x693, components 3\012- data
Size:   50028
Md5:    d718b52d1f9cb0f4e7cf0e53e9885e76
Sha1:   688d353ddaaeb8ca46970f00f04716aab0e61922
Sha256: f8a1c34ac3bc6a6ea4daf3ccee24cbb123027922a63bcd7c67e19b89b2c60977
                                        
                                            GET /hosted/images/e9/87014854c744b585e7c51f84ccd857/back-cheked.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 147546
cf-ray: 74fc4042eb23fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "c9a25c10deb62c8ad2f21c04c5556b4d"
last-modified: Wed, 15 Sep 2021 16:22:57 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   147546
Md5:    c9a25c10deb62c8ad2f21c04c5556b4d
Sha1:   f73dd8e4a2e8e752ba82b6a9d95a9bd4c1965255
Sha256: 3ea04924eacc5220fe016b17c65a68cf9e8090725156a97f773046c772d10782
                                        
                                            GET /hosted/images/20/f60b1fa7fc40faa21928703056ff9b/bad-habits.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 124494
cf-ray: 74fc4042aae6fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e4d1e0e85460bfdb6c146597414184f5"
last-modified: Sun, 23 Aug 2020 17:47:48 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=3941, bps=0, description=Red sheoes from above on the white arrows,dilemmas concept habits or changes, manufacturer=NIKON CORPORATION, model=NIKON D7100, orientation=upper-left, width=5912], progressive, precision 8, 800x533, components 3\012- data
Size:   124494
Md5:    e4d1e0e85460bfdb6c146597414184f5
Sha1:   f7e32e7424ffdc98e145b2ffe300678dafbfa82e
Sha256: dd6c4309dd8fa02a06e30d8a83db8706e4c03a5328abaa0f6561233b468c40eb
                                        
                                            GET /hosted/images/4c/b32fff427447c697717af87e7602d7/5-in-one.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 153022
cf-ray: 74fc4042cb04fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fbad4a468f3af970db03a68b6c797515"
last-modified: Fri, 04 Feb 2022 14:10:15 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 678 x 333, 8-bit/color RGBA, non-interlaced\012- data
Size:   153022
Md5:    fbad4a468f3af970db03a68b6c797515
Sha1:   1948c69bcb601c2c8d6355f971c0f0b4d8cdf81d
Sha256: 3ea8cf8ed8856084a13ef5a9612a121e763e8b4d4af13ba785c788336b1ec14e
                                        
                                            GET /hosted/images/90/1dffb8c3c8437183e4614aae122e7e/legpaing498613780_1275712-860x574.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 41802
cf-ray: 74fc4042aae9fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "fcfaa958d153b0ad3ca441d43d3662b0"
last-modified: Sun, 23 Aug 2020 17:58:10 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=21, height=0, bps=0, compression=LZW, description=Calf pain, physical injury. Male leg and muscle pain from running or training, sport physical injuries when working out. Man at, manufacturer=Canon, model=Canon EOS 5D Mark II, width=0], progressive, precision 8, 860x574, components 3\012- data
Size:   41802
Md5:    fcfaa958d153b0ad3ca441d43d3662b0
Sha1:   f99591967de88639fd57ecb788577a183fc6203c
Sha256: a6952744f27aaa4045dee170cc952cd07a90b3e03238c8a9c0d642b2b6b39b2e
                                        
                                            GET /hosted/images/27/da778a92be4813a0dfa5803c06bac7/sun-background.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 146071
cf-ray: 74fc40428ab0fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "913f0a1c6cbcc0d1843f9d39fa76d63f"
last-modified: Sun, 05 Jul 2020 13:10:14 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 499 x 344, 8-bit/color RGB, non-interlaced\012- data
Size:   146071
Md5:    913f0a1c6cbcc0d1843f9d39fa76d63f
Sha1:   fb011dad0fe4b2af681f2d82a011fef0c5e8ecfc
Sha256: eb157bc1de0ab01ff75e254925c878225b8972e8d3b501c008ae8c7646f847be
                                        
                                            GET /hosted/images/2e/375e28d93f48deb9d19e3ac666c990/knee-un.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 59598
cf-ray: 74fc4042cb0bfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d71e92341a30654bf628e7d20ef342d7"
last-modified: Fri, 10 Sep 2021 09:22:40 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   59598
Md5:    d71e92341a30654bf628e7d20ef342d7
Sha1:   4fa11180df8a0366fa70e52339180d8345dc4c55
Sha256: 1dc4913f1ac1bf008f4ab39a3187b86a577483ebcf53064013fa42eedae5b696
                                        
                                            GET /hosted/images/25/465282964f4eb6b97e2b5d8953a5ad/Knee.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 60417
cf-ray: 74fc4042cb0cfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "9fcd392ebc31b91ff9cc389cc5444db0"
last-modified: Fri, 10 Sep 2021 09:23:11 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   60417
Md5:    9fcd392ebc31b91ff9cc389cc5444db0
Sha1:   65dca7adc580aae6bf4089e6b92f3522b92e3d4b
Sha256: ae691b414f291ce069224d4ff53bcdeeeb0f52ed7893c34af2791616f2d4a9c6
                                        
                                            GET /hosted/images/37/af987d53344e8d94dbc7ab354aa8b5/HIPddd.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 60083
cf-ray: 74fc4042eb1dfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "66f92a358004945e70ccc85607c8347d"
last-modified: Fri, 10 Sep 2021 09:44:16 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   60083
Md5:    66f92a358004945e70ccc85607c8347d
Sha1:   df76298e56a4fa1228b7eaf51a7fe4d188ea691d
Sha256: 758b1a1fe80442da005c0a759926f9c13afea31584e32b5f7dea04b517e3eb2a
                                        
                                            GET /hosted/images/86/916f5c1cc44a19a1944524177f1cb6/man-in-shorts-holding-knee.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 74878
cf-ray: 74fc4042aae7fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e16d7419b664d04daa488ae69861cd70"
last-modified: Sun, 23 Aug 2020 17:52:46 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", progressive, precision 8, 921x800, components 3\012- data
Size:   74878
Md5:    e16d7419b664d04daa488ae69861cd70
Sha1:   b4d8b487fdccaa40fff8d9eeffb69cdb0f00900c
Sha256: e5f79c865740c8d0a472f7062cedd75de39da29ac26c67d983c4e2864e766c41
                                        
                                            GET /hosted/images/75/9a15080eef4f7f8ca473b3311f98da/bace.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 147039
cf-ray: 74fc4042eb1efab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "11230c82d5f9e12fb9784333224b2e25"
last-modified: Wed, 15 Sep 2021 16:21:02 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   147039
Md5:    11230c82d5f9e12fb9784333224b2e25
Sha1:   0156179d6465a35660ebfcaef7fd3f519b2e5106
Sha256: c871ab0aed5d26e49e6d57f2e4aeb6af429daee8bcb4bbccd9cb750f42388aab
                                        
                                            GET /hosted/images/be/b13176c6bb4135a44f3a910fa43287/wesdwaq3.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 132391
cf-ray: 74fc4042eb27fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "573c6b466614c5c0662832d23a52f20a"
last-modified: Wed, 15 Sep 2021 16:35:19 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   132391
Md5:    573c6b466614c5c0662832d23a52f20a
Sha1:   2fd231c18e61751b322c5e9368157c4396d5d93b
Sha256: 5994428522a77e7a87441ea7ac4b883e961055aaeede3077e2de53f7d6aacf99
                                        
                                            GET /hosted/images/a4/640494985c4b67983a44996a2cd13d/Headache.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 130910
cf-ray: 74fc4042eb29fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "ec01e8fb421b9fc40c8a347bc7f57e93"
last-modified: Wed, 15 Sep 2021 16:26:13 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   130910
Md5:    ec01e8fb421b9fc40c8a347bc7f57e93
Sha1:   3880c282db70e03f313d20bb6efa4dbc15152986
Sha256: 2f54fee36e9eecfa8ce06363a21f29f1da302e68b2af52e32c5f96859a275ed0
                                        
                                            GET /hosted/images/32/aa37d433f54b379cca21f5d01e3595/Headche-checked.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 131774
cf-ray: 74fc4042eb2afab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "f724f8c588b575e84740cf969f034608"
last-modified: Wed, 15 Sep 2021 16:27:12 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 677 x 557, 8-bit/color RGBA, non-interlaced\012- data
Size:   131774
Md5:    f724f8c588b575e84740cf969f034608
Sha1:   615a8b94d620ed131b7fbf48681615b42523c91b
Sha256: 2876b9a2ea3aca19da13431b7940aef3bb9174ce2b1e6472b640d8198b40cf03
                                        
                                            GET /hosted/images/2d/1fc5d6795d436384bd5be94b9e2399/spine-left.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 165585
cf-ray: 74fc40428aaefab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "3ada55bd7f2546fce3107794c5cf8a8c"
last-modified: Sun, 23 Aug 2020 17:00:59 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 321 x 261, 8-bit/color RGB, non-interlaced\012- data
Size:   165585
Md5:    3ada55bd7f2546fce3107794c5cf8a8c
Sha1:   9e930ea45966601c98da295f5cd739719d16727d
Sha256: 51aa15ae23c61fbaf7d7611a77effb1ff8336cdaa0e293c771eb01ba6e48d10e
                                        
                                            GET /hosted/images/72/0bb240e00c440590f9f10874c2a9a2/Rick-Olderman---Foot-Pain-Thumbnail-2.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 838355
cf-ray: 74fc40429ad0fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "7f8c9a5495da6d40b29076cdf0143114"
last-modified: Sun, 05 Jul 2020 13:28:29 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1000 x 586, 8-bit/color RGBA, non-interlaced\012- data
Size:   838355
Md5:    7f8c9a5495da6d40b29076cdf0143114
Sha1:   599c56a8e261e6beb91e40f9cc6643c22d161a9e
Sha256: a20ef74417ea077e5788f5dfb1d5db7a6e06c66a1f54f47f081f301c780a8e51
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:12 GMT
Server: ECS (amb/6B8C)
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /hosted/images/ba/02fbb348a741c9ad8bbbadbb7f769b/Rick-Olderman---Knee-Pain-Thumbnail-2.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 822435
cf-ray: 74fc40428ab9fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "38799336bde72e9656193da56d5edd0f"
last-modified: Sun, 05 Jul 2020 13:26:20 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1000 x 562, 8-bit/color RGBA, non-interlaced\012- data
Size:   822435
Md5:    38799336bde72e9656193da56d5edd0f
Sha1:   9875ba7e70a07396e342c82cac70aad7f51ecc20
Sha256: 786b5be69ab0a3d2ec62829c373ff48e1d1668c97d9f58e16a81fa9134c721a0
                                        
                                            GET /34b236a1-7d4e-4853-9ce7-f82385d58548.js HTTP/1.1 
Host: cdn.cfptaddons.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.133
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: Cowboy
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300, public
etag: W/"f85e6408d0aa68db5f7b8f0250ec5d83"
x-request-id: 3a7afc4a-b535-43fa-adac-f578cd25c190
x-runtime: 0.010340
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Sat, 24 Sep 2022 14:36:13 GMT
age: 0
x-served-by: cache-bma1668-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664030173.807982,VS0,VE382
content-length: 6867
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (5213)
Size:   6867
Md5:    8d0d601f8de9e068b043c886ee2757dc
Sha1:   5401ea587f360f6fcc612a17108d5d451324ba25
Sha256: f85e6408d0aa68db5f7b8f0250ec5d836c7cd42f89d6bbc934702e5fce9c1d78
                                        
                                            GET /ada22470-7754-4d01-aca8-2a237ac25218.js HTTP/1.1 
Host: cdn.cfptaddons.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.133
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: Cowboy
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300, public
etag: W/"12df6f27c6349c830c3837659489dee6"
x-request-id: 62d6281f-cc2a-4f69-bfae-a02656d0bb8b
x-runtime: 0.009840
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Sat, 24 Sep 2022 14:36:13 GMT
age: 0
x-served-by: cache-bma1668-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664030173.776794,VS0,VE415
content-length: 9880
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8385)
Size:   9880
Md5:    d125da7e9c7f772992496b5bdc813d8c
Sha1:   42ee2ca80e4f7f6793e302ddbffc49cd2be1a501
Sha256: 12df6f27c6349c830c3837659489dee6632f6ad841a56cdb2d198b6374183e39
                                        
                                            GET /hosted/images/25/06b7ca7b4c4440ba88c85158a8e674/BREATHING.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 68466
cf-ray: 74fc4042aaeefab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "485b317f78adbcfc1dd2025e05e60510"
last-modified: Sun, 30 Aug 2020 10:04:17 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, xresolution=160, yresolution=168, resolutionunit=2, datetime=2012:10:20 11:08:54], progressive, precision 8, 1728x1152, components 3\012- data
Size:   68466
Md5:    485b317f78adbcfc1dd2025e05e60510
Sha1:   bd8d2cea14a16484063ac634582bb52b060423bf
Sha256: e5054f85e5b1d6acf7f203b21ff02714e488e240737ff66050e8ef82dce8dcb2
                                        
                                            GET /hosted/images/7c/29edbd469a44e389a89eefede9f506/watch.png HTTP/1.1 
Host: wallstreet.thetrapperuniversity.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 3574
cf-ray: 74fc40465db51bfe-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "2fef128afd14af6204f9c7f4871055a5"
last-modified: Fri, 21 Feb 2020 14:46:56 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
set-cookie: __cf_bm=6aHeD0zISsAtCofV6qZY9zQQ89kiHniNh4.Ik3wOXOI-1664030173-0-AeuVN+va3vfvEXdiNAUsMDNH0fL8wDlr+LyrNkqruJl+7yCWz8A1Gh985JbdQLu7H9bcBEJ4KmXkUAz8+S1neNSCI/J+z3Co9tLV5PMNhOj+; path=/; expires=Sat, 24-Sep-22 15:06:13 GMT; domain=.wallstreet.thetrapperuniversity.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 156 x 52, 8-bit gray+alpha, non-interlaced\012- data
Size:   3574
Md5:    2fef128afd14af6204f9c7f4871055a5
Sha1:   3a8b78ac737f776ad0867a431dc1ab2e5f8f7bc1
Sha256: 0b3a716aab15b79e0112af65498be4bb79d14f62fcecf99b56b64b7e5bc2026d
                                        
                                            GET /hosted/images/f4/a19e053d5d45d2b033d6984a3d3e96/back.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 60449
cf-ray: 74fc4042cb08fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e76189c32c90ee280b98f323777ab29e"
last-modified: Fri, 10 Sep 2021 09:21:39 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 663 x 543, 8-bit/color RGB, non-interlaced\012- data
Size:   60449
Md5:    e76189c32c90ee280b98f323777ab29e
Sha1:   fc5efc3a42d4c81932351a8ba23b28fda306e896
Sha256: a94d830049b84c91f0a623635aad4d0851d3e979c89554be5eb2b586f6ed5d14
                                        
                                            GET /hosted/images/f0/e9dd2fa4514b1e98c5c1f781d76704/WALKING.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 101033
cf-ray: 74fc4042bafdfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "2280371c021aa322940efd5dfe69637a"
last-modified: Sun, 30 Aug 2020 10:07:12 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "AppleMark", Exif Standard: [TIFF image data, big-endian, direntries=12, manufacturer=Canon, model=Canon EOS 20D, orientation=upper-left, orientation=upper-left, xresolution=178, yresolution=186, resolutionunit=2, software=QuickTime 7.7.1, datetime=2012:10:20 15:55:28, hostcomputer=Mac OS X 10.7.4], progressive, precision 8, 1152x1728, components 3\012- data
Size:   101033
Md5:    2280371c021aa322940efd5dfe69637a
Sha1:   247aad5df57a8fdbdb0c0370f24e87e76b19eef0
Sha256: 6107428cd46278b83de2005f032a592f489c7d1d8a8bf615cb39d8580f751e06
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         13.224.246.193
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:13 GMT
Last-Modified: Sat, 24 Sep 2022 12:54:32 GMT
Server: ECS (nyb/1D1E)
X-Cache: Miss from cloudfront
Via: 1.1 c4ff0051ca0c026ecfda9d67a3f79e8a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR62-C3
X-Amz-Cf-Id: mFSc_WoDiTRAS0wC6y-0aeyHWxR002sOYuLcNQmsh8O2QmJYX_m6-w==
Age: 6101

                                        
                                            GET /1c3b4dce-8c83-4659-815b-586b5a1a20f5.js HTTP/1.1 
Host: cdn.cfptaddons.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.86.133
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: Cowboy
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=300, public
etag: W/"713e7076c77ab0c1340e308d87571b19"
x-request-id: c7374520-f093-4c5b-96b9-4c5e095e3dce
x-runtime: 0.013494
strict-transport-security: max-age=31536000; includeSubDomains
via: 1.1 vegur, 1.1 varnish
accept-ranges: bytes
date: Sat, 24 Sep 2022 14:36:13 GMT
age: 0
x-served-by: cache-bma1668-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1664030173.776817,VS0,VE618
content-length: 49664
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (48038)
Size:   49664
Md5:    98b635c51c653c94040d93a4bf96d20b
Sha1:   902bb1cf8cac20d93dc78697cd89ca591849f6cd
Sha256: 713e7076c77ab0c1340e308d87571b197b9f2d2d94cf57a6664cea7aa45c1cd2
                                        
                                            GET /?vendor=rckoldrmn HTTP/1.1 
Host: cbtb.clickbank.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         52.33.226.99
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 936
set-cookie: AWSALB=eyHz6DJZyZ/HnNuMWvdp04/UJZ6i+tQPn2IbeA7Wv8qC6hcCirkE7L+cwVB8cUr1OtlCIoYP/P8f+VOqOO4J+kkgCuYC6f8k6JNwQWCwZYOimTABNyi0NKTaxC+f; Expires=Sat, 01 Oct 2022 14:36:13 GMT; Path=/ AWSALBCORS=eyHz6DJZyZ/HnNuMWvdp04/UJZ6i+tQPn2IbeA7Wv8qC6hcCirkE7L+cwVB8cUr1OtlCIoYP/P8f+VOqOO4J+kkgCuYC6f8k6JNwQWCwZYOimTABNyi0NKTaxC+f; Expires=Sat, 01 Oct 2022 14:36:13 GMT; Path=/; SameSite=None; Secure
server: Apache
cache-control: max-age=900
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (936), with no line terminators
Size:   936
Md5:    6c0b964b273d662f25b84cd29e51b607
Sha1:   6bef26208ee6a1d7105720e5cc54f273868630a9
Sha256: a3ba10e614083832f41494e71b4c53bd738a88a9ffd6f9a0c785348ec389527c
                                        
                                            GET /hosted/images/63/4eb1809b8e4f46923e8a82c19809af/Rick-Olderman---Back-Pain-Thumbnail-2.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 836441
cf-ray: 74fc40428ab7fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "61a3d69b0f0951a34bf49e1f73792740"
last-modified: Sun, 05 Jul 2020 13:22:31 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=hJpwp1i6WU3pIqkiQM4TGyG4odpJmMa_nygd4pghFS0-1664030173-0-ATpWUcOAYNuoLnkYTBTsdTm-P3Bly8g7MRL_9YbAdst7O9dxoSEoIPR0RpM9l_D0-ImWwqm0oLHFV6nNxdQM6JBuY4u4zEtGN50bACKXkukv"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=hJpwp1i6WU3pIqkiQM4TGyG4odpJmMa_nygd4pghFS0-1664030173-0-ATpWUcOAYNuoLnkYTBTsdTm-P3Bly8g7MRL_9YbAdst7O9dxoSEoIPR0RpM9l_D0-ImWwqm0oLHFV6nNxdQM6JBuY4u4zEtGN50bACKXkukv; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1000 x 553, 8-bit/color RGBA, non-interlaced\012- data
Size:   836441
Md5:    61a3d69b0f0951a34bf49e1f73792740
Sha1:   e9736bfa644b45a9ff7dabfb11131020ba4180b0
Sha256: b508ecc94b0cc4e14c49e6a61e66bf3b2ecd06e4ec2bb8dc9ec7b66c2d143d95
                                        
                                            GET /hosted/images/fe/e9a8eb657042ef95afbc40c576c380/2.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 44280
cf-ray: 74fc4048eeeffab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "d5cd47e2c9662a5b5e15bde504f13bc8"
last-modified: Thu, 21 Oct 2021 06:08:09 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=480, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=872], progressive, precision 8, 1920x1057, components 3\012- data
Size:   44280
Md5:    d5cd47e2c9662a5b5e15bde504f13bc8
Sha1:   55f165b467df955369746d625eeed96740c8a13a
Sha256: 65db6aa79b22aea88719e1ec7700e806182f76b73823ef5934634b6300b0c1a9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         13.224.246.193
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:13 GMT
Last-Modified: Sat, 24 Sep 2022 13:29:42 GMT
Server: ECS (dcb/7F5B)
X-Cache: Miss from cloudfront
Via: 1.1 c4ff0051ca0c026ecfda9d67a3f79e8a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR62-C3
X-Amz-Cf-Id: L4khmzClOV93V7Km6_D0H-5YHyunlHGulZ3lz6_xtQRLCoUfQv3Njg==
Age: 3991

                                        
                                            GET /hosted/images/44/032c82679447f0890199e1ccd0abda/edqw23.jpg HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 27691
cf-ray: 74fc4048eeedfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "971f19e31d72a83da118e145814823f9"
last-modified: Mon, 18 Oct 2021 15:12:59 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], progressive, precision 8, 1920x1018, components 3\012- data
Size:   27691
Md5:    971f19e31d72a83da118e145814823f9
Sha1:   a32276f74eb73077c3e7c4994ba47b0e32971f39
Sha256: 318253be3daf2a29a60b7faae0056014efcac3aebb6cb33b11650f1060a93300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /hosted/images/b8/faa4824a5e4494b7dbe3dfd94869d9/wedqw32.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:13 GMT
content-length: 25788
cf-ray: 74fc4048eeeefab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "217b37dc9d40cd329ecf52ed03b5815a"
last-modified: Mon, 18 Oct 2021 16:38:06 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1608 x 740, 4-bit colormap, non-interlaced\012- data
Size:   25788
Md5:    217b37dc9d40cd329ecf52ed03b5815a
Sha1:   a84880ca9705bd81df8315254e28dbf0540babb7
Sha256: ee7b20f45e49bff81856208aabd15d8c1fe5b498f1cc7c71918d76b74f9349e6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10217
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 14:36:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10217
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 14:36:13 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 08:31:01 GMT
expires: Wed, 20 Sep 2023 08:31:01 GMT
cache-control: public, max-age=31536000
age: 367512
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Size:   44856
Md5:    565ce506190ad3af920b40baf1794cec
Sha1:   ad3cba5d06100e09449a864d3b5e58403b478b3d
Sha256: 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
                                        
                                            GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 19:32:09 GMT
expires: Thu, 21 Sep 2023 19:32:09 GMT
cache-control: public, max-age=31536000
age: 241444
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Size:   7884
Md5:    9212f6f9860f9fc6c69b02fedf6db8c3
Sha1:   ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
Sha256: 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
                                        
                                            GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9840
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 21:09:41 GMT
expires: Tue, 19 Sep 2023 21:09:41 GMT
cache-control: public, max-age=31536000
age: 408392
last-modified: Mon, 18 Jul 2022 19:24:04 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Size:   9840
Md5:    afda6e429fd299054de28e1f157c683d
Sha1:   c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
Sha256: 81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lAQOV9_fZ2RFvhRKMtDOeRTWJc-Jo1u-DrtJshcQuCSOUXVbNMjhaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:56:56 GMT
age: 59957
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10032
Md5:    aa150280eb113504d61a25935c0f0127
Sha1:   ed04f74fbb4c77b21e2babc51a82857f5e23d169
Sha256: 07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e
                                        
                                            GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 18:53:39 GMT
expires: Tue, 19 Sep 2023 18:53:39 GMT
cache-control: public, max-age=31536000
age: 416554
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Size:   16740
Md5:    e43b535855a4ae53bd5b07a6eeb3bf67
Sha1:   6507312d9491156036316484bf8dc41e8b52ddd9
Sha256: b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10217
Expires: Sat, 24 Sep 2022 17:26:30 GMT
Date: Sat, 24 Sep 2022 14:36:13 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb77ad616-c829-40b4-8b70-2be46252d64c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10279
x-amzn-requestid: 0f361c26-1f12-421a-9752-7d4fcdf839ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4V65GTXIAMF9-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632cd045-25677a637307879044de8242;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:14:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NcnEyVD-vG10pOpPCBMjKGqVw-rstkPIt-oqkIc5urAGE934fxL0VQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 24 Sep 2022 04:12:38 GMT
age: 37415
etag: "60a83a1618ffae06e49ca3002bac1db9980dcfe8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10279
Md5:    8ea5f06ad31f0cedd2cb5c6df82f35f4
Sha1:   60a83a1618ffae06e49ca3002bac1db9980dcfe8
Sha256: 5f6a4cb92c016ef0f229b11d727e9680a15b10782b5bfe9e66ad9d100b458d8d
                                        
                                            GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 21:38:37 GMT
expires: Tue, 19 Sep 2023 21:38:37 GMT
cache-control: public, max-age=31536000
age: 406656
last-modified: Mon, 18 Jul 2022 19:23:34 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17908, version 1.0\012- data
Size:   17908
Md5:    e46b4e2e3b47cc232937ebf72b4c537e
Sha1:   2675bc06ee643b8c935370325a327efb74746e6a
Sha256: d8543b5dcaea1fc4a0301dc12b5b2adc9079e0794dd6a45879588fb844f3438e
                                        
                                            GET /hosted/images/18/db4b10d90c47888032a482b8561e64/hip-p-.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
content-length: 142617
cf-ray: 74fc40431b48fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "e5f8aba68e667e6475dbe484828d829d"
last-modified: Wed, 15 Sep 2021 16:30:22 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=H9WEEhRIUemFViEtcYxAYnKlsG6H5989o6ikFxbv7aQ-1664030172-0-AaNWdQCsrAHuaURv-CHkftRzvAiXcxKNJpHg4cn47q-FvXuuC7uKmSAkautfhl_82aGGW1rl2UGFKSe4Jq7U7cBLxMUBA7BnEM5NXRK7b1Dt"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=H9WEEhRIUemFViEtcYxAYnKlsG6H5989o6ikFxbv7aQ-1664030172-0-AaNWdQCsrAHuaURv-CHkftRzvAiXcxKNJpHg4cn47q-FvXuuC7uKmSAkautfhl_82aGGW1rl2UGFKSe4Jq7U7cBLxMUBA7BnEM5NXRK7b1Dt; report-to cf-csp-endpoint
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9935
Md5:    55d224ac83a417772c98bc5080fb6689
Sha1:   a30f9044330824e70dde0dcc785890d981e6fdf5
Sha256: b2ea4dea200109019a65834b98e31e8fac718a199513810a2819858be2b4470a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85d1d130-04e1-43f4-81d7-b15e9286f813.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8354
x-amzn-requestid: 3ec3470c-2268-4102-af88-27dcfed76bfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPCGOcoAMF2xQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-481aa98b413690636fc3a2f0;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dXqPCGTGK8gW86McTltPuNYKXQgUuSqcL_XbyRQitinH5LsUscmU2w==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:47:49 GMT
age: 60504
etag: "670d89082f8da643e1196b11fb64bf71707f0e8d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8354
Md5:    e1087dcce202bbbc8c84196bd2050662
Sha1:   670d89082f8da643e1196b11fb64bf71707f0e8d
Sha256: f6a7b6e07177431d7845e2f2b7b1b3b76088671db32aeef580a72e9bd3ddae00
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F96ebb238-493f-4ccc-a8d9-7a7c6f8ab469.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7963
x-amzn-requestid: cadfa4ff-473d-4927-bdf6-3aad64cddf18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sQbHTCIAMFfZg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2735-41d711e5210099aa6273dd86;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: g0NS7XamCzSMKmm1-mLnWLwUuBoJczvwSmTb0c_7klsY78wbrg4bRw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:57:02 GMT
age: 59951
etag: "d2180d40ceb16924a87a41aad90dedb0bb912085"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7963
Md5:    5a4b36e1bf29c9c82f069cdd3c50874c
Sha1:   d2180d40ceb16924a87a41aad90dedb0bb912085
Sha256: aab96d28ea8e21e6d37449eba400cac45acced1825ebdb27853d17ae4f993b00
                                        
                                            GET /s/fjallaone/v13/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 21:30:15 GMT
expires: Fri, 22 Sep 2023 21:30:15 GMT
cache-control: public, max-age=31536000
age: 147958
last-modified: Thu, 21 Apr 2022 16:38:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 16588, version 1.0\012- data
Size:   16588
Md5:    6a93e73463e9f1b7c7b41c52c93843c5
Sha1:   48d5ed2bcc9c9c5c4182ae8957e5cef207cdfcbc
Sha256: 54eb546ba2203d87ad9a38ffdb92fdfed9733e08239dbea692a1ca059a287480
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6386
x-amzn-requestid: 4380489e-d0ba-4f67-ac4f-67619ba34422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7shGHryIAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e27a0-005f9c783c7722f16c178026;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:39:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RuUOjTDRTkcaGFf_hTWrHZ89edOajgGUdl5PjbaUV7CUppat6IYsRg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:52:36 GMT
age: 60217
etag: "f6f926be6e265a597aaede424f05fcd7c76fcc20"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6386
Md5:    d8d9af95acfc8b9b431eb1e020157f6d
Sha1:   f6f926be6e265a597aaede424f05fcd7c76fcc20
Sha256: 0b61d6cb0e0908cb8d303b9e951e2854166bd232e0291b5d698a6b757c064e88
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 24 Sep 2022 14:36:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /video/605756473?h=a711d91cd6 HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         162.159.128.61
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 24 Sep 2022 14:36:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://sentry.io https://*.ingest.sentry.io https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app/ https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*; report-uri /_csp
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Fri, 15 Dec 1985 19:30:00 GMT
x-host: player-84c9846b45-qsgbc
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 0
x-vserver: playproxy-rollout-prod-varnish-4
x-backend-proxy: playproxy5
x-bapp-server: player-84c9846b45-qsgbc
Age: 0
X-Served-By: cache-bma1660-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1664030174.562241,VS0,VE201
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=GO8y2wX__lUP6xYQ.Eqz56DKRuClD0U0UiL_.QWCW3k-1664030173-0-AafgC6J1HH35RWfnAtJaqfKNeSUV3EYkcPISPmHT/5bZYIygU3BhSV5G7rZiXMRmoYfICIrIihhmGphU23nDSSs=; path=/; expires=Sat, 24-Sep-22 15:06:13 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 74fc4048a82fb529-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (17104)
Size:   5415
Md5:    61eebfbd01e2b550d327ec2feba9d501
Sha1:   d6343d4a686e98fd2950ea421f8d8daeb7ee3786
Sha256: 458058802349ca07e5f03f7171a196d30b0b3c6fea404403255851e32e2f1e53
                                        
                                            GET /vendor.js HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
cf-ray: 74fc404a8ff4fab8-OSL
access-control-allow-origin: *
cache-control: max-age=900, public
etag: W/"7422e50efbaea439fda7ef3b0eb54ee1"
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: MISS
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
status: 200 OK
x-content-digest: 581e49c9b7bdd06dab54c00931f4256b223e620e
x-frame-options: ALLOWALL
x-powered-by: Phusion Passenger Enterprise 6.0.7
x-rack-cache: stale, valid, store
x-request-id: 426047020ec2cca0ecf148283222be86
x-runtime: 0.016950
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text
Size:   73822
Md5:    0f571a8408f0b1b8e9d8b5be9bfd1f85
Sha1:   f9653232910a8d371bf259262ef35d1fce62905e
Sha256: a5474aa59559102b80ddb920c729081b7f6bf36ab136e54d55ba060e09b5d9eb

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /hosted/images/fc/0005fca39641a1967f928a5d37f208/test-yataka.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 56051
cf-ray: 74fc404bb8d4fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "f46d12ee7de136c0943727bab970183a"
last-modified: Sun, 05 Jul 2020 16:32:50 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   56051
Md5:    f46d12ee7de136c0943727bab970183a
Sha1:   751d3191d3f57ed9511a868c0ba75a3746b6f99a
Sha256: 4409656faa103ac77462fc67cbf9cf4903516bd27484894dbb1c40b87c1b11b8
                                        
                                            GET /hosted/images/25/5af91a4adb46c99ddb5681adeb582b/test-jeff.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 53058
cf-ray: 74fc404bb8d7fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "99b873353c9cee26d1df54848a8bcfe9"
last-modified: Sun, 05 Jul 2020 16:38:35 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   53058
Md5:    99b873353c9cee26d1df54848a8bcfe9
Sha1:   8a6d58614408fa828f998ceab1ffd433693c10b4
Sha256: d6a4eddfd19573d631162577de87020f6272a2bbdeb14f89552bd6e9046c2c83
                                        
                                            GET /hosted/images/8a/0f2ebb62184b239d72c67b9c15e83c/test-ruth.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 79725
cf-ray: 74fc404bb8dcfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "6b480c3606ddf903752a6b97f819d317"
last-modified: Sun, 05 Jul 2020 17:31:17 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   79725
Md5:    6b480c3606ddf903752a6b97f819d317
Sha1:   55d473c3fe6489133d8ba151b2ccdf40b3396e46
Sha256: 7456e9b33a93beb5658b00a603595245c774e3b3563894722c089b0cfc010b22
                                        
                                            GET /hosted/images/25/d703545858401c874d27edaa329a38/test-vicky.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 54385
cf-ray: 74fc404bb8ccfab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "2299d308c0a0bb2aa94985cdb797fb32"
last-modified: Sun, 05 Jul 2020 16:35:56 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   54385
Md5:    2299d308c0a0bb2aa94985cdb797fb32
Sha1:   7dc8e6cc21319d81c9b2e4ca4a5f7b696242ca6d
Sha256: 1cb1e3611d797bc8a885e6a91e9d8472f17997615396181dc0992b083c5ec37a
                                        
                                            GET /hosted/images/fa/3b1534b3e74d678ff67e91be4119f3/test-david.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 54794
cf-ray: 74fc404bb8d6fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "901cf3db3ae9665ecafd9ba420ba1009"
last-modified: Sun, 05 Jul 2020 16:43:01 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   54794
Md5:    901cf3db3ae9665ecafd9ba420ba1009
Sha1:   7e7012305f7a9bf8b08f7f5235c91d47dbefa737
Sha256: fefda92ea116db43ca945f7cdb213aadf43e5077e6d47fa7223a512573bf1d8b
                                        
                                            GET /hosted/images/6e/bdcd9310bc4bceb83b98b1377ff90a/test-reb.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 54696
cf-ray: 74fc404bb8d1fab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "effb9e6731ed27f09f46413247d760eb"
last-modified: Sun, 05 Jul 2020 16:37:17 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced\012- data
Size:   54696
Md5:    effb9e6731ed27f09f46413247d760eb
Sha1:   1ce329a19f632a78cbef3548b16b81cff36a5e5e
Sha256: 3e6edd416f6d3fcf4e41f226af33c2f80427ee3902230e372d18d8243076eeae
                                        
                                            GET /hosted/images/dc/c055b382304a879f991ff3ea37279f/ewdq23.png HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m; cf:aff_sub2=; cf:aff_sub3=; cf:aff_sub=; cf:affiliate_id=; cf:cf_affiliate_id=; cf:content=; cf:medium=; cf:name=; cf:source=; cf:term=; cf:NTI5Njk3ODY=:visited=true; cf:visitor_id=67c558da-b76a-45a4-880b-888b37027c31
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: image/png
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
content-length: 7837
cf-ray: 74fc404bb8cefab8-OSL
accept-ranges: bytes
cache-control: max-age=31536000
etag: "36ec25945edae01510140841c8a2b4fc"
last-modified: Mon, 18 Oct 2021 16:30:12 GMT
cf-cache-status: MISS
x-amz-cf-pop: OSL50-C1
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 119, 8-bit/color RGBA, non-interlaced\012- data
Size:   7837
Md5:    36ec25945edae01510140841c8a2b4fc
Sha1:   a6b81e3728f22b5b117381e09ea15dda41f53e4d
Sha256: 261493575ccb949c724fb9bda0d2e75b7064e9ad3e66cb5c0045294baa507f53
                                        
                                            GET /video/605756473?h=a711d91cd6 HTTP/1.1 
Host: player.vimeo.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         162.159.128.61
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Sat, 24 Sep 2022 14:36:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-xss-protection: 1; mode=block
content-security-policy: script-src 'self' 'unsafe-inline' blob: resource: https://f.vimeocdn.com https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://f.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://f.vimeocdn.com; connect-src 'self' ws: wss: https://vimeo.com https://vimeo.dev https://api.vimeo.com https://api.vimeo.dev https://*.ci.vimeows.com https://csi.gstatic.com https://fresnel-player-staging.vimeows.com https://fresnel-event-staging.vimeows.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://netflux.cloud.vimeo.com https://lic.staging.drmtoday.com https://lic.drmtoday.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://sentry.io https://*.ingest.sentry.io https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app/ https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com https://live-api-dev.cloud.vimeo.com https://devcaptions.cloud.vimeo.com/; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; default-src 'none'; font-src https://edge-assets.wirewax.com https://player.vimeo.com https://fonts.gstatic.com; img-src 'self' data: https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://player.vimeo.com https://*.ci.vimeows.com https://videoapi-sprites.vimeocdn.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com https://f.vimeocdn.com; frame-src 'self' https://*
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
link: <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin, <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin
p3p: CP="This is not a P3P policy! See https://vimeo.com/privacy"
expires: Fri, 15 Dec 1985 19:30:00 GMT
x-host: player-84c9846b45-rzc5w
via: 1.1 varnish, 1.1 varnish
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-varnish-cache: 0
x-vserver: playproxy-rollout-prod-varnish-4
x-backend-proxy: playproxy5
x-bapp-server: player-84c9846b45-rzc5w
Age: 0
X-Served-By: cache-bma1677-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1664030174.038697,VS0,VE283
Vary: Accept-Encoding
X-Player-Backend: p
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=9joE8Sq14v6.XELoHlfaLnTTVne1EBUnLKOdSZsM92w-1664030174-0-AauwGUguZYpIBYF6cVoIiaLMtP7xT2beshhynTbvC8rJub9k9yv0VcO6Po3fBD2v4xowQNoCHaKrCtv5cZaBX0k=; path=/; expires=Sat, 24-Sep-22 15:06:14 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 74fc404bac17b529-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (16036)
Size:   5342
Md5:    e3b6072db0ec37f5267a060a8f9845d3
Sha1:   829ef443afd3f819ddd5e881c9ef12f3c4a12c7c
Sha256: c87f0613093a0b817640ede5bbd0038db47924e42a3e6bff8f59ecea349519f1
                                        
                                            GET /dist/injectable.js HTTP/1.1 
Host: prod.cbstatic.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         18.165.122.81
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sat, 24 Sep 2022 14:36:14 GMT
last-modified: Mon, 21 Dec 2020 21:57:37 GMT
x-amz-version-id: RdcimFzJWwtinCAQ.f3F8OeQrj2.m2uJ
etag: W/"af651c30e1a69f6f2124e9c1d094a300"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 1a22e1ab5b2ff0e98d5eb7b20e352432.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P2
x-amz-cf-id: Tn06H7nkE-zQY0BsIhyhS-1m9h7y66SjuBFiwvJ6Ub937TA5euqrfA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   77514
Md5:    3692ecdb186588f665cbb2e438e20341
Sha1:   3f375b8b0fb46a28f0421a5ffd52d8dd41a6da1b
Sha256: a85e40e40cdccc0513d47e9e748d9c0bfe05446a00b343077ce87dfa278ea07b
                                        
                                            GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 
Host: f.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: application/javascript
                                        
content-encoding: gzip
cache-control: public, max-age=2592000
timing-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 24 Sep 2022 14:36:14 GMT
age: 422335
x-served-by: cache-iad-kiad7000169-IAD, cache-bma1647-BMA
x-cache: HIT, HIT
x-cache-hits: 1, 19578
x-timer: S1664030174.473153,VS0,VE0
vary: Accept-Encoding,x-http-method-override
content-length: 997
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1839)
Size:   997
Md5:    a726e1c270a0429ccce67d981a12ac33
Sha1:   7319cca36fa04ee8d74ea677a0bb5dd113649011
Sha256: 2601818bf89176145a614b0d50b1ef1cd95272a5bc6be5526d54c464f6172dbf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2417
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:14 GMT
Last-Modified: Sat, 24 Sep 2022 13:55:57 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /en_US/fbevents.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
vary: Accept-Encoding
content-encoding: gzip
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: EIQRhaKtFaNLXJUKbPzhOeNVDNmh25gI9rZivArn8m3prZJsw9stSdVRwWgnhPWh8J7LHaraxU6XzYvBPdibyQ==
priority: u=3,i
content-length: 26839
x-fb-trip-id: 1679558926
date: Sat, 24 Sep 2022 14:36:14 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (64348)
Size:   26839
Md5:    9ecd89752214ef749272eef344b9089a
Sha1:   70a58a49c08934265ee34c74efb01d6b3124095d
Sha256: f76c51487e348977288fcaf83984cd8fe4e73758cc352402774d9eb94680d528
                                        
                                            GET /releases/v5.9.0/css/v4-shims.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.64.132.15
HTTP/2 200 OK
content-type: text/css
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
x-amz-id-2: HpuDfuJOnoRBIn1oGWh6kpnFISyPAhBcUuSh2sgaSOixf+diILYpFUsoF1uDkiR93wgKGECAn7k=
x-amz-request-id: F0PPGVAN5CXAHSGM
last-modified: Wed, 30 Jun 2021 15:48:06 GMT
etag: W/"e140a7d32f343530f016095df3cc2ae4"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 28797194
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a74bISrCofoNnGS7xRFHRmMbFGMdBjlSG8RFmGEL9FRqfWY%2FOA5FfQaVm9L%2BqaErM6WRQmdVwlpQXuquZdUcfqHXZkStql7fbzc3ISE%2FJcHqKVos5uH1wm59Zq7eH7y2aDqEO%2Fym"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74fc4042d84b72e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (26440)
Size:   8584
Md5:    55b929ba64f4d3f2cce613ec2908f8a8
Sha1:   9d56433b8775a90d0b5936828a4780aacff83a59
Sha256: 7d70856871ee9d5da6405b9964a804efbf3a98a80f44f857e14dd24e1658eb76
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5580
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:14 GMT
Last-Modified: Sat, 24 Sep 2022 13:03:14 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /video/1429434486-87985f875a63bdac97b1bc2f8eff09d95b14eb15f3f928702e688bbfc6d50232-d.jpg?mw=80&q=85 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/jpeg
                                        
etag: a95996448643dd049704b35a3b3def4a
x-viewmaster-lossless-format: lossy
viewmaster-server: viewmaster-us-central1-x47h
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sat, 24 Sep 2022 14:36:14 GMT
age: 2232810
x-served-by: cache-dfw-kdfw8210051-DFW, cache-bma1647-BMA
x-cache: miss, HIT, MISS
x-cache-hits: 1, 0
x-timer: S1664030174.480490,VS0,VE129
content-length: 1847
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3\012- data
Size:   1847
Md5:    a95996448643dd049704b35a3b3def4a
Sha1:   9619d9f1052d1230bf94f2196cd696d8735a2480
Sha256: 6bcc8577bb4d010cacbc58d60953c9cddff37c590c52765cfd30f55c42cd05b0
                                        
                                            GET /css?family=Open+Sans:400,700%7COswald:400,700%7CDroid+Sans:400,700%7CRoboto:400,700%7CLato:400,700%7CPT+Sans:400,700%7CSource+Sans+Pro:400,600,700%7CNoto+Sans:400,700%7CPT+Sans:400,700%7CUbuntu:400,700%7CBitter:400,700%7CPT+Serif:400,700%7CRokkitt:400,700%7CDroid+Serif:400,700%7CRaleway:400,700%7CInconsolata:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Sep 2022 14:36:12 GMT
date: Sat, 24 Sep 2022 14:36:12 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5920
Md5:    a2ffc1361f974e653a1fa6d07b98f4bf
Sha1:   b87260334d9181581ae982239bbb5095c1af34ec
Sha256: 80466332aacc7c9083e2f9fb0ee084419cfdea9fc58ab854914bc4be21acf814
                                        
                                            GET /assets/lander.css HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: text/css
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
cf-ray: 74fc40426a90fab8-OSL
access-control-allow-origin: *
age: 638
cache-control: public, max-age=1200
etag: W/"632b3357-6a514"
expires: Sat, 24 Sep 2022 14:56:12 GMT
last-modified: Wed, 21 Sep 2022 15:52:55 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (53232)
Size:   75768
Md5:    39ac1d0a220a0b61a0b453094db8d760
Sha1:   d8bd335f718c2544f66ccf4c43805a94e24d75e2
Sha256: 6ae9aaf53db0822b1415d5d09ee02a59a0442ba0efaa4705f15e9b65e0da8450
                                        
                                            GET /assets/userevents/application.js HTTP/1.1 
Host: go.rickolderman.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/rickolderman
Cookie: __cf_bm=70c8i8cza.3kGxQ73kil33_BIy7tf50No4blUDTxfUU-1664030172-0-AdDhC7P08iqKA5iKjv1vDQMpUYpoAapYHV6wNXw9T0Pardjv4GRziiPdwbgsK8gDX8wm1sjm2DFDAtlFwTseJPcqhOYJaaN2w40xdy9oQV9m
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 200 OK
content-type: application/x-javascript
                                        
date: Sat, 24 Sep 2022 14:36:12 GMT
cf-ray: 74fc40426a91fab8-OSL
access-control-allow-origin: *
age: 638
cache-control: public, max-age=1200
etag: W/"632b3357-1353"
expires: Sat, 24 Sep 2022 14:56:12 GMT
last-modified: Wed, 21 Sep 2022 15:52:55 GMT
strict-transport-security: max-age=0
vary: Accept-Encoding
cf-cache-status: HIT
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4947), with no line terminators
Size:   1749
Md5:    c0449b1d29196bdd533baf49f740c7b4
Sha1:   37a3d89bb59503cad82067b15152615e76fae410
Sha256: f6b5131b0e978c43f951aefc037453d0f2a465727b5167bd39b2161ab408208b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Cache-Control: 'max-age=158059'
Date: Sat, 24 Sep 2022 14:36:14 GMT
Server: ECS (amb/6B8C)
Content-Length: 280

                                        
                                            GET /video/1429434486-87985f875a63bdac97b1bc2f8eff09d95b14eb15f3f928702e688bbfc6d50232-d?mw=1000&mh=563 HTTP/1.1 
Host: i.vimeocdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         151.101.86.109
HTTP/2 200 OK
content-type: image/avif
                                        
etag: a676f5c3afaaf2622eaacf0d2c86970e
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-zn74
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Sat, 24 Sep 2022 14:36:14 GMT
age: 1030423
x-served-by: cache-dfw-kdfw8210107-DFW, cache-bma1647-BMA
x-cache: miss, HIT, MISS
x-cache-hits: 1, 0
x-timer: S1664030175.740836,VS0,VE145
vary: Accept
content-length: 46556
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ISO Media, AVIF Image\012- data
Size:   46556
Md5:    a676f5c3afaaf2622eaacf0d2c86970e
Sha1:   d6e0e4d44807fcf9817af05f3cf2203b1260eeac
Sha256: 3a6419bb7d8bd551b57ea3c4310d99cebf508263913a98b056d450e759cac365
                                        
                                            GET /tr/?id=353138929544697&ev=PageView&dl=https%3A%2F%2Fgo.rickolderman.com%2Frickolderman&rl=&if=false&ts=1664030173927&sw=1280&sh=1024&v=2.9.83&r=stable&ec=0&o=30&fbp=fb.1.1664030173926.1787318585&it=1664030173475&coo=false&rqm=GET HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
date: Sat, 24 Sep 2022 14:36:15 GMT
X-Firefox-Spdy: h2

                                        
                                            GET /userevents/?funnel_id=eVpad2M0a2xvQi9ZTmtjdURWbmViQT09LS1EeU1ZeVlBN2VHQTNrNWYyaVNUM3dBPT0%3D--cc8ee5d5eac0c5891c88244d794455ce5286a076&page_id=TFBRNDMzblZkbFdRWEVnMUhWTVU4UT09LS1qVzArQlljWDhhSkNCWjFEdG9mWlR3PT0%3D--6dcf451f93319896f4242c53f76997f56ba6dfdb&funnel_step_id=cXkwcUo1dFVsUW5rZ3hvdmsvbnpxUT09LS1VSzFQM3FqMXJDWHUxTTYrT1lJcGFnPT0%3D--de940eafbccef0451f7ec7de5b532d662eca1f23&user_id=cG1VY1MwL1hDYUljdStWUVZ5cTJndz09LS16OFhsVDFFdTJLb0grQ2wvM2pjS1J3PT0%3D--da9820a96a76a2a81748cb288077a7956b717299&account_id=cU9GUkZHMUhMYzFMYjBLYUJ1UU5zZz09LS1RakdhVVFlM01IR3l0UERSMU9wT2NnPT0%3D--95d2114e15949c2268eb7ede0111cfed4ef68689&page_code=NTI5Njk3ODY%3D&mode_id=1&time_zone=UTC&app_domain=app.clickfunnels.com&aff_sub2=&aff_sub3=&aff_sub=&affiliate_id=&cf_affiliate_id=&content=&medium=&name=&source=&term=&client_width=1268&type=Userevents::PageviewsCreatedSummary&nonce=85ae4c66-c532-4c74-95b3-65515726ceb0&url=https%3A%2F%2Fgo.rickolderman.com%2Frickolderman HTTP/1.1 
Host: app.clickfunnels.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://go.rickolderman.com
Connection: keep-alive
Referer: https://go.rickolderman.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.16.14.194
HTTP/2 202 Accepted