role.inchcool.shop/nwbvf/xwfa1363rrnxra/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
200 OK 522 B URL HTTP/1.1 role.inchcool.shop/nwbvf/xwfa1363rrnxra/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 72306b742122ec91d9f48b5efaf6099f
8e2833dfb0d50c12f7ef312a656b61c7788627be
2b93b9ae07bfc26e3aad4914a1b5491772687398c2eb20b929040991a313e090
Analyzer Verdict Alert fortinet Malware
GET /nwbvf/xwfa1363rrnxra/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BF4%2BXXgwqzcEtLeSI6%2By8jnMeQ9UgF9Hn%2BrBYvG1eaCkCkwr8XrQICXLvl45meA%2BNyjOT98rzL8GKZW1SQNPvRqYKreb96LC65SStN3SN847KYr3sHOeIqL0eHDG%2F9JGtgCSND8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b64e3d4e2cb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f3cf7e36f17a535e53e5213c02cf2b4
e65acbc03135ce135b9e91b4f74b3e1439faa6f6
a2317476862acd0a92fe523454c3991752b07ba14e7667f421dd9624e0233758
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A2317476862ACD0A92FE523454C3991752B07BA14E7667F421DD9624E0233758"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8000
Expires: Sun, 18 Dec 2022 10:03:25 GMT
Date: Sun, 18 Dec 2022 07:50:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 460af93786e1eaa666f135e6c3fdc634
bc8aeba36225c79718f5de73d79928fe817c5490
471f4e7ae29bcf6ba1f749c0f5d4ab446cebfac5aa80c3e19c6edf21be456eb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6362
Expires: Sun, 18 Dec 2022 09:36:07 GMT
Date: Sun, 18 Dec 2022 07:50:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 07:45:26 GMT
content-type: application/json
age: 279
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcade8542361774f13ecd22557ff8fb8
5e67a3753b0856c765f3b17f1742d3ed684ffb6d
647f8d9d3d1170e60a60e15fdfd9b59445feb56a6ce9d9bb2fa4720f0bfc3a14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "647F8D9D3D1170E60A60E15FDFD9B59445FEB56A6CE9D9BB2FA4720F0BFC3A14"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10583
Expires: Sun, 18 Dec 2022 10:46:29 GMT
Date: Sun, 18 Dec 2022 07:50:06 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: k9xpC3Gd2/g6EBbwT8vCCvjEnzvPFFoNPwWH9eA8ugy2LNMNzInkEVHJwy9VxYpqZhU8GefdgsY=
x-amz-request-id: W2QYZSK5YXT50X8C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 06:54:00 GMT
age: 3366
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 18 Dec 2022 07:50:06 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-22484186-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-22484186-3
IP
File type ASCII text, with very long lines (1921)
Hash 63b00208880655ac8f33ec8a80107c6c
d74194f08d41761aef91f440c43be0b998ee96b8
f72fe7967239767e9a53536eabef43d46c75e74cac71f559f4adbaa3b9aa6f32
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Dec 2022 07:50:06 GMT
expires: Sun, 18 Dec 2022 07:50:06 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Dec 2022 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 10a3a852ef62dc4d4ccbbf6ff396688b
953e40775326102f6c3fc09a18a7039239df656f
30872c631302c914fc93b789892b200beb6284a3ba6753e1ee7f909a1231f2dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
role.inchcool.shop/jquery-1.11.0.min.js
200 OK 33 kB URL HTTP/1.1 role.inchcool.shop/jquery-1.11.0.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 95fe3f4dd117c33f6015e1c3d6df1d0d
d5b8856932d1ea63f51824de0bb50670d2e960bc
e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
GET /jquery-1.11.0.min.js HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/nwbvf/xwfa1363rrnxra/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:06 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:20 GMT
ETag: W/"6388f8d4-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cHZxz8vjdiXPQIq9Cs3Gregp5keQn%2BlByMUGf3TsgAK0XF7RIaJF35h3oA58DzXkBuUq1GT%2Be%2Bms4W3TpJLbNhjRIv3vnvIwfAInuokRvEdZTKXnW9q0dPTY91s%2BDq64c%2FMMVQE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e3ff80bb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/offer.php?id=289&sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
200 OK 319 B URL HTTP/1.1 role.inchcool.shop/offer.php?id=289&sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash e59546ebbf9ec6bcc2e59c0995ea1b20
83c9810b05032b3fe3699476094aa0a9366aa61f
1bfd914fb471dccb7ae1f57011e8e47fc5caad5ebde652b7bc102c9544bdc733
GET /offer.php?id=289&sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/nwbvf/xwfa1363rrnxra/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=voJQ%2F2RhPy3RsoY%2Fvh7vakgThUTl%2Fcb5E4HI6FXZd0IdeambsIXRvLpxnsEwHA18tqNYCVhjSAd9%2BwNCDIxzL2fAG1bgyVI2rBZ0QQgA9vtyyiVrAbshRluy1kpKkKvNu2q0gfQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b64e424a22b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 07:08:00 GMT
age: 2526
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 2d1752cd6eb7f48e7494373911a5b996
43d9c23c4d03cccce0fc478f0e12c0874dc762fd
aded7fd1d638c001b0b462fdfeee0549d2ed61b51ced88eb83690e2e20ed36d8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3440
Cache-Control: max-age=94445
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:06 GMT
Etag: "639d86ab-1d7"
Expires: Mon, 19 Dec 2022 10:04:11 GMT
Last-Modified: Sat, 17 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70B)
X-Cache: HIT
Content-Length: 471
role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
200 OK 5.2 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (15370), with CRLF line terminators
Hash d8bd92413cdb1cfede6ecfe95482dda1
2b815440b64eac9f239746288d53ff020c47f8d8
d0d03a4e9358dabe7939b87fd8c4c98b6c7046c3d335d562fad7b141570122b1
GET /clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AfYJB5hGOXlDg1%2BuuMyL3WvENIS2m9%2FxN5OThcgeQxedw%2FDoKkomt2eY4KvOVhPUdNEWzKbgFzjsR8Y9XrIKJv2NEcDajJu7xKQKeAq2vg%2BNG2ilN45CaKMgxgAW%2BKshzvWirOw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b64e441bb6b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/style.css
200 OK 15 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/style.css
IP
File type ASCII text, with very long lines (855)
Hash dcd06935a495012b76e5d75d7d159c2e
d2dd2d7dc6557fe8e593dbeba95163341c7dc74f
f2bf9db1ef940bd0bef4541a3d7d6a8dbc634000f4caef4603a03bddfb9dad24
GET /clicks/SonusCompletetinnitus_files/style.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-18baa"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YQjlM65NfUA8UK4sXkYrKj0GBHQVHcttPbF5rbLijZ5vpi%2FzRFuRAbOmhi97AcwhPQfnU4bEaRHKne4ojjJSlBQGUZo5anZsR%2B6uZJmO5XsR%2BzwXcRPgleDhhbVF%2BsGsf%2BiPS5U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e456a0eb4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/global.css
200 OK 2.1 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/global.css
IP
File type ASCII text, with very long lines (9194)
Hash 7253308f9817d03f4279ba81d462ab20
7b4a488c3b26579751ddd72ee4eeddd6785391d6
3b3a9c7d49a3d715b6febf95adb409982293e5f3bb602ccef9f84a75d0a68a9d
GET /clicks/SonusCompletetinnitus_files/global.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-519f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HmXzfdu9EXifkKsF8Rng1sQd%2FJwKuGzm884J0YIlKD9jBugG6T4jBwDqv43Mdb2wt%2BqDieYwQortI4r2uGgTOX2wtcDREH4GaPMwcxbtCxILZwY45sXTJg62o%2BAgdg4pGUbRDxw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e4568530b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
200 OK 254 B URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
IP
Hash eed301ee3d1a49ec24b370be2af26b19
fdf2b75ebefa138ae3f1432f21d398cf16a80bcf
ecb8b31df57b425a60eb3f7e1b4445f2ee8318956028b1f5c41c5955f0bef638
GET /clicks/SonusCompletetinnitus_files/css.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-38b"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7WqAApWTf5KNJtULv3HbGocS%2F%2B2muxpMQIc8m4Y%2F8i10JKiTT9H0bIUBLelVTmOEWlEzJw4tuPoolCF%2FajOYy69dIae4H2Frd0Mb%2BaabOKR6p6BB3MSVFXSpy6VM4BaRcF4388g%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e456cc3b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 7aO52Fb8BkXkQ0eHeJIU0A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HLhYAsWp9QliKoizBkAs2atFptE=
role.inchcool.shop/clicks/SonusCompletetinnitus_files/frontend.css
200 OK 21 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/frontend.css
IP
File type ASCII text, with very long lines (65493)
Hash ac968c2953375f9544c2e75d78073b80
23bbcefc9f81bc5978770f3d6da64b89b99aacf8
d2952a13da8eeaafdbf2918b348b035ec6c0e6a0183cff707ac89c9c7f0ed01b
GET /clicks/SonusCompletetinnitus_files/frontend.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-307cc"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fWIsM1Q4c0Ik5JYIxzPRXBrVilcBqavIqSt0qSDvdGCBq5CaXTrV26VOEanI%2FtPvFW2nz6dF05WC5JV%2BzAY198uWNA7TGnQ9HlOAMEXM7U%2Ffeuk3UOFInSRy3WUC6hCvLjLc%2Bw8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e456ad81bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/frontend_002.css
200 OK 14 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/frontend_002.css
IP
File type ASCII text, with very long lines (65497)
Hash 7906ef86d55e7df783d8eec8a21a14fd
37b90b7dcf42702d1dc8f2929dbab282f633fb8e
0937deb44b9a144b05a71b7c1d7110e07bab4dc5db08dbc677db97a6f0f1fe43
GET /clicks/SonusCompletetinnitus_files/frontend_002.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-1973f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=INQiHWK%2BACZgirXcyPCVxv4kDd05lKU6ib79%2BfBds06uVngsgBI%2BOMVSRGZDuDgI%2F%2Fn9AcWXuvugeK9D0a%2BtjQsw%2Bt1SrbJZZ7QuvwAXHjbXhUOUoN%2BFUa2Qr4Mcfqhzvak4L4M%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e456f4eb515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/post-519.css
200 OK 1.3 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/post-519.css
IP
File type ASCII text, with very long lines (4592)
Hash 8635c40916d198f3dde81fede870d2e0
f60af836ee03ad82344c7f1eb1ed8ce3b3f24508
e0481cce9872e490caf2573a61d7e9c1466a620c90416833d0e8ad905d0999ee
GET /clicks/SonusCompletetinnitus_files/post-519.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-23bf"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nQFkU75mKBAnvP6RdMyODpjeLTQRg4pCh6ZIdpHEXT2y4I1EkOazfUKSpjfeQ03joRM33I5u49wkbmHAzVFKzRjsaNII6NjXp6iuj1AkMQ5DntV%2FsOvlbh31%2BmG2fJOLuQkjIb0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e457f0f0b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/jquery.js
200 OK 30 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/jquery.js
IP
File type ASCII text, with very long lines (65451)
Hash ca9d617a98c509cd24e10eae39ea15d3
1a9197526a13967413a4bba8e5a2446eea4fd4ea
a95d26bd14a6aade75c9a263f28d7fc0effce309a114781e6abc89b7c0c0fdae
GET /clicks/SonusCompletetinnitus_files/jquery.js HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-1538f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bS8wCN%2FtwRz7r94o4vaJX5mygz0VS7WDL9qlxPKmFeq7sPH4lG8%2BUKO5SToPsPnJLC9QKLvsglBwraE9XXCv30D4tr6JGFpZMRlBxWH6vHmsGULJawuKNvxK97rI0FLnL0FvvmU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e465b04b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/prostate-1.jpg
200 OK 58 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/prostate-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x525, components 3\012- data
Hash 4312030b1540bf4adb326bc468d82782
096530e02a0d0eadabeca8cadb8a055e6bc8442a
a1b1b90b1726ff072f4b1e157269ca74cb7e89c412e60525ac364bc7c0e9278b
GET /clicks/SonusCompletetinnitus_files/prostate-1.jpg HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: image/jpeg
Content-Length: 57930
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: "6388f8ca-e24a"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UbqQgcc4QmTVy%2BHsLXHc5PS%2FrwYPDR9khDZC9xj8OxKTRDyvmQ98Mps9iQuQSEsUhH6p%2FHK0MZ6Is36VmYKh%2F7V6V1nc2VLlRXMDSBhy%2B%2BNWyHLYN3uLL7x5LkHXEnVa%2FSX%2F41U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e474bf21bfe-OSL
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/fonts/S6u9w4BMUTPHh6UVSwiPHA.ttf
404 Not Found 131 B URL HTTP/1.1 role.inchcool.shop/clicks/fonts/S6u9w4BMUTPHh6UVSwiPHA.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/fonts/S6u9w4BMUTPHh6UVSwiPHA.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=75Cf4QJdQ%2ByR7pVl7D2dfQHLYLnHRNFA3Txtqo%2FnAfMp0EhLj1g5714xiZPzafDV5TU2xEKYf2EUKvo9Cm5LvcEr8Ttb%2Fjut2LpELo0x%2F2TsuY2xyGvwTXIWu54i04xcWpHrvoY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e479c30b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alwg.ttf
404 Not Found 131 B URL HTTP/1.1 role.inchcool.shop/clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alwg.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alwg.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9dQhu2R7SPxb0vs6Ag7%2FRpNAm5%2FMlpkXlcvfTAproAmjxzsShVaECyn64LIgLXKDUiGPYT3K7%2BcXtQZFbqYAzhhR3eIOgQQMXYm5h945UeThZqv0b9dclDaaJZs6wQsYVMwoxn4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e47a9ac0b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/3c74d4a9e0d1665351f749d5bda254778cb8c2b39d3af9f7feb426b0cb3f.png
200 OK 6.7 kB URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/3c74d4a9e0d1665351f749d5bda254778cb8c2b39d3af9f7feb426b0cb3f.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 3fc866dd424beaf246da4671122aa5cc
01867e9939dea33d74abf8603200d3afa0965ec9
db3bf27182a095ce8eb5721b4547730034b6cf3751c11a32e43e3c0864424813
GET /clicks/SonusCompletetinnitus_files/3c74d4a9e0d1665351f749d5bda254778cb8c2b39d3af9f7feb426b0cb3f.png HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: image/png
Content-Length: 6693
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: "6388f8ca-1a25"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W4GSvAcGJyLI4VhvQw2nsIn9NHanPEarK5B%2F91rd2rKojU7TBYILWE7oNuZiCd5Tgv5qD%2Bhy%2FqvJtSQLt7IRhXwJ7yJWjuvbh1Ud6q6jdK282CE%2FzeKoledkEsLGrmGAovp341o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e47492db515-OSL
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alwg.ttf
404 Not Found 131 B URL HTTP/1.1 role.inchcool.shop/clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alwg.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alwg.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c5gIGMkHq7SEgw8B7QvG1IpawuVRCyUQGjZ7DCV5EtjKcZvwiow6lbqqmPeoqvjWtILvdGmyO843TJU7nV7dixeSt1l1Y0bG94rsDsX8gpHHJ1L9Yb5McDJg2DmtT9xTEsEkcJQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e47a8a00b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/SonusCompletetinnitus_files/blank.html
200 OK 548 B URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/blank.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators
Hash 0a16aec008013f053a922381dee71f9d
13a69b2e43a426ce54f9a47146955ec0bb169172
4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae
GET /clicks/SonusCompletetinnitus_files/blank.html HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cSQEako2EJcxw7y0mvHXIeIVg8N6OajykSduB3laeJJ%2FKMbgi9ClqT7UZ6SBX5J%2B4Wepqk3zeUzXy8%2BjyvtCRTqyWWeZV4p2T7Jm%2BeJgWG5%2Fk%2FTIKLIdNUudZk6my2RQz24kkOU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b64e47ce4fb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
role.inchcool.shop/clicks/fonts/S6uyw4BMUTPHjx4wWw.ttf
404 Not Found 131 B URL HTTP/1.1 role.inchcool.shop/clicks/fonts/S6uyw4BMUTPHjx4wWw.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f758914aa953116df6aebbd7dd3c71cf
9e679d79c4e87bad87ab10d8a5f5d955a50c0350
2b35b9f42b9b30156ec8d39984dcab7b255df8e79682ebd0213fc45a9982cd10
GET /clicks/fonts/S6uyw4BMUTPHjx4wWw.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
HTTP/1.1 404 Not Found
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tF62aGcO9E%2BG6aA%2FvDLZndLNJzc0gL2FmA30sl%2BbuMM3MyiKMkxp9OD%2FWu663KlTUCbNR4iCPpZjyfxAKHHsFL1BmYlGfctX5gHCkLegDufy4K0UYCcxDSWUKVTQKNBP9bDfpc0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e484c6f1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 18 Dec 2022 06:41:08 GMT
expires: Sun, 18 Dec 2022 08:41:08 GMT
cache-control: public, max-age=7200
age: 4139
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
role.inchcool.shop/clicks/SonusCompletetinnitus_files/blank_data/inject.css
200 OK 928 B URL HTTP/1.1 role.inchcool.shop/clicks/SonusCompletetinnitus_files/blank_data/inject.css
IP
File type ASCII text, with CRLF line terminators
Hash e1c22e631b7cce42e3ef13cd9bb02ff5
6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae
93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc
GET /clicks/SonusCompletetinnitus_files/blank_data/inject.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/blank.html
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-f28"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6qe1OVqMLx8Jh5KeBz1%2FrwQ6nZ7PEu7dU7eJ%2Fdlbks9YGT1lcZUiLB2cgcAFmj1JgqFIcJrTHfRFPg877xGvNUh4peVKaIzVtP7CBo5S1gSW14XhsHPFmghduPFYmclm5KNF%2BGg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e49cdd0b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0973dd05c36d5b21a858d6a6bec71334
e5bc1af376e6cd71fe3be45b393ceb1f61434891
e46922306d68a94ce397d96c12c5ddfd0341e139369cab988a6c57b57a9bd0ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
role.inchcool.shop/favicon.ico
200 OK 69 B URL HTTP/1.1 role.inchcool.shop/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16\012- data
Hash f12fb6edbda074603f749a028770f49a
419983c6073469bac7fb8535a847b8f78c2040ce
8aec3412c7c37feacec2dc9d7b2f3560a2e0af0af573085665a57e1d09ab397d
GET /favicon.ico HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLf6bedJpeB5jEWdqmwDXRH3G0hC6r0BCTjFY9WQH0yjLWgcGlPmEtxWTDl_BdOOK1dgHb2YPAO8aPjRq2h7WFRs
HTTP/1.1 200 OK
Date: Sun, 18 Dec 2022 07:50:07 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:52:31 GMT
ETag: W/"6388f7ef-57e"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DeQ3qRrSAt%2FInGURCHPcPvEWBuvdSh%2BOj2rQCvMgTSHYC7IryCrlpPub71AZi1aydj5akB8KNdO3XFYJCF9DvxXWrL5FqwacAQcWY%2FMWwRNhT%2BT1BU8OVZ9%2FeiJSHC57HQtmqFI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b64e4a2b9db515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&gjid=924128147&_gid=1908186052.1671349804&_u=YEBAAUAAAAAAACAAI~&z=831735111
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&gjid=924128147&_gid=1908186052.1671349804&_u=YEBAAUAAAAAAACAAI~&z=831735111
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&gjid=924128147&_gid=1908186052.1671349804&_u=YEBAAUAAAAAAACAAI~&z=831735111 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://role.inchcool.shop
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://role.inchcool.shop
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Dec 2022 07:50:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0973dd05c36d5b21a858d6a6bec71334
e5bc1af376e6cd71fe3be45b393ceb1f61434891
e46922306d68a94ce397d96c12c5ddfd0341e139369cab988a6c57b57a9bd0ad
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 953635cff82596ecfcbd7ff83474031a
5ea2fa051d49d203df6582bc273639a90348f8d2
bb63f27f12c917fccddd13680972fc6e12a8e0e4dcb9b9340f7f911c8b1db9ae
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&_u=YEBAAUAAAAAAACAAI~&z=639879755
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&_u=YEBAAUAAAAAAACAAI~&z=639879755
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&_u=YEBAAUAAAAAAACAAI~&z=639879755 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 07:50:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&_u=YEBAAUAAAAAAACAAI~&z=639879755
200 OK 42 B URL HTTP/2 www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&_u=YEBAAUAAAAAAACAAI~&z=639879755
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=883099255.1671349804&jid=1895762472&_u=YEBAAUAAAAAAACAAI~&z=639879755 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 07:50:07 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2f3dbc33499e42ecb967c87f0df23a85
96a87c596ae880eb482b0e8a5fdb6e09bb728895
aee03631139a47dfbb4dbbfd4257d10afc3b814b5f70366759bdff153e9e2bd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 157b62091fad279063f540564a4c72e6
9db33b844db31eed03695c97daf4c84a4d7d265f
92904432175c023613dea4d660d2c9098e00b7f3b628c8519bf5b404cad450a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 07:50:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 07:50:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 07:50:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 07:50:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 07:50:08 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b52a05c34a7c3eaee8f5c1f73954364c
89c5023a0c43860efd362d0d2751a0ea9a204f54
94de3b3351ec8035986be412843212eebe4a3c9d6521b2a0c922870d5365adb8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94DE3B3351EC8035986BE412843212EEBE4A3C9D6521B2A0C922870D5365ADB8"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9388
Expires: Sun, 18 Dec 2022 10:26:36 GMT
Date: Sun, 18 Dec 2022 07:50:08 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed374d0c34e8b2e15f08a6479a4f45e7
5db9e59699048998f0685e940640eae19ef11c8e
9933854830be796a87cfe44b6b8336294e2d3dbbe3205f267720aca6968c3a21
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DmeWRYIlUMCR8Nds0-n0a9ju0ySR7ZuTAS82Lu8sZxPXQpBJkqzvww==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:52:21 GMT
age: 35867
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4a5f117-9f4b-424b-9fa6-90cc78f66709.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4a5f117-9f4b-424b-9fa6-90cc78f66709.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6272c50d983ad7a1dc4ffdac8af30bd3
f85d27fe6f179b734ebc693de64ad2c94ad4cf13
fdb3764c309f38b2b7d4fc0020897f011daad7ce120dace7dffeaaaed6ffdc98
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4a5f117-9f4b-424b-9fa6-90cc78f66709.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7839
x-amzn-requestid: 173ca9af-c95f-4a33-a9af-ca2df02168f1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11nFC0IAMFl-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e368a-276da17e300ced9a5ee66b65;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wtUgpUFQ5mFblne0aNFiHboQ7QkW0OE3fBIpYjwRTKOFDyEs2kigjQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:28 GMT
age: 35740
etag: "f85d27fe6f179b734ebc693de64ad2c94ad4cf13"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bfd0e913579b4ff2f511223d70cb01fb
497e0ffef816e100e6ddc221ec17d5f389c1142a
bee68ae1a938a5111a32dab4ec4f6964994e6c39143eac9ab94d6c5e29999372
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KyEMrUTeuVTPJ3EIkrH1DLYqa4bHK7fe6dApTAFP4XY0G4airnflGA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 36782
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12c4c2232b6d09e9085f0214b3260c1e
a24f8e949a2f2a973fe2dd5af994cd970d37f13a
000475ed7d0aab9a7dab3e25f0a29f82552739fea99f98cbf5131282d0db7d63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10670
x-amzn-requestid: d72e1904-caf4-4c72-a811-d1bde023f4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11JGCsIAMFRDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3687-7789040d71253d00378f9162;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8qqSQbj22k16ApKTT8y5BQItInb8EjZuACdWcsW_FnMysvnDADbLxQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:11 GMT
age: 36777
etag: "a24f8e949a2f2a973fe2dd5af994cd970d37f13a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345d372d-49ec-4387-99c1-d3cf9f5906f5.jpeg
200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345d372d-49ec-4387-99c1-d3cf9f5906f5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e9d18ca29ccd52a2d503336cd466b00d
d9efd68382ccd3309c943690088cca4e5934ecff
de202292f0930aaaf434fc9b54652707b9da5ef7ccd7a1f888d3bf46755874be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F345d372d-49ec-4387-99c1-d3cf9f5906f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5439
x-amzn-requestid: 52d18b91-20fd-417a-9fb2-2d039e05e6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2Z2HCXoAMFsqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3772-2f8d69d42408b30e4725763a;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:41:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: LXJDMcnNM5qf9LmdkozPQOR1WBoiXGA4e4jrw9CE41NtDs_NxTuueQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:23 GMT
age: 35745
etag: "d9efd68382ccd3309c943690088cca4e5934ecff"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ada04738696f861648635c9ba98841e4
ce644cd4349d88aa7c24b2503b0b18b444061639
e5cee777efbf1d8a0f95f6cce71199e5f016a91f90cf0afe38bc86654b9d730d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JecluZu8ExMmP-UHM8QbK-bjm_yqULU1tl2QQDfKMea8NHM6y2JI7g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 36782
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
188.114.96.1
142.250.74.40
93.184.220.29
23.36.76.226