GET /njkah/duxnhmvh1363swskdmo/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
|
search
 188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Sun, 18 Dec 2022 15:15:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lc3yWxNAMVW6GNpnlZA%2FPdsrlAIbZ0FVZ3EmiwKWTmwMD8V6rmgLHBPF%2F2l1mUUSC5MXg0Fd8vWHkH16tosxhb32zj4jJZxXXuySwYqaXRV%2ByhmFrqT5DOJcl9DaTDtSEWtW8Ng%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8db007e90b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
 23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "471F4E7AE29BCF6BA1F749C0F5D4AB446CEBFAC5AA80C3E19C6EDF21BE456EB5"
Last-Modified: Sat, 17 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11907
Expires: Sun, 18 Dec 2022 18:34:09 GMT
Date: Sun, 18 Dec 2022 15:15:42 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "5F871FFD142470F132FED1C93F5F1A7FE6A5ECC3B4311D3D47555FCE1D9A35F1"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3156
Expires: Sun, 18 Dec 2022 16:08:18 GMT
Date: Sun, 18 Dec 2022 15:15:42 GMT
Connection: keep-alive
|
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
 35.241.9.150
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 18 Dec 2022 14:34:18 GMT
age: 2485
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "FAC00CADA519279717E2A13528CB202D292FC92ED5EB42782C41F8E7B9509EAF"
Last-Modified: Fri, 16 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9794
Expires: Sun, 18 Dec 2022 17:58:57 GMT
Date: Sun, 18 Dec 2022 15:15:43 GMT
Connection: keep-alive
|
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
x-amz-id-2: AfvCMmduhj3qfEkj57pHDt74R2C41LeDaZ6eJ80mTlu5d4o8lzlHVfeI+hBcoW7B0WmN5O28vWw=
x-amz-request-id: GZ1B7CMVBP70PJV1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 18 Dec 2022 14:54:09 GMT
age: 1294
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.117.237.239
HTTP/2 200 OK
content-type: application/json
server: nginx
date: Sun, 18 Dec 2022 15:15:43 GMT
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /jquery-1.11.0.min.js HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/njkah/duxnhmvh1363swskdmo/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:20 GMT
ETag: W/"6388f8d4-1787d"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 304
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gEuKQgJYeBqEoUxsJxMDcQEz63XuGpc8g1QI8sIabCPRmxbo8n%2BHzNxA2QdJo9YT%2Ft0ZZDy7dTYOjKIVxD38sPKK40kSEyAWm5L8BOH%2BU0O%2FiDDYBuBpAd1j0%2FJbY5s99qh7KOk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db02d9bfb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /offer.php?id=289&sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/njkah/duxnhmvh1363swskdmo/s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
Upgrade-Insecure-Requests: 1
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ToJ5nxxvulrMlFTH76I%2FwpK2qsPDQpgBUryS2DLOKnPzkGRQ5dVeTul6Moo2cHpeYgUu6ha1uOiSRDTYpUdXhTJ6%2Fdqve%2F3uDNqMTsvw4FU5zkEkK71Mh0jAQkdUXRET2D2ecaA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8db035a5bb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
35.241.9.150
HTTP/2 200 OK
content-type: application/json
access-control-allow-origin: *
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 18 Dec 2022 15:08:00 GMT
age: 463
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j7NG3mi8t0Oemjsm6fZ6odLxeKVN%2FfWVkJgHgXUMvDA72NnnRx5TAAvSEjCZHy3lEXNRvKTL9ShSNLy6fwxLSNQnad6XOfKWgkziXzyPKnUVtzsWM4PX9to4xJbuhpCyTB4BT7g%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8db049bbab505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /gtag/js?id=UA-22484186-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 18 Dec 2022 15:15:43 GMT
expires: Sun, 18 Dec 2022 15:15:43 GMT
cache-control: private, max-age=900
last-modified: Sun, 18 Dec 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43582
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
 93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Accept-Ranges: bytes
Age: 3778
Cache-Control: max-age=154446
Date: Sun, 18 Dec 2022 15:15:43 GMT
Etag: "639ed82b-1d7"
Expires: Tue, 20 Dec 2022 10:09:49 GMT
Last-Modified: Sun, 18 Dec 2022 09:06:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /clicks/SonusCompletetinnitus_files/css.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-38b"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=59c6li3Y2cTf11V6FCD3MBGVAlKYmEMZGnE53bQfyJmwuP1xv%2B5%2BvaJoLkUsipclSPdDWnkjdVM%2B6Ypw%2BwojniuadLabIvmROh32A%2BbliQQ7WEw%2BbPwm3cbw%2Fsp7d%2Fefc3DFjQ0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db05fd61b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/frontend_002.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-1973f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d0D%2FuHfLCNcaPa6k%2Fe5mDwuO7sfNFWe1u4l4spk7BftN4nIHRibmiyK6%2FiGRHkDbt8wKmfGc37jvr5ahOUU9byhczKjZwLvZmQ%2BMLV%2F0DTklgOTriCo5NRauzbhvxVolgPdXGSo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db05fef8b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/style.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-18baa"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K5Z0AoBbsNkrt0CRYzqh6btGlU%2FgpvqzZ81Ca9o4SHwUmRhxQ90euixOSg407FKMrdFlSfsH8sefYHyWnqoX76MIQU0jRK8KI4gOXXygGX8rppqki34UQqkkuNSbDe9%2FvZME1uw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db05ff02b4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/frontend.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-307cc"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyIQQ%2FsWOBKqL0NFAw5vbyaVSABRHDwT7kI1p7dTWXKSacc4mMOF8sfQSAa0oJqndTo%2FhHhp32ZW%2FogJNAO7NMD4CEtnkUY91QRdPmURE97%2BoAQTfEBHe1sBImAh%2B8rXju%2BXjr0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db05fbcbb515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/post-519.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-23bf"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W5LDw6oWPojvnY%2F7GZw%2FF0rIHEjqMDSFXon%2BwI5S%2BBTY8YnzhVurEFyzugoRhYfartCQoOktx2i7sCYz4ipE7pz4izLxmZn2ynIVH8Ubrgek4L9v7sMBbQHUSfqXlUDh0NXlZls%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db060fadb50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/global.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-519f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CSda8V4D6exCN5Sip2YxnIpzjN25IPzfW5jGDUD3trhoYLgOgfa1McUosTF%2ByD%2F80g3Gh7cTyrFiKvsRI13CtisGB1uP9xd9OBMtfvqWQtgB6NH7lQ8NJwcbghRyMcrcr9FC%2BDc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db05f9e7b518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/jquery.js HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: application/javascript
Date: Sun, 18 Dec 2022 15:15:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-1538f"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SVwhMaXWx7mzrSvwKc2LYTEYj9LVYVICZqqDSKnnS0ElgF7SrgIqsWSBOxJjJLTqO%2BtAiiEWcnOfnX7ADx1MbECuQfcgMicfPO66szfq556dBlciziKBmO8CYRnQXsd79s%2Bcy%2BE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db06ee6cb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KzdAHccqYqrX+zo/gDMAGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
|
search
52.89.217.163
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wzK6wgfLYPTpxedrN+jxpzFLxOI=
|
GET /clicks/SonusCompletetinnitus_files/3c74d4a9e0d1665351f749d5bda254778cb8c2b39d3af9f7feb426b0cb3f.png HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: image/png
Date: Sun, 18 Dec 2022 15:15:44 GMT
Content-Length: 6693
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: "6388f8ca-1a25"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iVpGC4qK4Ys8ikeH6p5aqan0fPTk61%2BT%2Fquwhmvk83kFppgo%2Fe8L9WGMEXdFixuo9D6v9r3RkgljhkKsJUYzK0tzjy3wXfjvKJZnXfWgJpUONTyx6YPc%2BtWfADfnPG7iIhtsIe8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db07cda1b515-OSL
alt-svc: h2=":443"; ma=60
|
GET /clicks/fonts/S6u9w4BMUTPHh6UVSwiPHA.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
|
search
188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SktqDeiK021Zdmb3UWcebCNpdC%2FELnPpORB1xrnd179pACRjF7BBl34a5%2FBKh5%2FoumdItcTOpFn3ZVxX3oZMxf2zD3dofyv4KzxpYndKrVIAfHuYGc1hAOKgzkFJNMfV1e%2F4Q9A%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db07e93ab512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkbqDH7alwg.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
|
search
188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QqJEmpd7dl0GgRuWC0Smcd9wHCtgffq4IajU96L%2FvAmP9VRaSImdbWsm9HpyJkNklZQTd2P%2Fd8n8n24czaM%2FNyZnIIZ88a3sWcpSPUsL4MD2raqAvW8O0oOW3aJ%2BVm2JgyPKA4s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db07ec5ab518-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/fonts/u-4X0qWljRw-PfU81xCKCpdpbgZJl6XFpfEd7eA9BIxxkV2EH7alwg.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
|
search
188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wrp%2BtjIyW122ai2ZqKJYcx0%2FOoSJqMAJGb3UUxsFgDIQOo2u4S501Ip9I%2FrIlsjiQEk2%2Bp30b%2Fd1bobAfWmAlWcK%2FzQKyO99M2nwD5mcDzPvKauo6aJ2xIgAoF3H33%2Bd14MUxqY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db07fa16b50f-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/fonts/S6uyw4BMUTPHjx4wWw.ttf HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/css.css
|
search
188.114.97.1
HTTP/1.1 404 Not Found
Content-Type: text/html
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: EXPIRED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8H5F%2FYcf7tRRynukjcpWchv%2BqdYXlzbqJd970bNlBcTRhh2EDwOc4rjo49MrguB40e62vTbaZvzGc44nUgOj8DcfvbEG0tatjMNgBMc4NY8JmWuDC0ur8zIzCUTRr0whzvLuXsE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db081fdab505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/prostate-1.jpg HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
Date: Sun, 18 Dec 2022 15:15:44 GMT
Content-Length: 57930
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: "6388f8ca-e24a"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nUaBacEXjVLErBdHKKNm%2FcLG1woIIVK2FnWRKGMJuq3MH4qH0TWv9%2FUdgmePcek4vwUnd%2FnyB0%2F7UHPwOic9AUSygJpeEufA5lYSjONDckbsrUvPHKDlrpUktiR8a25yozCoK28%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db07c935b4f3-OSL
alt-svc: h2=":443"; ma=60
|
GET /favicon.ico HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: image/x-icon
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:52:31 GMT
ETag: W/"6388f7ef-57e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 303
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yDFJTRgZF1RvIAcprvf%2B7OvfOA%2B%2Bf%2FTiqiUTaMyGM3ve%2FCbt6tqWnb70b4XIP60nIvEXdgFsX%2FupIYi6KJPbU%2Ff9kRSTkb1PTM0%2FLbHh%2BSaZ3cscipFnLs1MtQ4Hu2GKnkE96K0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db09ab94b512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /clicks/SonusCompletetinnitus_files/blank.html HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus.php?sid=1001278&h=s64fTlTWBPnKjin_x_x7qhL3TtW_7AoR9289azmma6o/ec9aG4WP0kgeBY4TEPkJLQQWA6BAu3u7U5f2dhCo690nr9GkZjmcCnc6A9iHKpIvz1pu3fjzMfNcpv1HogHDTXe_ePoNg_XWmHy2hfeGbwU
Upgrade-Insecure-Requests: 1
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/html
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V5oidUnyIJABXUGB7gWS7239YrhX3uhWCtUdUv2dShPRiKBGgVxjFtUsh4f9Co2moBwkkWP4D%2FsC29SR2JGezdjwCV6su1FhxHnqmmxDuy4azBdJF6a4oiHlYVcgOYjccCNxM5E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77b8db08ceeab515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 18 Dec 2022 14:41:08 GMT
expires: Sun, 18 Dec 2022 16:41:08 GMT
cache-control: public, max-age=7200
age: 2076
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /clicks/SonusCompletetinnitus_files/blank_data/inject.css HTTP/1.1
Host: role.inchcool.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://role.inchcool.shop/clicks/SonusCompletetinnitus_files/blank.html
|
search
188.114.97.1
HTTP/1.1 200 OK
Content-Type: text/css
Date: Sun, 18 Dec 2022 15:15:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2022 18:56:10 GMT
ETag: W/"6388f8ca-f28"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=chkUZ6naPIIT2cdRZKcDp8CtT4xyoymzwrmz0I8dSvG2Yex0Kx4E2TS1R%2Bdqh1pze%2FnJPNu7QnP45JzTUk0bS9S8A3FEn82FOa2aJ5%2FNQs5RN%2BbH6Ncfx4nlMH00cnQOuiAgn0E%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77b8db09cbd3b4f3-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-22484186-3&cid=1145488568.1671376544&jid=810397392&gjid=218400701&_gid=496906357.1671376544&_u=YEBAAUAAAAAAACAAI~&z=1428096886 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://role.inchcool.shop
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
209.85.233.157
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin: http://role.inchcool.shop
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 18 Dec 2022 15:15:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1145488568.1671376544&jid=810397392&_u=YEBAAUAAAAAAACAAI~&z=718260698 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
142.250.74.163
HTTP/2 200 OK
content-type: image/gif
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 15:15:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-22484186-3&cid=1145488568.1671376544&jid=810397392&_u=YEBAAUAAAAAAACAAI~&z=718260698 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://role.inchcool.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
|
search
216.58.211.4
HTTP/2 200 OK
content-type: image/gif
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 18 Dec 2022 15:15:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 18 Dec 2022 15:15:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4645
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:45 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4645
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:45 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4645
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:45 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4645
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:45 GMT
Connection: keep-alive
|
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
|
search
23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Server: nginx
Content-Length: 503
ETag: "6AA1FBFB532FC85B041684E259BBEECF53C7E7F711C8D414FC0775C4C1404457"
Last-Modified: Sat, 17 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4645
Expires: Sun, 18 Dec 2022 16:33:10 GMT
Date: Sun, 18 Dec 2022 15:15:45 GMT
Connection: keep-alive
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a667002-4518-4b30-baaa-3a4eab2bdc1d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 8696
x-amzn-requestid: c897aeed-a082-46a1-965f-39e8c763cb05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10ZH3jIAMF0gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-548ac80840737a20743980f5;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JecluZu8ExMmP-UHM8QbK-bjm_yqULU1tl2QQDfKMea8NHM6y2JI7g==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 63519
etag: "ce644cd4349d88aa7c24b2503b0b18b444061639"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2e098e9f-4d93-4282-beb5-b37a17658134.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 10670
x-amzn-requestid: d72e1904-caf4-4c72-a811-d1bde023f4b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT11JGCsIAMFRDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3687-7789040d71253d00378f9162;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8qqSQbj22k16ApKTT8y5BQItInb8EjZuACdWcsW_FnMysvnDADbLxQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:11 GMT
age: 63514
etag: "a24f8e949a2f2a973fe2dd5af994cd970d37f13a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe2ded193-0301-4ad3-a888-72c52212ad95.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 5185
x-amzn-requestid: 3087af97-3f2d-4848-b297-eba8d84f10c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT10YHv8oAMF2sg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3682-7527022d4bd9c15518fe75cc;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:37:06 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KyEMrUTeuVTPJ3EIkrH1DLYqa4bHK7fe6dApTAFP4XY0G4airnflGA==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:37:06 GMT
age: 63519
etag: "497e0ffef816e100e6ddc221ec17d5f389c1142a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0c81bdf4-0a78-472d-ba75-80092016f334.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 12125
x-amzn-requestid: e44faa15-1dfd-4bc0-bdfb-307c3de2755d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2QPFZAIAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e3734-33d636210a1e24742ee71187;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DmeWRYIlUMCR8Nds0-n0a9ju0ySR7ZuTAS82Lu8sZxPXQpBJkqzvww==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:52:21 GMT
age: 62604
etag: "5db9e59699048998f0685e940640eae19ef11c8e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf66930-95e3-4a55-8010-b1b6ca56bb72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 11961
x-amzn-requestid: 58d907ec-0831-48ff-bd18-92b1f364190f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2PeF__oAMF2lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e372f-1c97663c43ee7c5552e3a6f9;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:39:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uzlYcLMD0Q7UOHq2PSorqX5sCd-EuxB1LIKHLQeD5CusFroqIUVNRA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:10 GMT
age: 62495
etag: "067e0a350aaf1a509e8263f38191394e2fa1ee8f"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6b04bcc-ed1e-40f8-81f9-587f3470d5fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
|
search
34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
server: nginx
content-length: 9925
x-amzn-requestid: 15eb2112-b947-458a-8544-51bac721773d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dT2k9HNjIAMFTTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639e37b9-7c5b94866d266af252f133b3;Sampled=0
x-amzn-remapped-date: Sat, 17 Dec 2022 21:42:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vffD2KxBpOeR3uM-GHLzYmIlBCBR4K6R1ScupFeM7PQEsZSqHi_eZQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 17 Dec 2022 21:54:10 GMT
age: 62495
etag: "597892da925c3a363878e81ff02032a316303512"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
104.21.71.125 ()
104.21.67.107