r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6932
Expires: Thu, 22 Sep 2022 10:27:44 GMT
Date: Thu, 22 Sep 2022 08:32:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 804f8bbb7f556d51a5f52d5ebd5b6eef
922cd7e06df278615a04abb81d811d14596c8180
ef4804d381a34ab67873a7755621081c49c646310e085a9b2356ae07098f6021
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 22 Sep 2022 07:52:44 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vSTFhf7SUIxI3AihipEx09rXNvAEvP3-Q5tEtAxvF7KskriO0tcgBg==
Age: 2368
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash afb65a07bf7214addf83d17a53acba32
a8e973204431320aa7b362a4e73944520c4b51b9
46e1a9e6c98245afb7fa84bc6d9ba6844105024e2d3f56e28748e6c321475d02
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E1A9E6C98245AFB7FA84BC6D9BA6844105024E2D3F56E28748E6C321475D02"
Last-Modified: Wed, 21 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13951
Expires: Thu, 22 Sep 2022 12:24:43 GMT
Date: Thu, 22 Sep 2022 08:32:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: G2gLIeaj1pSwC7guJxZ6+ZxrvZ0+lQrLI9feRFMa82dRTFHI34WxzzWlHTEFBmlBIBt8D0S3C5Q=
x-amz-request-id: F99M6DVJV6B9PBYC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Sep 2022 07:43:43 GMT
age: 2909
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Sep 2022 08:32:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 22 Sep 2022 08:03:22 GMT
Cache-Control: max-age=3600
Expires: Thu, 22 Sep 2022 08:05:33 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZW7ulRtqEBF8FjFdBzHtg2-Ayl6MEQwfD0dxIV5z-wdjS-1DsJB3bA==
Age: 1730
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6193
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:13 GMT
Last-Modified: Thu, 22 Sep 2022 06:49:00 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
34.212.166.60101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.212.166.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: FZdqPsZyJTTlyGIfRB9LLw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: UdFRS2R27Tb3R8b+f//pYv5T3GY=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Thu, 22 Sep 2022 10:03:19 GMT
Date: Thu, 22 Sep 2022 08:32:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Thu, 22 Sep 2022 10:03:19 GMT
Date: Thu, 22 Sep 2022 08:32:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Thu, 22 Sep 2022 10:03:19 GMT
Date: Thu, 22 Sep 2022 08:32:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5465
Expires: Thu, 22 Sep 2022 10:03:19 GMT
Date: Thu, 22 Sep 2022 08:32:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af5773255351157d72c28a670a355c60
c803e5866edbe6c9baec14e93677f610bdf09bff
3229b4aa1c698647ad96d114174782549ad240f1b2c4ba8c268165a16afc84f0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0788498f-41db-4d62-b749-e01caddb7f8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10754
x-amzn-requestid: 2d03531d-6055-477f-9cb6-9ea9fa27eeb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vHJ4IAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-692620e80d5b2efe1d0e3a82;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: eYUP9NfAkmU4A-mZvysejq1228Qfb8vbfdXOaHQvr6mjXhnVoWdqJw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:09 GMT
etag: "c803e5866edbe6c9baec14e93677f610bdf09bff"
content-type: image/jpeg
age: 39485
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
34.120.237.76200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91c56f0b9810bfdd84e10a626b89e389
15d83e44d568938b6c9c87201e898cedb3edec0a
942de9764e1c408f7512759774aab0479db201e6fae15ccc39e653adae4cb86f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf89a4b3-f586-4870-ab26-efb054f637fd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8678
x-amzn-requestid: c671a9ab-c5d0-4743-b13e-cc9a47e3d2fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0vEThIAMFSwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-17ed13811d3833ea00a34423;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 2Oem-Kw-aCUa2rA9B9-7CDYcZ-G968tFPnsrL5wJ9Dia43T5u6RDtg==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:09 GMT
etag: "15d83e44d568938b6c9c87201e898cedb3edec0a"
content-type: image/jpeg
age: 39485
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5453bf0-e297-4ace-a174-b28be2bb7e8d.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5453bf0-e297-4ace-a174-b28be2bb7e8d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 298be26294efc965abc5707a84df8a0a
5ee6c32afd92810ae61a791c059928e33148bb0c
d9b5fe88c8e03f6a6a64e360015080bca00f7fb147515a137447832bacc2e6e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5453bf0-e297-4ace-a174-b28be2bb7e8d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11645
x-amzn-requestid: 0ae5c056-6d78-4c37-8e18-b9abfe1e1f47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YzG34FKIIAMF6Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ab832-59fbd91527ea400d333ddc41;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 07:07:30 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Q7rg9YqHScSwWXfS96bSI5Mb0mSYQ-jbShb7wddPcG51nhn0_8DIJA==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 15:21:32 GMT
age: 61842
etag: "5ee6c32afd92810ae61a791c059928e33148bb0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb268d425-806d-4e8d-98c9-df2f896671ce.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb268d425-806d-4e8d-98c9-df2f896671ce.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75d3255c85ff0dd5971b92c1df0d855a
01c5bd6a99e818c5d8aa961977c62231cb6f6f94
276915e715a3b193815fb0ea4df9ec98ca3b12775e9b8eb91926389ed8d9cfad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb268d425-806d-4e8d-98c9-df2f896671ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 7cda9a9f-ad39-420f-bd5a-e2bd358ac6e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F5-FO-oAMFXAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8372-5e5c9cc35d3eb14505ee3e32;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:42 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: e9CzllZTXdhUwcWuWZvWwJ6B6E5LGDrpDa19bUk3FzQCrsrOB8hJHA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:35:36 GMT
etag: "01c5bd6a99e818c5d8aa961977c62231cb6f6f94"
content-type: image/jpeg
age: 39398
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9becda6e892a190dbbc63216ae697506
ba3369e1827d8f01ca10acb8648195847dd02ffd
d71dd28e0ff260326ba0c30748fa11160f4544c2a264d3a3dc361af0de9fd283
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb0692-30b9-4b69-a748-f7a4474a72e0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11286
x-amzn-requestid: 7263b60d-fffe-4c0b-8de5-59dc9ac92a47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1GwZHOaIAMFSQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b84cf-62e160b156b587cc21c7fda5;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:40:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: QxgrVMX7xwI6qE3T3-LRS3JWoJauPyvCSb9TacW9-ktw-BIq5PSF-g==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:48:26 GMT
etag: "ba3369e1827d8f01ca10acb8648195847dd02ffd"
content-type: image/jpeg
age: 38628
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4d98acc059a69d51165fb5e0c7430ea3
09bd3300d710c3212483159f8398b84cde09da26
6e38bbb5c79c4f714973e10961d7bad9e7ae8711cf24d68b13a77206f474d2a6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2a425d5-4fbd-4af0-a85b-75f0878759cb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7507
x-amzn-requestid: 2a40c792-8b1b-4476-92de-1fce3df48fc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCmaHefoAMF4Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e28-6b05350006b7f3fb73d1e37a;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: gZ8I075ljJuPvMcsyyRU3m09P9z7mL3WNBiex99pwXtoWDzt_jWP0A==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 22:25:13 GMT
age: 36421
etag: "09bd3300d710c3212483159f8398b84cde09da26"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/
172.67.154.179500 Internal Server Error 12 kB URL HTTP/1.1 perfectly.criticwing.xyz/
IP 172.67.154.179:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Non-ISO extended-ASCII text, with very long lines (500), with LF, NEL line terminators
Hash 26f17c7274ac8cd81e40887110654d8d
d176ca9f98f33190c327c2251fed2c19bfa1f4a8
d67cfb634934173270c2e57c65e517ae1675f5f4933edceb9bed9e5ed3ae4c29
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 500 Internal Server Error
Date: Thu, 22 Sep 2022 08:32:20 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: zenid=dfo902bdlpo94milsdlnt0ebg3; path=/; domain=.perfectly.criticwing.xyz; secure; HttpOnly
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SEqdYuS9xQqRSZIm%2BdAgvT6WyWtEPNEaVKZp7hSkF0VOwT97sO2SVgqmsObFkjNtdLgkAjbSHFdCiYPGvstFVeL3ROO8ByKpZ%2BtTIar1jtCW1SBudoZWPfS4KGBLKYURmetP%2Bg1en2MbOSc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74e9b04d5d36fac8-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
IP 142.250.74.3:0
Hash 598065d1b151b777c958f0c58e2b5b27
6b5ca3354c12ce918978e97090ae7a350b675e06
5bae2e3c7b8fa9bbb58d98a822d1c11495ebb27c27d0201b6f162d14a00396ff
POST /s/gts1p5/JiY9Pst1DPg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
IP 142.250.74.3:0
Hash 598065d1b151b777c958f0c58e2b5b27
6b5ca3354c12ce918978e97090ae7a350b675e06
5bae2e3c7b8fa9bbb58d98a822d1c11495ebb27c27d0201b6f162d14a00396ff
POST /s/gts1p5/JiY9Pst1DPg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
IP 142.250.74.3:0
Hash 598065d1b151b777c958f0c58e2b5b27
6b5ca3354c12ce918978e97090ae7a350b675e06
5bae2e3c7b8fa9bbb58d98a822d1c11495ebb27c27d0201b6f162d14a00396ff
POST /s/gts1p5/JiY9Pst1DPg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/top/logo.gif
172.67.154.179200 OK 1.6 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/top/logo.gif
IP 172.67.154.179:0
File type GIF image data, version 89a, 262 x 38\012- data
Hash 7cf3aeb85eb9b979303acb9af4bfb2b2
113eaeef706dba305fa2b254f9feb5a8aecaaa86
1b9fc07a0c3d494a8d9cdd7add2f53906aadd57072fd6743f39a4f7e51aee525
GET /includes/templates/xt-ty-111/images/top/logo.gif HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/gif
content-length: 1603
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-643"
expires: Fri, 21 Oct 2022 22:15:37 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37003
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hwd6vpxOd0y76HMxP5t3U3GWGEoLmI1OM3PteSOa6jNBektROV%2F9eQA1nh6uoa4%2FLxpu9ejQptWnWked%2Bedc4Jsb3OjWTvniPr1BqG2N8yS7tITvPWWRrNVMljSgBsrSh4MHEcFdjrcyIKU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809968b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_1.gif
172.67.154.179200 OK 2.0 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_1.gif
IP 172.67.154.179:0
File type GIF image data, version 89a, 100 x 39\012- data
Hash c9c1a377b2465fa88eb90f7f21fc4943
c329224a6ff30a92cb75e8d055d12185c30b54c6
0362db86a76badda7ca8dec6954d760c2bfe7b5c3e438682ff3213926d5a5c08
GET /includes/templates/xt-ty-111/images/rank_1.gif HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/gif
content-length: 2024
last-modified: Wed, 27 Jul 2022 02:42:31 GMT
etag: "62e0a617-7e8"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FHXPYOjBkH5lnNA9ssb5Hu1ewf%2F0QHqxI5FAJLUt3g7fk1z7u6JRcB2k7ZRscKK%2FxMiF2rcCKW4LsQRdmL2DA9isP0eJH5s79NdUbBbeJjrcbReVpfcRXDzV%2B8RUS2mFCLJ0eFLSrADNOkM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809974b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_2.gif
172.67.154.179200 OK 605 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_2.gif
IP 172.67.154.179:0
File type GIF image data, version 89a, 100 x 39\012- data
Hash 8192f534aa798503e77cbf8e2eb15d57
24e72796481cfd7395cd43cdeb09edad3cf8446b
3616bc7d39ef97ce96d225530cc04796a283dabf239d3be97a21437f120832b9
GET /includes/templates/xt-ty-111/images/rank_2.gif HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/gif
content-length: 605
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-25d"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37003
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H7KNwdpltqSVlnOOXkbdV1Uk2%2F5U9UmN%2Fs35OAt3TZIkHgc6OnasNTf9VFgckrrx0pdkkmZ7BTk%2BcQ0uqgc7LehNevW5KX4KAw3o7Gkw%2Fe%2FmUF7sxa%2BZA29Y6imppj1Aia2%2FChZYURRT4C4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809977b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_3.gif
172.67.154.179200 OK 2.0 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_3.gif
IP 172.67.154.179:0
File type GIF image data, version 89a, 100 x 39\012- data
Hash a8a0cf82adfcc5990b7dba0d5156379f
c9ec96160b488a5a1d1a317443926c7bb54563bd
eb9a0139afb41bc80e768ff61a5a3bf3956da00bea0bb6fe6fcde50589b79065
GET /includes/templates/xt-ty-111/images/rank_3.gif HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/gif
content-length: 1990
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-7c6"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BXAxmp14w9ulMtVcD8Z%2FA%2FvPy%2B02flnjvghO5Gl7Q70vvjU0XIkUwQ4wqw%2BJYZRMg083PJIxs1utLysXyw9J%2BKymbc7UFx5wT7%2BkUtFfOi13ckppj8stlowwOVlddjHglEzbncmMxNJuTpE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809979b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_4.gif
172.67.154.179200 OK 726 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/rank_4.gif
IP 172.67.154.179:0
File type GIF image data, version 89a, 100 x 39\012- data
Hash 9e975ea97719e1ad72951890eab538b2
cb425216738dbc4b98ed7f86d2ad939d17922cc0
e5a91abf348d298145f1f237505150cc1f60673b0a21b459cdf4029ba188bcd4
GET /includes/templates/xt-ty-111/images/rank_4.gif HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/gif
content-length: 726
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-2d6"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37003
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9h6CDVOe4wQHB2Ble%2FCYJlwZXJy6RDl%2B%2Bi9VrZs%2BSrFyGOlFW8KhGbyeow9DOyT18SShV1ggd8D8JBWmI6eRpCP%2Fzft2XUj77nBJmQwoOXxlVOeCfzgDGCiWr3EhsU9AjSfaXfnTOb5MKaA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b080997cb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/itp121_1.jpg
172.67.154.179200 OK 8.5 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/itp121_1.jpg
IP 172.67.154.179:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x213, components 3\012- data
Hash 60b247c89a4798326a23d60ffc7359f6
cab28f2b963d9f791b9569fcb253242e0f4a80cd
627cc79fd54f7f7b7d84dc6d9c2de3493f367686043a9c1fa553c2cb41298708
GET /includes/templates/xt-ty-111/images/itp121_1.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 8535
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-2157"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=flOkE2auU7iuhHK8pzA%2Bu7s6MXrf6%2FMkUtPfSlLfRf6Nl1ykFPCkaIx%2B%2FC23PPBN6Vv9FnYACWgmqITNCEfgEOO2kjmMkjESS9eJs9Z1X8oQIj0fdfpbFsaDSJp1TNjZDU6jJpIDp3zgCIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809981b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/aw_outdoor.jpg
172.67.154.179200 OK 127 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/aw_outdoor.jpg
IP 172.67.154.179:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 980x420, components 3\012- data
Size 127 kB (126649 bytes)
Hash 83adba934a769d5eb7e6d3e42c3786d7
a16fa9ca7dc0ef24b2c2ffcaaccf8c54f22498f6
b4b59f6ff80a323a30fa19794f36e2a9a518786319a7d9b6e602b2b675cbd244
GET /includes/templates/xt-ty-111/images/aw_outdoor.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 126649
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-1eeb9"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MTMNM5DhZtATyL%2BqtTQQdahiRI3KcmlLy7brb8xfbpxyeeGWAZpAiuIPDAnGoeXIPLAzlSeZa6HPryQpPTyIM%2F%2B0z10c22bLBTeaM07rXlNWCPYhlzoLFMYCvKIukyQTT1hrssSmBMilYBU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809969b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/top/obi30_190225_point10.jpg
172.67.154.179200 OK 112 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/top/obi30_190225_point10.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x120, components 3\012- data
Size 112 kB (111655 bytes)
Hash acec08c32c0460c03acd3cdb7f5d5ea3
2500eb83c807f212e29d7d5aa6074e9249805acc
9191fad285704447dce776c9cfba25d21b3bdf6805053f91f09b0a36d962d756
GET /includes/templates/xt-ty-111/images/top/obi30_190225_point10.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 111655
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-1b427"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OaAdwt8QJU4ePTz1dhLiQ87hU8ggF04608IGpDqoJHR1BKktVthT4DJasSfwm53Wg9B8OZZ2%2F8uQkDYHMsi3LeldayRtzPYOma5X%2B1eRUnZD8lZ5LmeJfaZutScP4shSDLmhyH9E%2Ff0axCQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809967b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/35_5offcouponx980.jpg
172.67.154.179200 OK 118 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/35_5offcouponx980.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=191, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=980], baseline, precision 8, 980x191, components 3\012- data
Size 118 kB (117839 bytes)
Hash fdfba02a6fad284b4cd6d531815e5efe
cadc7bdf17a7403f93717a7bdc9e2b8864da091d
b803aeba18111e46d849ae61b7ce81f644ac4f893f7f185eb444c154eea9587e
GET /includes/templates/xt-ty-111/images/35_5offcouponx980.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 117839
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-1cc4f"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C5jgascfHh0R1gmDu0Dzvi1aVU0Jj6Wqd42vgDCcc%2Blm9y%2BmW0CS27%2Fqny6st365OYk8YcnVVVCTrcCi2DS7iRSHtY5GjMp%2FQd5pwiNFBP0uVmO7zq5NvCRBxApGvzdwhcU4jwc8ZIf7mxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b080996db524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/2980ver.jpg
172.67.154.179200 OK 153 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/2980ver.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=www.meitu.com], baseline, precision 8, 750x750, components 3\012- data
Size 153 kB (152666 bytes)
Hash 1cc038f918ced4ca75ee8bf8d3cd4e99
9abf187011b1205734e9f43f328a45a7db05b59b
d1adb88137882b093c99b97ab3a0042390446dfd54c7e86899d6e22adcc2788f
GET /includes/templates/xt-ty-111/images/2980ver.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 152666
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-2545a"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LcwSeo%2BFO2g8LOkf0uuV7XzXVP%2FvUz4x5mfa9bGeePijyYijTKW5UhUANn0kTV4RkHLEgYdmLJHbOQvQCRZYYZUNpSt1zN9%2FGD2ljqdiM7XsSGDFkIi3hrVeOy877HV6hzOq1Cu3gvC60fM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809970b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/9464531890001.jpg
172.67.154.179200 OK 201 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/9464531890001.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x500, components 3\012- data
Size 201 kB (200846 bytes)
Hash 59b25ba6129e3566e5c3d99663d924a0
b516c1ac6a13c2a4ed998eaff05f87f83bf6713f
d85a289fd09786d97f50a7210ff7fcdf4a2a38317e50eabaae96a6ca0fd7b1f9
GET /includes/templates/xt-ty-111/images/9464531890001.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 200846
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-3108e"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NXC053eiPlz4kT7fG%2Fkjaago%2BdvYMTWnhamqEH774a3d5s01DAoo8XIpfRLRkbTJsSNh9KrzgUVaWgu31Q5DcuwhMeGtg2SBlza3vrAxREgNCrvCY3JCABrRD3hceEXRqWgLDFGhCVTueyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809971b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/kids_banner.jpg
172.67.154.179200 OK 399 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/kids_banner.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=700, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1000], baseline, precision 8, 1000x429, components 3\012- data
Size 399 kB (398878 bytes)
Hash 74167758fabe66c33f196c5bf643fa0b
2faab06f518a974e529114b112e1bcdea0ba9dab
26fae795eae43fa7241153b28bcc99860f93b01d3039595281799af203a4f2a1
GET /includes/templates/xt-ty-111/images/kids_banner.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 398878
last-modified: Wed, 27 Jul 2022 02:42:31 GMT
etag: "62e0a617-6161e"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2Bg2mqM8kCKyRoz7NVI%2FJIgi1HjBK5bwVOSfGerqc6UE8HFh06GYIgydW7FqTMf1w0UWTVydvQa6v6VnKU2G7dtbfyIAWMFfEQo52Ly4H4CvSCTbjDQr1fWWsWPIFIb%2F8gdvrXBPe8U81as%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b080996cb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/left/co-coach13_1.jpg
172.67.154.179200 OK 412 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/left/co-coach13_1.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2019:02:19 15:33:06 DIY-Thermocam raw data\012- (Lepton 2.x), scale 21870-29766, spot sensor temperature 74893065746301681918931676168192.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 2199023255552.000000], baseline, precision 8, 600x600, components 3\012- data
Size 412 kB (411642 bytes)
Hash 337cdc2b40032e14716ab91b7acdd4c6
8c5d64388d7e4c9cff6e148597425a7f1020ad33
b88aab0d8099f7a48fe9ebbf5485da4656d2b64dbfeac9c7e0ea8967393aad50
GET /includes/templates/xt-ty-111/images/left/co-coach13_1.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 411642
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-647fa"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TqkDZb4a0pnEN%2BVjFzaOdA9mt259Zgqq0X5jznMn1ULPTJCEacgM4kI1Fz720SAjRTApkvc4FatUBLy9kcrKmuPdTNR4ALS%2FbkidD6hpCe5hVfDkB50w7zXBlZhMfmzPtncGtIPiIMEgIyo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0809972b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/exercise-roller1.jpg
172.67.154.179200 OK 410 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/exercise-roller1.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x1060, components 3\012- data
Size 410 kB (410312 bytes)
Hash b1cd0ff5296b730336bb61380a32b66d
cf701228ab250ecf1e43eabd81bbf5fba9ba24f0
b8d5b64e63125acc8523416b97d7d1c63ff58d0e81a315ad864eb73f0f450987
GET /includes/templates/xt-ty-111/images/exercise-roller1.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 410312
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-642c8"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bW5wRlIqja1IYoAJtvEDVc3QOEEr0Jw7NvPWVzkOJOLUiQcDExtPDuE8gXuv3nXuR%2FUkNkR%2BQ%2FjiYB2fC3wvNjviXnd4tsPjtYNCWrbuJYzUhFipfCovGygayYjCy%2BWMerlO4QMT0mJhDvY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b080a989b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/fitnes.jpg
172.67.154.179200 OK 637 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/fitnes.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2000 DIY-Thermocam raw data\012- (Lepton 2.x), scale 1536-0, spot sensor temperature 0.000000, unit celsius, color scheme 8, minimum point enabled, calibration: offset -587990002533864046592.000000, slope 73747859988787300618765913292800.000000], baseline, precision 8, 2000x857, components 3\012- data
Size 637 kB (636832 bytes)
Hash 9b0058cf26afd54d7803f256622a4628
656d1037ab30ce830a3f7045678507cc59754abc
af899fbdd6311743cd0a41d7e1b20788288000387a4de7aabe8d57f641b9f740
GET /includes/templates/xt-ty-111/images/fitnes.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 636832
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-9b7a0"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QWfVDrwdqdPvISoVDhpSUKf8yA0azhSixWJJOs0x6iKxda4sVMqEnIPE5TuhOKcwoMe0cPfbRXmPzHrd%2B9whEkIr52VTZg0tw9yYRhthXAtWZT5meM5%2BRmCWfVyRUBzusHU5tGmOcSnZMrE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b080996bb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
IP 142.250.74.3:0
Hash 598065d1b151b777c958f0c58e2b5b27
6b5ca3354c12ce918978e97090ae7a350b675e06
5bae2e3c7b8fa9bbb58d98a822d1c11495ebb27c27d0201b6f162d14a00396ff
POST /s/gts1p5/JiY9Pst1DPg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
IP 142.250.74.3:0
Hash 598065d1b151b777c958f0c58e2b5b27
6b5ca3354c12ce918978e97090ae7a350b675e06
5bae2e3c7b8fa9bbb58d98a822d1c11495ebb27c27d0201b6f162d14a00396ff
POST /s/gts1p5/JiY9Pst1DPg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/dr-.jpg
172.67.154.179200 OK 23 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/dr-.jpg
IP 172.67.154.179:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 700x240, components 3\012- data
Hash 5c68adfe3bad08b3edbf377b3c4044a0
a92ed00f96c8c8dab6a0841f656247fdec34b6a7
9466b53c7fa5772095386c8b3ac9ef2664c84793ad7947540b2fe6fc0426178a
GET /includes/templates/xt-ty-111/images/dr-.jpg HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpeg
content-length: 23324
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-5b1c"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wAyXW6Zf0z8Q8AIzImy2Eku7uycUZu5AiPNLxPFc10utHqquDZ2GGTssDS6awykHYvgJVkFxSufTxfv753I6%2BldnsI1t3i894s7ckbOc0zSTnIqMJEUphtxadJD2HFlcbdAdA5%2Bej%2BWyiPQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0818a7db524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/hk.gif
172.67.154.179200 OK 51 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/hk.gif
IP 172.67.154.179:0
File type GIF image data, version 89a, 210 x 210\012- data
Hash f3c56ed9b80cc127f23afa734da9aee4
f9efb6c409802751cf75259231670319472e70fd
4b1f5ec643f24baab0b2d4b4c60510959b6666a3037b017590a78b839f40898d
GET /includes/templates/xt-ty-111/images/hk.gif HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/gif
content-length: 51054
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-c76e"
expires: Fri, 21 Oct 2022 22:15:36 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8kNtPsgluNeSscIdO%2Bv3%2BhOHi2fwhAIeJKkg2PMsU1uwSNy8boyy80URk2lP3UFTT5nXZWsAXzPEdnYVo%2FsDG%2F8Fv7TBbJ0Tv%2Ff0GUC4JkUaWJbh0gey9OKcl4XfQpDWdh%2B%2BK4pn16V%2Fpc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b0817a7cb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
142.250.74.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JiY9Pst1DPg
IP 142.250.74.3:0
Hash 598065d1b151b777c958f0c58e2b5b27
6b5ca3354c12ce918978e97090ae7a350b675e06
5bae2e3c7b8fa9bbb58d98a822d1c11495ebb27c27d0201b6f162d14a00396ff
POST /s/gts1p5/JiY9Pst1DPg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Sep 2022 08:32:20 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/tateobi1.png
172.67.154.179200 OK 10 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/tateobi1.png
IP 172.67.154.179:0
File type PNG image data, 1204 x 500, 8-bit/color RGBA, non-interlaced\012- data
Hash 9837d5294dc0cffaaf3c713224a26fe9
b7450062f8919aa03bc8321817d19315b78dc5ed
15686e015141ee0ee8653bee5d27538b65ef2181babe2da8eb2de4531249998a
GET /includes/templates/xt-ty-111/images/tateobi1.png HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_tm.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/png
content-length: 9953
last-modified: Wed, 27 Jul 2022 02:42:32 GMT
etag: "62e0a618-26e1"
expires: Fri, 21 Oct 2022 22:15:37 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37003
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5DJTC%2BEBuwSDuV2A3e9G2VGDVEZ5Q%2Fp0ojEJw33IyUsWnFD9TAuusIs5tjGsjg%2Bn6wKGb2yyuPxJbIgL9WC7%2BD9oXkUthyj6ZIX1j9pvCqLP6oVqLtdJETZ304gfB%2F7iFwTQp7ii6CLijoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b081daecb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/icon_search.png
172.67.154.179200 OK 3.6 kB URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/images/icon_search.png
IP 172.67.154.179:0
File type PNG image data, 178 x 178, 8-bit/color RGBA, non-interlaced\012- data
Hash e23597d1438fc031aaa277d774974ddf
507efa327d1ab542fcad1e7e148ccc3f2f0b0ef9
fd8c1e9f1059894420036910c36e07e09671e6b12f8a5ba6cd38954f7c17c02d
GET /includes/templates/xt-ty-111/images/icon_search.png HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_searchtop.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/png
content-length: 3552
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
etag: "62e0a619-de0"
expires: Fri, 21 Oct 2022 22:15:37 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 37003
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F0i9rcC4ahXB8tMK4M6gpXk2fKIVQS0z%2F42cV81tBLuXMIvaGf%2F9bZkEKQYMz%2BlTz0bVLhyRKyt%2Fk82j5b2YJg8yQidsdTGQlEqg%2ByoVAkaH3gWQ3VZ7WSVBv4GkS7xxzL803UIVVj5OnSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b081daf1b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d546012-e1d1-4ccd-a38f-d808cdfe4af0.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d546012-e1d1-4ccd-a38f-d808cdfe4af0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06589b53db5d3d6307e15e354325e252
af20ced3f00015ad8ae837d7cf3f39b9f5f0f752
513daca9889934875f2c453aaed4ce1af32628550a4b2f2b8e69533cb09eda56
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d546012-e1d1-4ccd-a38f-d808cdfe4af0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5161
x-amzn-requestid: 9ba63285-4cef-4604-bd12-95a99463e087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y1F0wHYXIAMFgvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632b8351-1380adf019b16d5a50475cdb;Sampled=0
x-amzn-remapped-date: Wed, 21 Sep 2022 21:34:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: aRS8EmSflaJJjXsdsfTjeovOMrdDXbiDlGHsLNpkB4NGyLsvgfQq_w==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 21:34:09 GMT
etag: "af20ced3f00015ad8ae837d7cf3f39b9f5f0f752"
content-type: image/jpeg
age: 39492
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_tm.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_tm.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet_tm.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=18558
etag: W/"62e0a619-487e"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xsifj1Hy25Ud84E1arFsdgsyvq3NMABUiYS%2FkAH09Z0MRBge1jrN4O5bQcSyI0JP5eKAZvB5L92E%2BUPETibZlGZ3z%2FJygx1%2F1jVDumLjyG4UtdRTOaTKVy3U%2FxktC84aIwd3x2AJbWJL5c4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0809962b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_cart.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_cart.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet_cart.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=8621
etag: W/"62e0a619-21ad"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KYg6j5XOYer%2Fq8qiYci0BZuCFFcV4GuJA5uh8l7sQpqDd4wLmNvgHmia4BggC%2Bk5xb9DFOeBYCXzat0rUCicBBFgZj0XEzIL6BlJ8rrfPhTDK4WGDBa7BElh%2FzR6qTUcOA0%2FSKsjvxorgeE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b081bac0b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_index_home.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_index_home.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet_index_home.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=3411
etag: W/"62e0a619-d53"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AbkeP33S7ERkS1yX4MNOzzYmtdWlpTVEhyeLVfDslqrQtrEANgx011CbZnw1vkHsk7f%2FqbWxzb808mTLDLDstN5XTJeDUSSBXwnuyiz%2BEPmaR4C49NuDG8p5oUolUpr9%2F9sNQBX3FFXz3ew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0809960b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_searchtop.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_searchtop.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet_searchtop.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=990
etag: W/"62e0a619-3de"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XMwXRnHvjUTAozM%2BXgxJ0PywYSqJWLFAyvHufkU%2BgovOiaADVQszj4siHq1BW%2BZZCRtvhP0LQ2cakIpoOMl23TksSFVcpiasvIA3VIHYBfpdG%2FEsWLlf6mRZ2MvKvKlGUe8dTyMVp5kGp%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e9b081aaa5b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/jscript/headpull.js
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/jscript/headpull.js
IP 172.67.154.179:0
Analyzer Verdict Alert fortinet Malware
GET /includes/templates/xt-ty-111/jscript/headpull.js HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: application/javascript
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=182316
etag: W/"62e0a613-2c82c"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:27 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wDsmDuloOBkz6JTt3opIdIwA9XWARCTrkQDVIxYdD%2BscP9fP74uHeZkvGRIeI9WoUVJryNkRocVpulyvYd1aRLDdve8nSTHabfPl52gBBIirh3MBDlEQh8tpt0KFavRdmY9ADicrcqAouaU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0809964b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=24467
etag: W/"62e0a619-5f93"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LEmp%2Bjd8bKNUmdOzQzhEej3V9%2BiaF3%2F9QzD8%2F2BafgWHjLl5kLRIP7dYAh1wLhOKHeLr3YB0zOm7OXFzASV51lpUPENTF%2FWXpdOOhRwtErKpSYxmNSpBbSKPbXAVniv%2BO6o7WPAB8EI0nhw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b081babeb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTMzNTE5MzQ3L2wvMTYxMzkwMjQxMS5qcGc/MTY1NzEwOTIxMw==
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTMzNTE5MzQ3L2wvMTYxMzkwMjQxMS5qcGc/MTY1NzEwOTIxMw==
IP 172.67.154.179:0
GET /imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTMzNTE5MzQ3L2wvMTYxMzkwMjQxMS5qcGc/MTY1NzEwOTIxMw== HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:21 GMT
content-type: image/jpg
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GR7Z%2B%2FwWdhjMXUEmKkxFNtu6rVy9r%2FyR%2BxxGHJefyaC6H%2Frj9x2CecqxjBTqTaBJA8dsk%2FpC%2B2dSzYHlDkRRIgCyzDXF%2BMN7Yr%2Bx6JpPB0XxCCJkn5bkQ5LleBd1%2BkngJW1j%2BY9BK5X3uzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0809978b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTE4NTY0OTE3L2wvMTU1MzQ3MDQ3NC5qcGc/MTY1NTYzMDMxNg==
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTE4NTY0OTE3L2wvMTU1MzQ3MDQ3NC5qcGc/MTY1NTYzMDMxNg==
IP 172.67.154.179:0
GET /imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTE4NTY0OTE3L2wvMTU1MzQ3MDQ3NC5qcGc/MTY1NTYzMDMxNg== HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpg
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nb8JVHYU9eWYoMDJwY0IV4HzEP1SLz2E128SzU7iMRnEJLne%2By0WU%2F0k6V6CVk3cnNwAPVfGCTyPEBvyi9%2BJd8SL8Xhhzm6%2FFenMKaLG2s8r5QlW94RszM72uVfHdlvAeghIDQaOPI5xxJM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b080997ab524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/headpull.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/headpull.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/headpull.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=5942
etag: W/"62e0a619-1736"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cvWs%2BKLJ%2F%2F2C0fYCD5Vg6BmvkcqtHgHg2F8xGXpuSg1iPcwYdmtF%2FthDBY2KwuGN5e4Si1cPU%2BbA8Bagh18oMBNRAKpcJTbvoqFoos602IEScnk4gC42gvmoaPjhz9t4WCJFqS1wRpWsPAk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0809965b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_css_buttons.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_css_buttons.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet_css_buttons.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=1976
etag: W/"62e0a619-7b8"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CW175z9Kh9pk23ufhmP3CEB5FvjfNK3h2asCOfvCzlFEhTCAGPgbOG47%2BJ256BduqHHv8PPPvSBX55sPZtUjzwEzT6p5LaR8sxhbv%2BxRW0MhQl9vQL3B79eCjnDxouHqoE%2FWB7j2iORUQRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0818a7eb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_related.css
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/includes/templates/xt-ty-111/css/stylesheet_related.css
IP 172.67.154.179:0
GET /includes/templates/xt-ty-111/css/stylesheet_related.css HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: text/css
cache-control: max-age=43200
cf-bgj: minify
cf-polished: origSize=1882
etag: W/"62e0a619-75a"
expires: Thu, 22 Sep 2022 10:15:36 GMT
last-modified: Wed, 27 Jul 2022 02:42:33 GMT
vary: Accept-Encoding
cf-cache-status: HIT
age: 37004
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e9EIyfAR14kD3F60%2FnzZFPQxSuYD3%2F5t8ZxR%2BdRP6wzefvoWhlCkyaYyrIX25DDwHGrlpTRqpEI5kHNVK%2BZdhOhVuYismfEif0LMuIFgysbvo03Y4O%2F1Sf14XIXUVXLS5l3Gdp6hLQ97P9U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0819a9eb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTIwMjY5MTA4L2wvMTU2MDU0MDUwNC5qcGc/MTY1MjEwMjUwMQ==
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTIwMjY5MTA4L2wvMTU2MDU0MDUwNC5qcGc/MTY1MjEwMjUwMQ==
IP 172.67.154.179:0
GET /imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvNTIwMjY5MTA4L2wvMTU2MDU0MDUwNC5qcGc/MTY1MjEwMjUwMQ== HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:20 GMT
content-type: image/jpg
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SplSDPwK%2B13XE2upSukGPOgCDne6xdIEu7lSUFWizMtp4vy70a8%2F5mefJmSvkYR%2BvvX%2FfhT95tciqMQsk3MinquWtzPpRfiLOnBeZ4IZXv7tcRhAms4YagUzkZZWlDZS%2BLVEno7wO8Ug9Vo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b080997db524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvMjY4MzkwNjMxL2wvNzU5MjA5NDMxLmpwZz8xNTcxMzE2ODA5
172.67.154.179200 OK 0 B URL HTTP/2 perfectly.criticwing.xyz/imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvMjY4MzkwNjMxL2wvNzU5MjA5NDMxLmpwZz8xNTcxMzE2ODA5
IP 172.67.154.179:0
GET /imgcdn.php?pic=aHR0cHM6Ly9pbWcuZnJpbC5qcC9pbWcvMjY4MzkwNjMxL2wvNzU5MjA5NDMxLmpwZz8xNTcxMzE2ODA5 HTTP/1.1
Host: perfectly.criticwing.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://perfectly.criticwing.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 22 Sep 2022 08:32:21 GMT
content-type: image/jpg
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dfjJGbFmXeHkaqbpxDOUBNMQKOt6bV9AYCoLN1YBJ1adEWTZlyNVt%2FBv2XKVKVIHzUmPHB0HSkf%2Fl%2BRE54ct0e0Jtb1%2FK4mUwMAN1zeAJ2wy5baD2kTjpKiy9JqGLxy884l0WxUqTSxNE0s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e9b0809976b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2