tr.wakeuplean.today/7504b8de-ea69-4901-863e-d40ada365d7f?source=MBBR&campaignid=6646&email=cperetti@slurpmail.net&contactid=83255
302 Found 0 B URL User Request GET HTTP/2 tr.wakeuplean.today/7504b8de-ea69-4901-863e-d40ada365d7f?source=MBBR&campaignid=6646&email=cperetti@slurpmail.net&contactid=83255
IP
Certificate IssuerLet's Encrypt
Subjecttr.wakeuplean.today
Fingerprint73:D7:05:59:FD:D8:22:D5:7A:9F:AD:E2:FE:85:5B:41:A6:08:37:A3
ValidityTue, 12 Sep 2023 06:16:38 GMT - Mon, 11 Dec 2023 06:16:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7504b8de-ea69-4901-863e-d40ada365d7f?source=MBBR&campaignid=6646&email=cperetti@slurpmail.net&contactid=83255 HTTP/1.1
Host: tr.wakeuplean.today
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 01 Nov 2023 19:06:51 GMT
content-length: 0
cache-control: no-store, no-cache, pre-check=0, post-check=0
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://hop.clickbank.net/?affiliate=svelte21&vendor=slimcrysta&op=start&tid=wg1u3kovjasdjjns2t1n7u30
pragma: no-cache
set-cookie: 7504b8de-ea69-4901-863e-d40ada365d7f-v4=ghaSA4uqrch0luEAIT2vXxm70Z07Jzi3V9C7Rb785Ug; Max-Age=86400; Expires=Thu, 02-Nov-2023 19:06:51 GMT; Domain=tr.wakeuplean.today; Path=/; Secure; HttpOnly;SameSite=None
cc-v4=y5YGM6IrMomEZigGe7BJstNP6R9boj4Eo00G0cP7vdqHBs%2FPkfGtfs181y0t%2BQFSDFTxWkEF3T1X4%2BUffa4t3RCu0WG9Dn9SnaQ%2BXRU0rUplE1dtkA%2BDCmatjVSegSScV5vpTcwTXnZkLdlAbbFEUA%3D%3D; Max-Age=31536000; Expires=Thu, 31-Oct-2024 19:06:51 GMT; Domain=tr.wakeuplean.today; Path=/; Secure; HttpOnly;SameSite=None
X-Firefox-Spdy: h2
hop.clickbank.net/?affiliate=svelte21&vendor=slimcrysta&op=start&tid=wg1u3kovjasdjjns2t1n7u30
0 B URL hop.clickbank.net/?affiliate=svelte21&vendor=slimcrysta&op=start&tid=wg1u3kovjasdjjns2t1n7u30
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?affiliate=svelte21&vendor=slimcrysta&op=start&tid=wg1u3kovjasdjjns2t1n7u30 HTTP/1.1
Host: hop.clickbank.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 307 Temporary Redirect
date: Wed, 01 Nov 2023 19:06:51 GMT
content-length: 0
location: https://slimcrystal.com/?op=start
accept-ch: Sec-Ch-Ua-Arch, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Model, Sec-Ch-Ua-Bitness
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-content-type-options: nosniff
strict-transport-security: max-age=0 ; includeSubDomains
x-frame-options: DENY
x-xss-protection: 1 ; mode=block
referrer-policy: no-referrer
set-cookie: q=01.6B471BA2181BCA2E12D5A1FA6485B2F53E16190795B58BCBB8D2CC0F6B449497505DF7AE56BDEFE46376BFE196FD3504BAFF3CDA; Path=/; Domain=.clickbank.net; Max-Age=31536000; Expires=Thu, 31 Oct 2024 19:06:51 GMT
p=PWVdBBR7KGzv0Kq1oXyyr94kh5eVonEeeyLc0N2yO0jyn8EIUx_vQhgAF0--kM-xuztTwVCr0Uym7k_7u4Yl2bVans5QA0PRahb6rqN0Dj9Cb1NnHP7WrdHXS74MpFXy_IZNKF0jhLAN6K741vYPG9zn-uchyDw1ep4yc2yOWKLXjlBK6OnY1vHvXwYkqMq4-VyKCYEzYIn9f6jGU5jRp77CiaY9DDN8hI0wqRTZefxq3d77; Path=/; Domain=.clickbank.net; Max-Age=15552000; Expires=Mon, 29 Apr 2024 19:06:51 GMT
server-timing: traceparent;desc="00-661d839a39f1af25350be0748376aaa9-5fc6d25b12e1de25-01"
access-control-expose-headers: Server-Timing
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/nO-neDG58C0
472 B URL ocsp.pki.goog/s/gts1d4/nO-neDG58C0
IP
Hash 431f40925583d1d5c2f6df20d95d54bd
071baf41b8d3d8204b68ae235392b734565efb9c
169baca02ea0ac5c21acb7589b255a66969a4577e316f43e59c7c61bee1e62cb
POST /s/gts1d4/nO-neDG58C0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Nov 2023 19:06:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.leadpages.net/fonts/font-awesome/5.14.0/css/all.min.css
200 OK 15 kB URL GET HTTP/2 static.leadpages.net/fonts/font-awesome/5.14.0/css/all.min.css
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectstatic.leadpages.net
Fingerprint74:ED:B8:2C:E0:C6:39:88:EB:34:E1:82:96:F0:49:60:2D:6B:6E:03
ValidityMon, 16 Oct 2023 23:07:53 GMT - Sun, 14 Jan 2024 23:59:05 GMT
File type ASCII text, with very long lines (58749)
Hash 84d8ad2b4fcdc0f0c58247e778133b3a
6f33eae92d42fe209167139940a0ad6a3c6c167e
14cbd9b866a9b092e3a2e03a93b128da5baca005fd8b44a1956146eaab7b48b7
GET /fonts/font-awesome/5.14.0/css/all.min.css HTTP/1.1
Host: static.leadpages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
x-cloud-trace-context: a18ee4f17024372c3400c0a0c7c11eec
content-encoding: gzip
server: Google Frontend
via: 1.1 google
date: Tue, 31 Oct 2023 05:42:30 GMT
expires: Wed, 30 Oct 2024 05:42:30 GMT
cache-control: public, max-age=31536000
etag: "-Aynvg"
content-type: text/css
vary: Accept-Encoding
content-length: 14628
age: 134663
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-645944073
200 OK 76 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=AW-645944073
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint97:15:34:CA:DF:1A:DF:2E:7B:EF:E9:6E:44:21:30:2B:ED:13:54:AE
ValidityMon, 09 Oct 2023 08:03:58 GMT - Mon, 01 Jan 2024 08:03:57 GMT
File type ASCII text, with very long lines (4179)
Hash a8223be5728c82d7477a0ada03f44365
e077c5d161bde6cdfb6d018a0667ad2bf82fcfc7
826f819ef27c46b933eadb09e095ffec21d0fba463979fe81cb27c0ffee5dc83
GET /gtag/js?id=AW-645944073 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Nov 2023 19:06:53 GMT
expires: Wed, 01 Nov 2023 19:06:53 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Nov 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76209
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
2.1 kB IP
Hash 4fd59af038714d98d3be58923e6bf43b
bf724e21f8274a9738f7f362478699069ed9fb9d
268d319cbdb7436e767c1379882859f3c7d52aef3480e6549a56f5efcf893b9b
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Nov 2023 19:06:53 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 01 Nov 2023 12:18:10 GMT
Expires: Thu, 02 Nov 2023 12:18:10 GMT
ETag: "bf724e21f8274a9738f7f362478699069ed9fb9d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
www.googletagmanager.com/gtag/js?id=AW-10901425749
200 OK 72 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=AW-10901425749
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint97:15:34:CA:DF:1A:DF:2E:7B:EF:E9:6E:44:21:30:2B:ED:13:54:AE
ValidityMon, 09 Oct 2023 08:03:58 GMT - Mon, 01 Jan 2024 08:03:57 GMT
File type ASCII text, with very long lines (3026)
Hash ae76a780c63315356914c1022da2306f
ce163c1f39a7ed4a5ffae88d291ee3f6a35d770e
3a8839fa53675f8af3bb5e49ee532d9e1b820e0105b4983fc4478555a6a64076
GET /gtag/js?id=AW-10901425749 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 01 Nov 2023 19:06:53 GMT
expires: Wed, 01 Nov 2023 19:06:53 GMT
cache-control: private, max-age=900
last-modified: Wed, 01 Nov 2023 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 72121
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/nO-neDG58C0
472 B URL ocsp.pki.goog/s/gts1d4/nO-neDG58C0
IP
Hash 431f40925583d1d5c2f6df20d95d54bd
071baf41b8d3d8204b68ae235392b734565efb9c
169baca02ea0ac5c21acb7589b255a66969a4577e316f43e59c7c61bee1e62cb
POST /s/gts1d4/nO-neDG58C0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Nov 2023 19:06:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/61szEZlWlYk
472 B URL ocsp.pki.goog/s/gts1d4/61szEZlWlYk
IP
Hash d53bd10764e8db68205e3f71419abf0c
6a2d24bab234af696d9b5892c140032b74f0e077
db6990605fd59b29de10f5dd60e1a65b293bd0ea924c1f43b78ccd6842bd4d75
POST /s/gts1d4/61szEZlWlYk HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 01 Nov 2023 19:06:53 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js.center.io/center.js
200 OK 5.4 kB IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectjs.center.io
Fingerprint85:B9:E0:72:82:F5:95:3E:D1:4E:1A:D7:E3:C7:71:C0:2D:3A:13:80
ValidityTue, 12 Sep 2023 16:35:29 GMT - Mon, 11 Dec 2023 17:15:15 GMT
File type ASCII text, with very long lines (566)
Hash 60f05ff45d707fe36d87b75bf181800d
e34d94b519ed465481596bcff099467feb0aafdd
cc08eb3316359de0d8f025efee489da73ca552209a0c9cab6b00894d7fa21d42
GET /center.js HTTP/1.1
Host: js.center.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-cloud-trace-context: c027fec2b5d2a713407daf4611cd534c
content-encoding: gzip
server: Google Frontend
content-length: 5417
date: Wed, 01 Nov 2023 19:05:02 GMT
expires: Wed, 01 Nov 2023 19:10:02 GMT
cache-control: public, max-age=300
age: 111
etag: "OMWYXg"
content-type: application/javascript
X-Firefox-Spdy: h2
ocsp.starfieldtech.com/
2.1 kB IP
Hash 4fd59af038714d98d3be58923e6bf43b
bf724e21f8274a9738f7f362478699069ed9fb9d
268d319cbdb7436e767c1379882859f3c7d52aef3480e6549a56f5efcf893b9b
POST / HTTP/1.1
Host: ocsp.starfieldtech.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 01 Nov 2023 19:06:53 GMT
Content-Type: application/ocsp-response
Content-Length: 2148
Connection: keep-alive
X-Sucuri-ID: 19041
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Wed, 01 Nov 2023 12:18:10 GMT
Expires: Thu, 02 Nov 2023 12:18:10 GMT
ETag: "bf724e21f8274a9738f7f362478699069ed9fb9d"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdnjs.cloudflare.com/ajax/libs/moment.js/2.26.0/moment.min.js
200 OK 17 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/moment.js/2.26.0/moment.min.js
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (58823)
Hash 776e766721bd22f1ebfdd2fca1c1e19b
cb95340332f81b6a4e2ff39a78aa1cbe7d155e5b
e6802973fc0c75ad67b4810ae2aa16278608b675787c11ccc32c2e9e3f203ea7
GET /ajax/libs/moment.js/2.26.0/moment.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 19:06:53 GMT
content-type: application/javascript; charset=utf-8
content-length: 16963
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5ec4d334-e5ee"
last-modified: Wed, 20 May 2020 06:50:28 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 659585
expires: Mon, 21 Oct 2024 19:06:53 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5MdD8zQR8xW3gOdsANGk42jWNaKaxEzU3OrQnjUVt%2FfciDLUl8YnpS%2B2xt4tkLX9keykj3EHbvBX0X5UEjzgzL8sJgJ4GXw4YbybKBcTO0PjnGA6ZmmNbvyZsDPwdQSTlyihsU2C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 81f66ae40c59b521-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:300,400,500,700|Roboto:300,400,500,700
200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,500,700|Roboto:300,400,500,700
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint87:BD:C2:71:54:40:3F:F2:18:79:1A:89:F5:E9:BC:63:E5:EC:57:64
ValidityMon, 09 Oct 2023 08:10:33 GMT - Mon, 01 Jan 2024 08:10:32 GMT
File type gzip compressed data, max compression\012- data
Hash afb84a05d7ae6472be10cd9bee6329d4
2f7357087ce248e0df4ac386e3faa5a741310eb4
2cf2c786356b220e29fb3fddd80f02c15e3f5f33c1e1acca472fabb28e323f8e
GET /css?family=Lato:300,400,500,700|Roboto:300,400,500,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 01 Nov 2023 19:06:53 GMT
date: Wed, 01 Nov 2023 19:06:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
js.center.io/identify.html
200 OK 2.0 kB URL GET HTTP/2 js.center.io/identify.html
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectjs.center.io
Fingerprint85:B9:E0:72:82:F5:95:3E:D1:4E:1A:D7:E3:C7:71:C0:2D:3A:13:80
ValidityTue, 12 Sep 2023 16:35:29 GMT - Mon, 11 Dec 2023 17:15:15 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (612)
Hash 0ba3629e9c8b8af4c7a13d344978898a
c05b5c80e1eec6e630547ecfacf11eb86391e4b6
0efa1e4687032588dae8d6d3a00a92e504a3a14b9d1bb23c19670a47c9792110
GET /identify.html HTTP/1.1
Host: js.center.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-cloud-trace-context: c89581e80c6bccb6ecb3b536391805d2
content-encoding: gzip
server: Google Frontend
content-length: 2016
date: Wed, 01 Nov 2023 19:05:59 GMT
expires: Wed, 01 Nov 2023 19:10:59 GMT
cache-control: public, max-age=300
age: 54
etag: "OMWYXg"
content-type: text/html
X-Firefox-Spdy: h2
cbtb.clickbank.net/?vendor=slimcrysta
200 OK 942 B URL GET HTTP/2 cbtb.clickbank.net/?vendor=slimcrysta
IP
Requested by https://slimcrystal.com/start
Certificate IssuerAmazon
Subject*.clickbank.net
Fingerprint06:1E:8F:A1:72:68:E8:C2:29:B8:53:F0:C5:13:51:8B:45:13:CD:16
ValidityTue, 07 Feb 2023 00:00:00 GMT - Fri, 08 Mar 2024 23:59:59 GMT
File type ASCII text, with very long lines (942), with no line terminators
Hash 8b0141f7ca626083801c7c3de45997ca
a2969f752bf6b5cc3333f8af23d157671a034f66
152019e7e912b8d039de736f5ca51e317fd7eb29d1afb92c948b0ca1e2fde2b8
GET /?vendor=slimcrysta HTTP/1.1
Host: cbtb.clickbank.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 19:06:53 GMT
content-type: text/javascript;charset=UTF-8
content-length: 942
set-cookie: AWSALB=lhpgtli6x60zhd2G9dc17GjoyOgFpKeFkHSTdZVB9ZVYpGq5yfKt1q/htv2asLdpU5w9h/+3m4yOaMllXVmuioUyAdeX1wB9aE7EtcUmQC7njmKQpIG/MoFD8v4V; Expires=Wed, 08 Nov 2023 19:06:53 GMT; Path=/
AWSALBCORS=lhpgtli6x60zhd2G9dc17GjoyOgFpKeFkHSTdZVB9ZVYpGq5yfKt1q/htv2asLdpU5w9h/+3m4yOaMllXVmuioUyAdeX1wB9aE7EtcUmQC7njmKQpIG/MoFD8v4V; Expires=Wed, 08 Nov 2023 19:06:53 GMT; Path=/; SameSite=None; Secure
server: Apache
cache-control: max-age=900
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Oct 2023 02:00:44 GMT
expires: Sat, 26 Oct 2024 02:00:44 GMT
cache-control: public, max-age=31536000
age: 493569
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Oct 2023 15:16:10 GMT
expires: Fri, 25 Oct 2024 15:16:10 GMT
cache-control: public, max-age=31536000
age: 532244
last-modified: Tue, 02 May 2023 15:17:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL GET HTTP/2 fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Oct 2023 15:25:37 GMT
expires: Fri, 25 Oct 2024 15:25:37 GMT
cache-control: public, max-age=31536000
age: 531677
last-modified: Tue, 02 May 2023 15:07:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
player.vimeo.com/video/811339366?h=d4a188601c
200 OK 6.2 kB URL GET HTTP/1.1 player.vimeo.com/video/811339366?h=d4a188601c
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4B:91:E3:66:C8:AB:7B:DB:A8:E4:58:1B:25:C3:EF:38:4C:8E:CE:21
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14738)
Hash 6c6e67a779ef971b336e4bfa9a362f28
02493a8f6abd8988205db5ec3aeba06c55fffd88
1c29725116ee26fb6db9321b03589fd53688a7b4e929f0ba132f376305529cfe
GET /video/811339366?h=d4a188601c HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 19:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' blob: resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-68f4467c9b-p9bls
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-68f4467c9b-p9bls
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1646-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1698865614.972259,VS0,VE146
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=0XvFwz92Fg1BO2tzYCd.nyno04.UdbQLquLxLIqnBd4-1698865614-0-AapUddDOd6DUhCVykwTWFkK2+ELmNWyFLuQ4gVZGr4VMmYkly1BYWlJpZ/a8PFL5MALnCaHURoi+HYHcOVt6Rv0=; path=/; expires=Wed, 01-Nov-23 19:36:54 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 81f66ae73e49b524-OSL
Content-Encoding: gzip
player.vimeo.com/video/811338299?h=e9a6bf7a2a
200 OK 6.2 kB URL GET HTTP/1.1 player.vimeo.com/video/811338299?h=e9a6bf7a2a
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4B:91:E3:66:C8:AB:7B:DB:A8:E4:58:1B:25:C3:EF:38:4C:8E:CE:21
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14847)
Hash 3518f22eb422fa45300668b70d5c0655
21c934f4002549538033276a3c52d87b9aa70e8c
1efd45ec334b24d1efd5af3104f6721a8bbbe55bbc3237fd6f5cad4f40483ba1
GET /video/811338299?h=e9a6bf7a2a HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 19:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' blob: resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-68f4467c9b-jpvw9
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-68f4467c9b-jpvw9
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1649-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1698865614.980554,VS0,VE156
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=Z.Z7NVjqAeHBBgoEt8MUZ4gn0DRnNPNGShxRr3LqMb4-1698865614-0-AXI8Ha3yZ1kLLS5uJBMkNsU1SvO6ilv9Z72j18JNtQQeu3zosY6BCZSXdpgJfmFwvN2sv+9VdkdYtfrK1ecJgjI=; path=/; expires=Wed, 01-Nov-23 19:36:54 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 81f66ae73ac00b51-OSL
Content-Encoding: gzip
api.leadpages.io/analytics/v1/events/capture?k=view&a=leadpage&l=ySZ7RqRe2V6iCd6goGC8YX&v=&e=&st=&lc=en-US&pid=AMqA5Xc4viGAJmSGWCRhnT-default-prop&uid=E5WDUgKiWwWEHKiq7AzP9m&sid=iNdusQ9dveRbjM8zggZawo&cid=lp-ySZ7RqRe2V6iCd6goGC8YX&uri=https%3A%2F%2Fslimcrystal.com%2Fstart&rf=&rx=1280&ry=1024&tz=%2B00%3A00
200 OK 35 B URL GET HTTP/1.1 api.leadpages.io/analytics/v1/events/capture?k=view&a=leadpage&l=ySZ7RqRe2V6iCd6goGC8YX&v=&e=&st=&lc=en-US&pid=AMqA5Xc4viGAJmSGWCRhnT-default-prop&uid=E5WDUgKiWwWEHKiq7AzP9m&sid=iNdusQ9dveRbjM8zggZawo&cid=lp-ySZ7RqRe2V6iCd6goGC8YX&uri=https%3A%2F%2Fslimcrystal.com%2Fstart&rf=&rx=1280&ry=1024&tz=%2B00%3A00
IP
Requested by https://slimcrystal.com/start
Certificate IssuerLet's Encrypt
Subject*.leadpages.io
Fingerprint82:04:EC:6A:8D:9D:D8:E2:90:A1:2D:96:68:08:FF:D4:1D:3D:72:A8
ValidityThu, 28 Sep 2023 15:13:30 GMT - Wed, 27 Dec 2023 15:13:29 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /analytics/v1/events/capture?k=view&a=leadpage&l=ySZ7RqRe2V6iCd6goGC8YX&v=&e=&st=&lc=en-US&pid=AMqA5Xc4viGAJmSGWCRhnT-default-prop&uid=E5WDUgKiWwWEHKiq7AzP9m&sid=iNdusQ9dveRbjM8zggZawo&cid=lp-ySZ7RqRe2V6iCd6goGC8YX&uri=https%3A%2F%2Fslimcrystal.com%2Fstart&rf=&rx=1280&ry=1024&tz=%2B00%3A00 HTTP/1.1
Host: api.leadpages.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
x-request-id: 04c9dlb6v2rj2kri3qag
access-control-expose-headers: LP-Security-Token
access-control-allow-credentials: true
Server: Stargate
Date: Wed, 01 Nov 2023 19:06:54 GMT
access-control-allow-origin: https://slimcrystal.com
set-cookie: view.AMqA5Xc4viGAJmSGWCRhnT-default-prop.ySZ7RqRe2V6iCd6goGC8YX=1698865614000; Domain=api.leadpages.io; expires=Thu, 02 Nov 2023 19:06:54 GMT; httponly; Max-Age=86400; Path=/analytics/v1/events/capture; SameSite=None; secure
access-control-max-age: 600
X-Forwarded-For: 91.90.42.154
player.vimeo.com/video/811340978?h=bf52a5b496
200 OK 6.2 kB URL GET HTTP/1.1 player.vimeo.com/video/811340978?h=bf52a5b496
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4B:91:E3:66:C8:AB:7B:DB:A8:E4:58:1B:25:C3:EF:38:4C:8E:CE:21
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14815)
Hash b015c98bd35c31a1aeb80e7ad540a170
83df54fc11adff9a5bbef6864988bb45c11f41ad
6b319a692a8d007be832d888eaf2c736d94048e85912b07de155da69dbc1aea9
GET /video/811340978?h=bf52a5b496 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 19:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' blob: resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-68f4467c9b-lsrlc
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-68f4467c9b-lsrlc
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1675-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1698865614.079774,VS0,VE154
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=jggvW4gxOEwx2SnPhQaK3u3sFwNJa4I.JhRjGODOLtc-1698865614-0-ATL2UoMpd8DUVg3KpCUWQ3ji5NSXyihNmiifAder79kM3afzAVog+VYsKK/YcPFqQkFgErd6TxaGFdNUj7mJPN8=; path=/; expires=Wed, 01-Nov-23 19:36:54 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 81f66ae7ed3f5693-OSL
Content-Encoding: gzip
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintBE:D3:D2:0A:C4:57:FB:0B:D7:17:48:C8:AB:52:49:39:3E:E9:3C:60
ValidityMon, 09 Oct 2023 08:10:32 GMT - Mon, 01 Jan 2024 08:10:31 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Oct 2023 10:05:24 GMT
expires: Sat, 26 Oct 2024 10:05:24 GMT
cache-control: public, max-age=31536000
age: 464490
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
player.vimeo.com/video/811340891?h=4ac40705eb
200 OK 6.2 kB URL GET HTTP/1.1 player.vimeo.com/video/811340891?h=4ac40705eb
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4B:91:E3:66:C8:AB:7B:DB:A8:E4:58:1B:25:C3:EF:38:4C:8E:CE:21
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14789)
Hash 9c1401b02489ff387d41be6aa5455fbb
652efdd91bb6fbe9fbfc4816d3406f40340ec274
204f3ab17e2cfe2c2ad78df8d73555d1fc880fb046a334b4b64f8ce5ef5e451b
GET /video/811340891?h=4ac40705eb HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 19:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' blob: resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-68f4467c9b-mrfx5
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-68f4467c9b-mrfx5
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1638-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1698865614.084172,VS0,VE253
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=g5HgczsG4Q9EO836R6Wll6rs70C2kP06TwEE0S1gOYw-1698865614-0-Af0jbESiev4sWAZibBGqRFdq49HQBoDhyYBmvYc8gI1C49mK5I5V+TWIhcP/WmiiDPc7bYZThVJDMYItnK91xXM=; path=/; expires=Wed, 01-Nov-23 19:36:54 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 81f66ae7ed63b529-OSL
Content-Encoding: gzip
player.vimeo.com/video/811340932?h=ce5afc73a8
200 OK 6.2 kB URL GET HTTP/1.1 player.vimeo.com/video/811340932?h=ce5afc73a8
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4B:91:E3:66:C8:AB:7B:DB:A8:E4:58:1B:25:C3:EF:38:4C:8E:CE:21
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14790)
Hash 91606190424ede1a0d038706c4446341
807e698196514e1124b7f00edcf4542a827856b6
3aade571ad461304dc582f1ac4aae10b0e4a57b440652617dcb7a809dd873112
GET /video/811340932?h=ce5afc73a8 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 19:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' blob: resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-68f4467c9b-zxwpn
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-68f4467c9b-zxwpn
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1625-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1698865614.078921,VS0,VE284
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=QD7V6GMt13.nP6TWhefLXLDjAfa_W7aa98llAY5XfWU-1698865614-0-AXiwm7gxNNysDU6eRYo2NM0+bIBk/RDjcXBcoRxJgK3mk877PdZfRIXhsBSbNPp3RXyK2l2gzzwzwRtIrbUu6mg=; path=/; expires=Wed, 01-Nov-23 19:36:54 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 81f66ae7ea010afe-OSL
Content-Encoding: gzip
static.leadpages.net/images/favicon.ico
2.6 kB URL GET static.leadpages.net/images/favicon.ico
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectstatic.leadpages.net
Fingerprint74:ED:B8:2C:E0:C6:39:88:EB:34:E1:82:96:F0:49:60:2D:6B:6E:03
ValidityMon, 16 Oct 2023 23:07:53 GMT - Sun, 14 Jan 2024 23:59:05 GMT
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 0210a839146c090d313d070610e16bd2
f87bd57affad1046bf0f44db93f7c23304e43d55
76da9be859d0d9cd9ffa30b9aa9d07a34164acba1ec512c61bd1b7854c1fab7b
GET /images/favicon.ico HTTP/1.1
Host: static.leadpages.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
x-cloud-trace-context: 95c8ea8cbb113e5ef78a14c6e3627459
content-encoding: gzip
server: Google Frontend
via: 1.1 google
date: Wed, 01 Nov 2023 19:03:54 GMT
expires: Wed, 01 Nov 2023 19:08:54 GMT
cache-control: public, max-age=300
age: 180
etag: "-Aynvg"
content-type: image/vnd.microsoft.icon
vary: Accept-Encoding
content-length: 2594
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
lh3.googleusercontent.com/K7kinBes30FDzGamXV_9-gmSOpxdJ5s3h38KJ6un1uulCU7Fdtwv2imdYUlsjppnenNik6vEU2goEI-StZSBe8_FomSurESudBI=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/K7kinBes30FDzGamXV_9-gmSOpxdJ5s3h38KJ6un1uulCU7Fdtwv2imdYUlsjppnenNik6vEU2goEI-StZSBe8_FomSurESudBI=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash c177d67fa204a015de390bb54c4673a6
5cc4d09b12b1480b29bc696a8e180a9d2fffd1c0
76badb85155c8e3d20a9cfd890815765e8067a7cf350fe7896afcb6f58d3a193
GET /K7kinBes30FDzGamXV_9-gmSOpxdJ5s3h38KJ6un1uulCU7Fdtwv2imdYUlsjppnenNik6vEU2goEI-StZSBe8_FomSurESudBI=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3767
x-xss-protection: 0
date: Wed, 01 Nov 2023 15:34:02 GMT
expires: Thu, 02 Nov 2023 15:34:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12772
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/rdm9g_M1IuMzi3Yys8LWtTS1cohePS51HGhnbVKXLqJ7i5XdJ-tu4jiJOMvLtLFRcEVuSJlc4BxpWFoX1cR_wfDgdYaJ4DhaHg=w16
200 OK 474 B URL GET HTTP/2 lh3.googleusercontent.com/rdm9g_M1IuMzi3Yys8LWtTS1cohePS51HGhnbVKXLqJ7i5XdJ-tu4jiJOMvLtLFRcEVuSJlc4BxpWFoX1cR_wfDgdYaJ4DhaHg=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x13, components 3\012- data
Hash 915c56553b6bd1237a3f8d096d3d98e5
9aba501dee47efa7c6ac0e2b4ae545f7c20ae145
d7d0499da9d7f86db028a84b9515be45c1cca512200a3e119a9cfe4409f9337f
GET /rdm9g_M1IuMzi3Yys8LWtTS1cohePS51HGhnbVKXLqJ7i5XdJ-tu4jiJOMvLtLFRcEVuSJlc4BxpWFoX1cR_wfDgdYaJ4DhaHg=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 474
x-xss-protection: 0
date: Wed, 01 Nov 2023 15:34:02 GMT
expires: Thu, 02 Nov 2023 15:34:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12772
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/iZaZCXbJhfMtpQbhzhB38Uxxt0Noabk5pEXdruuAc2KE1vLUjsvNY909wXHvuNcmG1Uoljaw5-_6K6jIKIgWgrHPLvSzxHmsIQ=w16
200 OK 443 B URL GET HTTP/2 lh3.googleusercontent.com/iZaZCXbJhfMtpQbhzhB38Uxxt0Noabk5pEXdruuAc2KE1vLUjsvNY909wXHvuNcmG1Uoljaw5-_6K6jIKIgWgrHPLvSzxHmsIQ=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x14, components 3\012- data
Hash 33fecb13c3206051e6382c895ef2e50b
b2a09ce6006554e7575c89aea4849576bd13ebae
173bbceec8ecbf200c43d10b460c5338a724b95f0a2a9826d45db57109e2bd07
GET /iZaZCXbJhfMtpQbhzhB38Uxxt0Noabk5pEXdruuAc2KE1vLUjsvNY909wXHvuNcmG1Uoljaw5-_6K6jIKIgWgrHPLvSzxHmsIQ=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 443
x-xss-protection: 0
date: Wed, 01 Nov 2023 15:34:02 GMT
expires: Thu, 02 Nov 2023 15:34:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12772
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/0t9HIE7OHP69Ob2YjWdzht34hQkVKEoYetjUNe-zLKYlAy-I39njty74sDeK32TZrLE2SWd5LfHyLZLPAFf8GmsG4w2yhQrpisVb=w16
200 OK 419 B URL GET HTTP/2 lh3.googleusercontent.com/0t9HIE7OHP69Ob2YjWdzht34hQkVKEoYetjUNe-zLKYlAy-I39njty74sDeK32TZrLE2SWd5LfHyLZLPAFf8GmsG4w2yhQrpisVb=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x10, components 3\012- data
Hash 4b1adba926abf23b09d9554d3663f630
22c0596485c9b4da950537fe5785bcc5a4e3014e
53ffedc9d58bbab67909271b53315fd37dee3a15c4e87802913bf35810b7aa2c
GET /0t9HIE7OHP69Ob2YjWdzht34hQkVKEoYetjUNe-zLKYlAy-I39njty74sDeK32TZrLE2SWd5LfHyLZLPAFf8GmsG4w2yhQrpisVb=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 419
x-xss-protection: 0
date: Wed, 01 Nov 2023 15:34:02 GMT
expires: Thu, 02 Nov 2023 15:34:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12772
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/x2BVhiGNZH1GCUXrB7Pju0uYhNAvLO5YM2kjVv4pIYv0UqcyYrF_GtSm8yMcmwMhQVZKbQvJ9qdYJnozGm12JYjzO_J7kmz6LCI=w16
200 OK 443 B URL GET HTTP/2 lh3.googleusercontent.com/x2BVhiGNZH1GCUXrB7Pju0uYhNAvLO5YM2kjVv4pIYv0UqcyYrF_GtSm8yMcmwMhQVZKbQvJ9qdYJnozGm12JYjzO_J7kmz6LCI=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x14, components 3\012- data
Hash 7b994da19641dd540d1e53f5d2eef47b
39a0a3742476b988c1d992da8f8259f4ffed92cd
88df2d0b1df1058223bf38bfd5f88670dc563f4d749e99a7828ae6067fbdf31e
GET /x2BVhiGNZH1GCUXrB7Pju0uYhNAvLO5YM2kjVv4pIYv0UqcyYrF_GtSm8yMcmwMhQVZKbQvJ9qdYJnozGm12JYjzO_J7kmz6LCI=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 443
x-xss-protection: 0
date: Wed, 01 Nov 2023 15:34:02 GMT
expires: Thu, 02 Nov 2023 15:34:02 GMT
cache-control: public, max-age=86400, no-transform
age: 12772
etag: "v1"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-2psMuNoFs5LPQBuxzH34dq4R4jGaLdsDyW7x199W0YgYdnKDlWx1Jd8l6xuD8UNKgafyzAt2BbWgWxijEKBmloF7YBrEXoiFQ=w16
200 OK 4.7 kB URL GET HTTP/2 lh3.googleusercontent.com/-2psMuNoFs5LPQBuxzH34dq4R4jGaLdsDyW7x199W0YgYdnKDlWx1Jd8l6xuD8UNKgafyzAt2BbWgWxijEKBmloF7YBrEXoiFQ=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Science and medicine, scientist analyzing and dropping a sample into a glassware, experiments containing chemical liquid in lab, software=Picasa], baseline, precision 8, 16x12, components 3\012- data
Hash 2fa90112a72b840a44fb7c160fbc2651
8aa1b713e13778eb3b777a62dbc42779fd481ee4
2884f185ced1c718bd83d3dbf585805d31089b7f39096db596d3f7c110e5c29e
GET /-2psMuNoFs5LPQBuxzH34dq4R4jGaLdsDyW7x199W0YgYdnKDlWx1Jd8l6xuD8UNKgafyzAt2BbWgWxijEKBmloF7YBrEXoiFQ=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 4727
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639877389-18b478404bc2747b2c5d16b86645e7c723c8b15c65a3e3fa86d0ba3dee245194-d?mw=80&q=85
200 OK 906 B URL GET HTTP/2 i.vimeocdn.com/video/1639877389-18b478404bc2747b2c5d16b86645e7c723c8b15c65a3e3fa86d0ba3dee245194-d?mw=80&q=85
IP
Requested by https://player.vimeo.com/video/811340978?h=bf52a5b496
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 327f79524a750a9ef3eeb86f3e5beac2
eafb9c376b6fd575acc714b92ca19742431e32c1
0ac4a9bc9d82dc32d52bf3122787a85c1cd27708a33d94fb3913e78355fe5c7a
GET /video/1639877389-18b478404bc2747b2c5d16b86645e7c723c8b15c65a3e3fa86d0ba3dee245194-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 327f79524a750a9ef3eeb86f3e5beac2
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-k4c0
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 1744825
x-served-by: cache-dfw-kdal2120043-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 2206, 1
x-timer: S1698865615.618777,VS0,VE1
vary: Accept
content-length: 906
X-Firefox-Spdy: h2
go.maxweb.com/conversion/iframe/?a=7650&token=7fea23d8dd71c3b45c9df27ce0f56342
200 OK 474 B URL GET HTTP/2 go.maxweb.com/conversion/iframe/?a=7650&token=7fea23d8dd71c3b45c9df27ce0f56342
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDA:A2:AA:BA:65:01:F9:CD:C6:16:E2:D9:F9:ED:AE:44:FD:E7:90:4C
ValidityFri, 03 Feb 2023 00:00:00 GMT - Sat, 03 Feb 2024 23:59:59 GMT
Hash 2d4673d5b85d8e36febbeeab23faa5de
f3e58a70caf38cddb9a7cf50c87a7f0893583640
2ff4bc5b4ff713fe0d6dbc53bad323042d820203cfa528abd089b7e75b98a09f
GET /conversion/iframe/?a=7650&token=7fea23d8dd71c3b45c9df27ce0f56342 HTTP/1.1
Host: go.maxweb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 19:06:54 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Wed, 01 Nov 2023 20:07:48 GMT
cache-control: max-age=3600, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
x-server: WEB_6
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
set-cookie: __cflb=02DiuDvnJbjKdBkxKLVCCWPG7dn53vdREcs7nJmAzh3u6; SameSite=Lax; path=/; expires=Thu, 02-Nov-23 18:06:54 GMT; HttpOnly
server: cloudflare
cf-ray: 81f66ae8ba1c56c1-OSL
content-encoding: br
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Nsq9pdE28j1wiZhThJfNbUUNOAKY9d0y21ez41ztAHt2x1R4zbrQHob1so0mdSykpb1caf_4vd-gf7t7RwtJzyJQq7rGDU2g2iw=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/Nsq9pdE28j1wiZhThJfNbUUNOAKY9d0y21ez41ztAHt2x1R4zbrQHob1so0mdSykpb1caf_4vd-gf7t7RwtJzyJQq7rGDU2g2iw=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash c53093e3ae735deecb8de8e4ca835916
bd53ca0d1d0099032225d76ff069726868814e66
c0f958615bcf6c9351b2cb51b92ecf1e7c00c4fd7524d82a264af5c84ed4b8ba
GET /Nsq9pdE28j1wiZhThJfNbUUNOAKY9d0y21ez41ztAHt2x1R4zbrQHob1so0mdSykpb1caf_4vd-gf7t7RwtJzyJQq7rGDU2g2iw=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3781
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/css/player.css
200 OK 22 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/css/player.css
IP
Requested by https://player.vimeo.com/video/811341012?h=0d30493fa3
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65494)
Hash 983c08451ac8003bd9786cbc02fc0241
39f66ca378d6c97ab451d93977abf0858b0d3e65
adb193532043b470eaeb11c6e234de3abc4d43a2b5d62e8aa250815814f373f2
GET /p/4.25.17/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 87912
x-served-by: cache-iad-kiad7000134-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 52, 93032
x-timer: S1698865615.613351,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 22243
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639861789-979a72a9133f2265e81822a6c9805a1e13c768e8ddf7a3d95bfc201ede2a39d1-d?mw=80&q=85
200 OK 1.4 kB URL GET HTTP/2 i.vimeocdn.com/video/1639861789-979a72a9133f2265e81822a6c9805a1e13c768e8ddf7a3d95bfc201ede2a39d1-d?mw=80&q=85
IP
Requested by https://player.vimeo.com/video/811338299?h=e9a6bf7a2a
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 5b9f2f33f66bc772e752c879b9c33eea
6d60852d2685b000dcc71aebb57c9d5a39bb5b36
00a896db002c91b18776aca0215fdd24c843eb51625e4e5432e3f935fc189f7d
GET /video/1639861789-979a72a9133f2265e81822a6c9805a1e13c768e8ddf7a3d95bfc201ede2a39d1-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 5b9f2f33f66bc772e752c879b9c33eea
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-glb-prod
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 723840
x-served-by: cache-dfw-kdal2120084-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 776, 1
x-timer: S1698865615.619382,VS0,VE1
vary: Accept
content-length: 1353
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-sihJWAzO8RelCwVYJLRddGxiIlwekR-OqkzBuM-larRorsG-qWvVGrWlodTPUofoMo6LDWRneS1j-oz3EEcxz0=w16
200 OK 335 B URL GET HTTP/2 lh3.googleusercontent.com/-sihJWAzO8RelCwVYJLRddGxiIlwekR-OqkzBuM-larRorsG-qWvVGrWlodTPUofoMo6LDWRneS1j-oz3EEcxz0=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x9, components 3\012- data
Hash 538c07eebc163c4b619b4f8e513e440e
b49f6112cec424d571f8cf3c1ad98f4732d854c7
82eb31993198ab11e3f063f2fa7349c4d2315522e7946ed0be5c477ecd9a3a6c
GET /-sihJWAzO8RelCwVYJLRddGxiIlwekR-OqkzBuM-larRorsG-qWvVGrWlodTPUofoMo6LDWRneS1j-oz3EEcxz0=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 335
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Vn_HRbJTtIsv3a8Rjf0FdDqdsrTFqfeellheSVcx8TxPvGTUnikUjUbRAeunKC9PlKo3i5vQPmXQMR17eBI0WNU38yu-bNFeMkw=s0
200 OK 27 kB URL GET HTTP/2 lh3.googleusercontent.com/Vn_HRbJTtIsv3a8Rjf0FdDqdsrTFqfeellheSVcx8TxPvGTUnikUjUbRAeunKC9PlKo3i5vQPmXQMR17eBI0WNU38yu-bNFeMkw=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 556x370, components 3\012- data
Hash 0c89b607f4802a070df8b7774353f8f1
19e4aebcacc8e33ef1a6e7e09c3cd293b099bdee
9b24ffacb53b37cef3d44c41b9903d3e8df97365676087d9e5425950c02d3ac7
GET /Vn_HRbJTtIsv3a8Rjf0FdDqdsrTFqfeellheSVcx8TxPvGTUnikUjUbRAeunKC9PlKo3i5vQPmXQMR17eBI0WNU38yu-bNFeMkw=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 27100
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/zP0xNyAQWVsAKB3P_retODOJSE0H9v56a8LbL_U2u9wu0ndYW5EG5YdtwugukWFEo5jYVp0ptEPL1aScMq5jkY93qsim_4FsncI=w16
200 OK 457 B URL GET HTTP/2 lh3.googleusercontent.com/zP0xNyAQWVsAKB3P_retODOJSE0H9v56a8LbL_U2u9wu0ndYW5EG5YdtwugukWFEo5jYVp0ptEPL1aScMq5jkY93qsim_4FsncI=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x10, components 3\012- data
Hash dc2541d8343ec67778be2abd43153699
cc0813c1e521371336dcb47eb49fc13ae21cc8d3
79d3e8d33536675fdb43b4126b6cc4763eca67cd2408456233b8911a04c7224a
GET /zP0xNyAQWVsAKB3P_retODOJSE0H9v56a8LbL_U2u9wu0ndYW5EG5YdtwugukWFEo5jYVp0ptEPL1aScMq5jkY93qsim_4FsncI=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 457
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/JjvqHjEulJg6nccPdkwGmjFWBUZdynZXiSyp7qgkCod56iBRrOWjqKviji-5SdtVG-vtJ8pHvH9M6ROfzp7K1ZHjNIDvQefqDIs=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/JjvqHjEulJg6nccPdkwGmjFWBUZdynZXiSyp7qgkCod56iBRrOWjqKviji-5SdtVG-vtJ8pHvH9M6ROfzp7K1ZHjNIDvQefqDIs=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 25bc76a2e6dca33253ec0b69f871b885
d3b9698720de13cc73f6eb34ebe8546998fd6136
9c14e923780ada8b817933572fbc85794a6bff340dc915878c4b26992ca0775c
GET /JjvqHjEulJg6nccPdkwGmjFWBUZdynZXiSyp7qgkCod56iBRrOWjqKviji-5SdtVG-vtJ8pHvH9M6ROfzp7K1ZHjNIDvQefqDIs=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3759
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/W71IeeCEio1OGvs2z_vXxsXrco2Bmuo9S0dQ2axsaboSuULFKnklSJuHfzkqNOTzJsh9HEg1dm6Ki46ft0_AQqgXsaASx6sYzo8=w16
200 OK 462 B URL GET HTTP/2 lh3.googleusercontent.com/W71IeeCEio1OGvs2z_vXxsXrco2Bmuo9S0dQ2axsaboSuULFKnklSJuHfzkqNOTzJsh9HEg1dm6Ki46ft0_AQqgXsaASx6sYzo8=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x12, components 3\012- data
Hash d9df8e8d8e155d0042d908c7f534b23d
9f9337df1b0a17d0e690d8478d7eff46c5dc0051
67f9ef5aea18e7d7b3690dc82b5ea80a8ad0cbf215724d586b140edb8b4dea18
GET /W71IeeCEio1OGvs2z_vXxsXrco2Bmuo9S0dQ2axsaboSuULFKnklSJuHfzkqNOTzJsh9HEg1dm6Ki46ft0_AQqgXsaASx6sYzo8=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 462
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/W-fRo9TyjUosPGDkxn-OrhVwTMmxTyzGpQLneg52HgPv8W-tfApGz6R9mhXpQaSVnWUUUH5NFTtKEot_HSyKwyBKx4Y8vfwhJfs=s0
200 OK 22 kB URL GET HTTP/2 lh3.googleusercontent.com/W-fRo9TyjUosPGDkxn-OrhVwTMmxTyzGpQLneg52HgPv8W-tfApGz6R9mhXpQaSVnWUUUH5NFTtKEot_HSyKwyBKx4Y8vfwhJfs=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 681x388, components 3\012- data
Hash dfa0430584f3b89e456a341cd5841113
1faa1a1cdb1e710779492148aa0215cf511c83ad
312b279241d3d93400139c01808af18496096a20b78e12ed4c98979d82cd7006
GET /W-fRo9TyjUosPGDkxn-OrhVwTMmxTyzGpQLneg52HgPv8W-tfApGz6R9mhXpQaSVnWUUUH5NFTtKEot_HSyKwyBKx4Y8vfwhJfs=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 22277
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-cTI8YjXjRRpew-VSJ8zFgCCPKqQHjtQMMt6jvpIBljipgFS5Dr2_8DJA7de69phThaDExqNjmCVQXz5ETCmdtJrayQDcn5aM0G1=w16
200 OK 419 B URL GET HTTP/2 lh3.googleusercontent.com/-cTI8YjXjRRpew-VSJ8zFgCCPKqQHjtQMMt6jvpIBljipgFS5Dr2_8DJA7de69phThaDExqNjmCVQXz5ETCmdtJrayQDcn5aM0G1=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x9, components 3\012- data
Hash 79387a63cc256a3ac61e24b243345fcf
db3c2f6d668190bfa052dc3de0e45362b49713ac
198deb29f48c241d7f8ae08267023c2f21d0cd9d3cda3cebf33942c119968a31
GET /-cTI8YjXjRRpew-VSJ8zFgCCPKqQHjtQMMt6jvpIBljipgFS5Dr2_8DJA7de69phThaDExqNjmCVQXz5ETCmdtJrayQDcn5aM0G1=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 419
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/2bHekqkBpFPIVSeM99UxfDlQ6bXPamFlO15xkgPL1VqroEjxO6p1ke3-goGw9U9kXVqiBfMw12EjqvqF3P6LCnF73wieNrArUn8=w16
200 OK 437 B URL GET HTTP/2 lh3.googleusercontent.com/2bHekqkBpFPIVSeM99UxfDlQ6bXPamFlO15xkgPL1VqroEjxO6p1ke3-goGw9U9kXVqiBfMw12EjqvqF3P6LCnF73wieNrArUn8=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x12, components 3\012- data
Hash 123756c6ecebfd5bd69bb8748363cd60
b29c6049d86bf48244b2b83af2ba70eee2343fbf
c7fc6760e7bad7cb4c092e7fcae19ecbc823a0ad5e266465ec45a048b1f69260
GET /2bHekqkBpFPIVSeM99UxfDlQ6bXPamFlO15xkgPL1VqroEjxO6p1ke3-goGw9U9kXVqiBfMw12EjqvqF3P6LCnF73wieNrArUn8=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 437
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/LRdllCw4zUZwycFdnQH6kscGItQpCUH7FQkyVwXL5nPN-_9BUDUcEBts72rpUuvdY7HPQjGOkPwgdJ85CBLjnejoAoHW_LXHCA=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/LRdllCw4zUZwycFdnQH6kscGItQpCUH7FQkyVwXL5nPN-_9BUDUcEBts72rpUuvdY7HPQjGOkPwgdJ85CBLjnejoAoHW_LXHCA=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x21, components 3\012- data
Hash 08f819fd8f38321b5c262f2f26f13d7c
8d3557e0d0a3bcbb0f03261b21f9c9a977097dec
1ee4bfcb0baed524283fac4ef5fe7fce8fa9400e57450d2691472b87ea8fd6eb
GET /LRdllCw4zUZwycFdnQH6kscGItQpCUH7FQkyVwXL5nPN-_9BUDUcEBts72rpUuvdY7HPQjGOkPwgdJ85CBLjnejoAoHW_LXHCA=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3790
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/player.module.js
200 OK 134 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/player.module.js
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Size 134 kB (133587 bytes)
Hash 02a26315018107dc1da706eba774cad7
f068f50ba55ca0c31181af8df0eab56b3afec61d
e0c5235dfecc82890a0f10aae5305cfc12ec52fd1a875fdf1510c8ecb80248c3
GET /p/4.25.17/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 87912
x-served-by: cache-iad-kcgs7200027-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 28, 17
x-timer: S1698865615.617558,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 133587
X-Firefox-Spdy: h2
lh3.googleusercontent.com/u2mmCXzyEF-2keZkMrPxw_DhLIwM0znWIGEtuiktoGh2l8BnUuCo50jOLqYWj810YD8bWC9PKsjDvPrUTJ1l6T8OR-0PblQ7uFKe=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/u2mmCXzyEF-2keZkMrPxw_DhLIwM0znWIGEtuiktoGh2l8BnUuCo50jOLqYWj810YD8bWC9PKsjDvPrUTJ1l6T8OR-0PblQ7uFKe=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 1f0f1252ca8fc53d0d3c30a76063d2e1
a53c00be0790c173ba32530ba095452b7385a232
d0fd59cd3189d81d4710c6bbdb6e6228ecdc4e305b595b1e84daeabdd7e5337b
GET /u2mmCXzyEF-2keZkMrPxw_DhLIwM0znWIGEtuiktoGh2l8BnUuCo50jOLqYWj810YD8bWC9PKsjDvPrUTJ1l6T8OR-0PblQ7uFKe=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3766
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/zCv7gAHDfxau_9Q69sJ1oPPAs8-XWpTvjoq449AuIINiWRJ2gd8Yux7lOX3FaSvxvTx45Z6C_CZDR3oiSQne_fxDRyHWanJxLbQ=w16
200 OK 3.6 kB URL GET HTTP/2 lh3.googleusercontent.com/zCv7gAHDfxau_9Q69sJ1oPPAs8-XWpTvjoq449AuIINiWRJ2gd8Yux7lOX3FaSvxvTx45Z6C_CZDR3oiSQne_fxDRyHWanJxLbQ=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x14, components 3\012- data
Hash 26fa8bc05230a2a38d52d83ff5442186
0446c65eea198d29b76c5bf6e8772ac58ce3470d
dfc6960141b7faa6263eee5437a70a7797ff8d23b0023740383300e60f81aaaa
GET /zCv7gAHDfxau_9Q69sJ1oPPAs8-XWpTvjoq449AuIINiWRJ2gd8Yux7lOX3FaSvxvTx45Z6C_CZDR3oiSQne_fxDRyHWanJxLbQ=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3645
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/1OgBaqFJd9ygSL8u5t27XJCM5Bi7LwgVhAu8RMxNk9qBYBHvQBntNAats4Ly-ffZblfGRQZclUyO0VrulBhGzfmX4yOu-oM3JM8=s0
200 OK 24 kB URL GET HTTP/2 lh3.googleusercontent.com/1OgBaqFJd9ygSL8u5t27XJCM5Bi7LwgVhAu8RMxNk9qBYBHvQBntNAats4Ly-ffZblfGRQZclUyO0VrulBhGzfmX4yOu-oM3JM8=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 681x379, components 3\012- data
Hash 83bf81cf4e9eea4b93e70888506cbd48
3a8ac0ce2ac74fd229a9fad9aa6b3c08827978d4
8db2053c3b01f04259bd6c5430dfae2011f66c60e37508401483c9e885d6b2e4
GET /1OgBaqFJd9ygSL8u5t27XJCM5Bi7LwgVhAu8RMxNk9qBYBHvQBntNAats4Ly-ffZblfGRQZclUyO0VrulBhGzfmX4yOu-oM3JM8=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 23833
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/15JpGQSz_mfLfsmbb3akcJpdZnUXeU00q35_LbsLy_rHyCagmUZx1BBiUE65aN8goXnzK419wmQ-9molWT3Y0WZyqCeJJoAVm20J=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/15JpGQSz_mfLfsmbb3akcJpdZnUXeU00q35_LbsLy_rHyCagmUZx1BBiUE65aN8goXnzK419wmQ-9molWT3Y0WZyqCeJJoAVm20J=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x21, components 3\012- data
Hash 494884f3a62fd8bd589226a37fd6ef5d
7ca522358d37d4d8da1b90057c7655fd0b6cd441
0fadfc091066d293abfd14f8fec1ba7a3ced63db93bbebbd6b0a1da01ba0bb6c
GET /15JpGQSz_mfLfsmbb3akcJpdZnUXeU00q35_LbsLy_rHyCagmUZx1BBiUE65aN8goXnzK419wmQ-9molWT3Y0WZyqCeJJoAVm20J=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3757
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/vIT00-n5LzLGFtxG9R-NuHSppjQBmpa60dPqYSndGgTzcGXiurbQd4CQ4VfDy6usrx7jW2X4QBZulEGStAS89Dj1qxFb3BhfAw=w16
200 OK 468 B URL GET HTTP/2 lh3.googleusercontent.com/vIT00-n5LzLGFtxG9R-NuHSppjQBmpa60dPqYSndGgTzcGXiurbQd4CQ4VfDy6usrx7jW2X4QBZulEGStAS89Dj1qxFb3BhfAw=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x13, components 3\012- data
Hash e8188f951f69ebb7006e940557b0e50b
aa83b7ae212f5ad27077b3bf82e8658d5b27a361
21340700efe36f276a5bd9a0895927233d3db6a54633d6327ba14d48edf9e9b7
GET /vIT00-n5LzLGFtxG9R-NuHSppjQBmpa60dPqYSndGgTzcGXiurbQd4CQ4VfDy6usrx7jW2X4QBZulEGStAS89Dj1qxFb3BhfAw=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 468
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
player.vimeo.com/video/811341012?h=0d30493fa3
200 OK 6.2 kB URL GET HTTP/1.1 player.vimeo.com/video/811341012?h=0d30493fa3
IP
Requested by https://slimcrystal.com/start
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint4B:91:E3:66:C8:AB:7B:DB:A8:E4:58:1B:25:C3:EF:38:4C:8E:CE:21
ValidityWed, 01 Mar 2023 00:00:00 GMT - Thu, 29 Feb 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (14783)
Hash 36afe1f310337da8c6d5445707ece523
13daf5a95d14fec468fb3fcf4def06afe1a04929
a7216a74140d33b30f0ec95edb182c86d6e882ffa9b94f0a9b98fa38922ea4ed
GET /video/811341012?h=0d30493fa3 HTTP/1.1
Host: player.vimeo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 19:06:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://*.vimeocdn.com 'unsafe-eval' blob: resource: https://vimeo.com https://js-agent.newrelic.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://bam.nr-data.net https://src.litix.io https://www.gstatic.com https://cdn.streamroot.io https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.tv; style-src 'self' 'unsafe-inline' https://*.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-player5.wirewax.com; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://player-telemetry.vimeo.com https://*.akamaized.net https://*.akamaized-staging.net https://*.vimeocdn.com https://drm-gke.vhx.com https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://bam.nr-data.net https://live-api.cloud.vimeo.com https://*.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://*.dna-delivery.com https://*.kollective.app https://*.kollective.app:31015 https://*.kollectivecd.com https://*.hivestreaming.com https://mimir.cloud.vimeo.com https://*.wirewax.com https://*.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com; font-src data: https://edge-assets.wirewax.com https://branding.cdn.magisto.com https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://*.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://edge-assets.wirewax.com https://maps.googleapis.com android-webview-video-poster:; object-src 'self' https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net; media-src 'self' blob: https://*.vimeocdn.com https://*.akamaized.net https://*.akamaized-staging.net https://*.gvt1.com https://live-api.cloud.vimeo.com; frame-src 'self' https://*
expires: Fri, 15 Dec 1985 19:30:00 GMT
link: <https://fresnel.vimeocdn.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-host: player-backend-68f4467c9b-8gbww
x-player-backend: g
x-xss-protection: 1; mode=block
x-backend-server: player-backend-edge-entry
x-bapp-server: player-backend-68f4467c9b-8gbww
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1654-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1698865614.093638,VS0,VE595
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=G7fP46eNWZF1agJJX9ASlTd9NHI_RlR0MQ7LK34bnDs-1698865614-0-AUkvUgvrLVrOQ054WbIIc2Im8W6TxQVkK9oVSiSzm5CKybIP6EwLmuviAjMtwXX29jY0DzwaCBRToeW0sj4cRks=; path=/; expires=Wed, 01-Nov-23 19:36:54 GMT; domain=.vimeo.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
CF-RAY: 81f66ae7e8b256af-OSL
Content-Encoding: gzip
lh3.googleusercontent.com/8TiDRCbZJ4nMNRCOXIn3rY5WgiripnLFeVIgMOdeHgs2XQGhJ7CBrXiZIm7HTY6W2RtnkxgKc7qEIPvnpYxbUXSzK4HSsLXx2Z-i=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/8TiDRCbZJ4nMNRCOXIn3rY5WgiripnLFeVIgMOdeHgs2XQGhJ7CBrXiZIm7HTY6W2RtnkxgKc7qEIPvnpYxbUXSzK4HSsLXx2Z-i=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 147eb141b074b62b1beee859d1195324
97fe77f5684368b261e3eaaf78f8f45a4059d6f8
66a9590d1d9482c9fa5f6bf092886b5e57e5cab67a298e88738140b83c7b53b4
GET /8TiDRCbZJ4nMNRCOXIn3rY5WgiripnLFeVIgMOdeHgs2XQGhJ7CBrXiZIm7HTY6W2RtnkxgKc7qEIPvnpYxbUXSzK4HSsLXx2Z-i=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3756
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/player.module.js
200 OK 134 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/player.module.js
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Size 134 kB (133587 bytes)
Hash 02a26315018107dc1da706eba774cad7
f068f50ba55ca0c31181af8df0eab56b3afec61d
e0c5235dfecc82890a0f10aae5305cfc12ec52fd1a875fdf1510c8ecb80248c3
GET /p/4.25.17/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 87912
x-served-by: cache-iad-kcgs7200027-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 28, 18
x-timer: S1698865615.631241,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 133587
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639861487-fe26c7b4ea831ced6348268e5519bd33ebce65d55d7c74725602b170b393c3e2-d?mw=80&q=85
200 OK 1.3 kB URL GET HTTP/2 i.vimeocdn.com/video/1639861487-fe26c7b4ea831ced6348268e5519bd33ebce65d55d7c74725602b170b393c3e2-d?mw=80&q=85
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash cdb4d617eff8e0f7a190b0a2372d4edc
0dd408acf534978facfaaa6ef6edf3f936bb5619
e224847c96ed9e7e5e3f64bc8dc07c665f256df29125e4d0e8f38dc6cc52ea36
GET /video/1639861487-fe26c7b4ea831ced6348268e5519bd33ebce65d55d7c74725602b170b393c3e2-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/avif
etag: cdb4d617eff8e0f7a190b0a2372d4edc
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-glb-prod
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 1336924
x-served-by: cache-dfw-kdal2120066-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1313, 1
x-timer: S1698865615.672154,VS0,VE2
vary: Accept
content-length: 1280
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/player.module.js
200 OK 134 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/player.module.js
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Size 134 kB (133587 bytes)
Hash 02a26315018107dc1da706eba774cad7
f068f50ba55ca0c31181af8df0eab56b3afec61d
e0c5235dfecc82890a0f10aae5305cfc12ec52fd1a875fdf1510c8ecb80248c3
GET /p/4.25.17/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 87912
x-served-by: cache-iad-kcgs7200027-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 28, 19
x-timer: S1698865615.663516,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 133587
X-Firefox-Spdy: h2
prod.cbstatic.net/dist/injectable.js
200 OK 58 kB URL GET HTTP/2 prod.cbstatic.net/dist/injectable.js
IP
Requested by https://slimcrystal.com/start
Certificate IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 7aab1fbc87fa9831e211b45fd9ace4e1
46e2531fd7f86a0992514084a505d8c0b6e94ac7
5e5935a7ee20c537dbae8914d38e720660410c64e99a23503156e0437d1f8b53
GET /dist/injectable.js HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 01 Nov 2023 19:06:54 GMT
last-modified: Mon, 21 Dec 2020 21:57:37 GMT
x-amz-version-id: RdcimFzJWwtinCAQ.f3F8OeQrj2.m2uJ
etag: W/"af651c30e1a69f6f2124e9c1d094a300"
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -2ealD23r4oTK97QUpb_so9ddLHzLPM2nee8aCpYUGYZPHZG8OGZfQ==
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/player.module.js
200 OK 134 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/player.module.js
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Size 134 kB (133587 bytes)
Hash 02a26315018107dc1da706eba774cad7
f068f50ba55ca0c31181af8df0eab56b3afec61d
e0c5235dfecc82890a0f10aae5305cfc12ec52fd1a875fdf1510c8ecb80248c3
GET /p/4.25.17/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:54 GMT
age: 87912
x-served-by: cache-iad-kcgs7200027-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 28, 20
x-timer: S1698865615.732416,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 133587
X-Firefox-Spdy: h2
lh3.googleusercontent.com/8ysOfo6joxt1DtP0ZlKhXC0pnKpKlKo49qbnZsR_L0P9rwKb6TL6vQMY09S45B9bS3BZJfQC50jfKU8sGgzCSnQvrvNCnw_5aLY=s0
200 OK 30 kB URL GET HTTP/2 lh3.googleusercontent.com/8ysOfo6joxt1DtP0ZlKhXC0pnKpKlKo49qbnZsR_L0P9rwKb6TL6vQMY09S45B9bS3BZJfQC50jfKU8sGgzCSnQvrvNCnw_5aLY=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 808x335, components 3\012- data
Hash 16b8629efeb0f97aec8afcfa4dddfa81
303e3279d53cc9819a99b0b1e4d01a2c0ae71311
f663dc992c263a3d9d93fbdd8d0754bf1962b3baf70f90a39a2fb5bbf77cdc7e
GET /8ysOfo6joxt1DtP0ZlKhXC0pnKpKlKo49qbnZsR_L0P9rwKb6TL6vQMY09S45B9bS3BZJfQC50jfKU8sGgzCSnQvrvNCnw_5aLY=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 30007
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/Xr7UX3aLAWL5hWg4_awjsw6PF_0e6XeJECZ99cTCkyMWR37Mqt2wHlwUTd2AOd4chRZWXP-E7A8bPPdUqGyvdTan57aB9B94PA=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/Xr7UX3aLAWL5hWg4_awjsw6PF_0e6XeJECZ99cTCkyMWR37Mqt2wHlwUTd2AOd4chRZWXP-E7A8bPPdUqGyvdTan57aB9B94PA=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 8f37765118fda061b04d2094f9bf3d1f
5926b6cc2309b8b4504bd84ac7dfd9813ba456ff
c0b8c8fe12da030cc6ba5eabb8edea0b7052ae533ce57b4709bc9c2ef32f88a7
GET /Xr7UX3aLAWL5hWg4_awjsw6PF_0e6XeJECZ99cTCkyMWR37Mqt2wHlwUTd2AOd4chRZWXP-E7A8bPPdUqGyvdTan57aB9B94PA=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3773
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/46CcjN2vxUQIsC0bhIkZAjNufuRyKzLzN2Wo91-27zNCOVEjtw5rpeWuo2DEoPhdW1uPvy1TgeSbo3Tqiayl_c2koaKFu3UIuw=w16
200 OK 3.6 kB URL GET HTTP/2 lh3.googleusercontent.com/46CcjN2vxUQIsC0bhIkZAjNufuRyKzLzN2Wo91-27zNCOVEjtw5rpeWuo2DEoPhdW1uPvy1TgeSbo3Tqiayl_c2koaKFu3UIuw=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x8, components 3\012- data
Hash 1ed86660328ebdc8bbebd314f6cfe882
d2deb0bd7e9f8a5e2ad4e64637b647f439d81423
03ff8fd74f959ca106929c92aeeac80a3ee4879039b7dafaa89d28418689ad04
GET /46CcjN2vxUQIsC0bhIkZAjNufuRyKzLzN2Wo91-27zNCOVEjtw5rpeWuo2DEoPhdW1uPvy1TgeSbo3Tqiayl_c2koaKFu3UIuw=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3599
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/bJkZBjVzCr6HyKH0xgNXPZ_zl8OQrZ1ISsRxJyaU6zTESOpEQPxE7w1_pSVQl0uz0aATLOnLBYOOJkguEXaOFrURDt-XQXxeny-9=w16
200 OK 502 B URL GET HTTP/2 lh3.googleusercontent.com/bJkZBjVzCr6HyKH0xgNXPZ_zl8OQrZ1ISsRxJyaU6zTESOpEQPxE7w1_pSVQl0uz0aATLOnLBYOOJkguEXaOFrURDt-XQXxeny-9=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type PNG image data, 16 x 10, 8-bit/color RGB, non-interlaced\012- data
Hash 17387e71b7a99d4810708f91468e1349
b1bea1b7b24eaed155699c622e2406d8cd0bbbfb
41ba9c4e932e024a0c1a1828bcfd8d0b9ef01b0e1be54f82523f32cfdc2bb1a7
GET /bJkZBjVzCr6HyKH0xgNXPZ_zl8OQrZ1ISsRxJyaU6zTESOpEQPxE7w1_pSVQl0uz0aATLOnLBYOOJkguEXaOFrURDt-XQXxeny-9=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 502
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/0Pltsy3SPx0117tEittJqvqvjru5RN4R2twYsJnb8qdKig5hKvcd3-KBw0JLPOILUMEE7GwWgTEHYrDqXYWwEUTGdMoxvZHxZV8=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/0Pltsy3SPx0117tEittJqvqvjru5RN4R2twYsJnb8qdKig5hKvcd3-KBw0JLPOILUMEE7GwWgTEHYrDqXYWwEUTGdMoxvZHxZV8=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 08906832e35123f97606dc84174f1b28
111432a44c895bc1de830593a0ee774d2eb67739
650837404f889bcbcc0d63876bcad738069fba614426146b2a38b3464c75b76a
GET /0Pltsy3SPx0117tEittJqvqvjru5RN4R2twYsJnb8qdKig5hKvcd3-KBw0JLPOILUMEE7GwWgTEHYrDqXYWwEUTGdMoxvZHxZV8=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3797
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/f1Lt49gqMok5GsohcV_rbcMbVUv4BwQ1KRvkYpiyiVR1OzlegrY1L5BmTe29mcgH8M-VgSR_x2gMFOqoQWHWQTrhqWt4dyHmi5U=w16
200 OK 442 B URL GET HTTP/2 lh3.googleusercontent.com/f1Lt49gqMok5GsohcV_rbcMbVUv4BwQ1KRvkYpiyiVR1OzlegrY1L5BmTe29mcgH8M-VgSR_x2gMFOqoQWHWQTrhqWt4dyHmi5U=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x14, components 3\012- data
Hash ded7b31c68428e977f0c0ec767b276c4
1b9d825c3d086c3627c2eab7d849de8c5a657d20
e2a61d42fe664b33e637acf7977a322881eee454f9836f155e70e9337f46b845
GET /f1Lt49gqMok5GsohcV_rbcMbVUv4BwQ1KRvkYpiyiVR1OzlegrY1L5BmTe29mcgH8M-VgSR_x2gMFOqoQWHWQTrhqWt4dyHmi5U=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 442
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/YaE5kF3_uODlGIRV-ZqG9Fv7ajAMjiLiBUwV36M7BmGDWMXrqMdCG4Hmv7-ePlZ61zEjzLcAQt20gGQ50u4fhHdA08BmJnEAhZwo=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/YaE5kF3_uODlGIRV-ZqG9Fv7ajAMjiLiBUwV36M7BmGDWMXrqMdCG4Hmv7-ePlZ61zEjzLcAQt20gGQ50u4fhHdA08BmJnEAhZwo=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 89d23c4a1f01ea4dc12013f1aa8cad26
bfcbbc028ad5e6152cf4437e40635381a0fcd8e6
1fd03a7e3e80533c61201b67da72a45aef4ffab06fbf6fcd0a8eb97555e66bbf
GET /YaE5kF3_uODlGIRV-ZqG9Fv7ajAMjiLiBUwV36M7BmGDWMXrqMdCG4Hmv7-ePlZ61zEjzLcAQt20gGQ50u4fhHdA08BmJnEAhZwo=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3804
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/ADRtnNycCl8EqhxpJV_LvFJ40U5BioGRpOLGvG0LLLkAzlsVIqWvXOVZ05H67y1_qjcu3UPcpcnfZyEiT8-o4bE7O45IxiDCYiY=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/ADRtnNycCl8EqhxpJV_LvFJ40U5BioGRpOLGvG0LLLkAzlsVIqWvXOVZ05H67y1_qjcu3UPcpcnfZyEiT8-o4bE7O45IxiDCYiY=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 5e89503c8f7583827ae286f0d04edcf5
38f84117ed48e420e372c235c0ff61a6121db474
1f8a6c5fcf5837f8406dfc3a688da6b058d7eb4b82c638b0bb90633861c780b6
GET /ADRtnNycCl8EqhxpJV_LvFJ40U5BioGRpOLGvG0LLLkAzlsVIqWvXOVZ05H67y1_qjcu3UPcpcnfZyEiT8-o4bE7O45IxiDCYiY=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3781
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/dh5_-WS7EEZM-lVVDtsYCLCPH7lh6EnRc4t21B8oLnKtx8LLra6qmWRfbrLpPFNpGDi9gC7LhlZ7al7ftLXp1cq9O-5fMUz2tlqL=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/dh5_-WS7EEZM-lVVDtsYCLCPH7lh6EnRc4t21B8oLnKtx8LLra6qmWRfbrLpPFNpGDi9gC7LhlZ7al7ftLXp1cq9O-5fMUz2tlqL=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 6c6bd9be692711787775db3241a0ede6
9dd892b165f48fa2781dbe7ebd14690f39072d0b
c12a805ce4431ea24ac986a36ce4008aa727cb937f8eeeb7303c9dce8aea6af9
GET /dh5_-WS7EEZM-lVVDtsYCLCPH7lh6EnRc4t21B8oLnKtx8LLra6qmWRfbrLpPFNpGDi9gC7LhlZ7al7ftLXp1cq9O-5fMUz2tlqL=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3779
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/j-14q2zkPpdWfHUbL_7lKU9RTLgaKtiZbZyxUuuQJNTLHuuzcCQEGjNe4rbC2oBaZgvkvUB7dTSxLlRyI82coByNEcvCIEtLUkU=w16
200 OK 419 B URL GET HTTP/2 lh3.googleusercontent.com/j-14q2zkPpdWfHUbL_7lKU9RTLgaKtiZbZyxUuuQJNTLHuuzcCQEGjNe4rbC2oBaZgvkvUB7dTSxLlRyI82coByNEcvCIEtLUkU=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x10, components 3\012- data
Hash 0eed34d1d22efd6de80cc7b67574c291
2c31dd5f69a71ba890eda541aae5dd74f2194fef
40c1de1a2463340629e355e829ad31e9b854abcb327b97d2ace19a04dcc6b8b1
GET /j-14q2zkPpdWfHUbL_7lKU9RTLgaKtiZbZyxUuuQJNTLHuuzcCQEGjNe4rbC2oBaZgvkvUB7dTSxLlRyI82coByNEcvCIEtLUkU=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 419
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/lczURLtg1SyAuQb_e5h3v7rWL5IKFknSq7I1AL5pay1FA9PlzJi52ovOcSYxhgeRtKO548S9_qtOnuMh2YzeVIVXYrWViKyASiM=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/lczURLtg1SyAuQb_e5h3v7rWL5IKFknSq7I1AL5pay1FA9PlzJi52ovOcSYxhgeRtKO548S9_qtOnuMh2YzeVIVXYrWViKyASiM=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 5279fb7ce382cb0a9bf34e9f480f234e
d6628f9a7589ffe859beb499da4e28d3218479fd
a83de617de30b7106e8f9be232419fa7e6cc1228caea561bffc176263f59c8d0
GET /lczURLtg1SyAuQb_e5h3v7rWL5IKFknSq7I1AL5pay1FA9PlzJi52ovOcSYxhgeRtKO548S9_qtOnuMh2YzeVIVXYrWViKyASiM=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3770
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/JIwaiZ-4-TPkXeuSAFJ05KQY9u5APEmWJTRHCrhrFnKw6loW813-4SbLnKmIWreYPO63ATYGin6olOceaCNWzZBn5SFAuWJF9BQ=w16
200 OK 3.7 kB URL GET HTTP/2 lh3.googleusercontent.com/JIwaiZ-4-TPkXeuSAFJ05KQY9u5APEmWJTRHCrhrFnKw6loW813-4SbLnKmIWreYPO63ATYGin6olOceaCNWzZBn5SFAuWJF9BQ=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x16, components 3\012- data
Hash 10e227de2e7aa74b1bfdedc8294a1c63
e3403aa5b18e30df17516e3df087f2ee08705762
aeb7f8bf9b8539a75ba60cea194c6e8ec56fb87de0d466032b987ef538bc31a5
GET /JIwaiZ-4-TPkXeuSAFJ05KQY9u5APEmWJTRHCrhrFnKw6loW813-4SbLnKmIWreYPO63ATYGin6olOceaCNWzZBn5SFAuWJF9BQ=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 3696
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-sihJWAzO8RelCwVYJLRddGxiIlwekR-OqkzBuM-larRorsG-qWvVGrWlodTPUofoMo6LDWRneS1j-oz3EEcxz0=w1280
200 OK 22 kB URL GET HTTP/2 lh3.googleusercontent.com/-sihJWAzO8RelCwVYJLRddGxiIlwekR-OqkzBuM-larRorsG-qWvVGrWlodTPUofoMo6LDWRneS1j-oz3EEcxz0=w1280
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Hash ebd0f17b7c26e8f96636858bd3cef786
c2a63aaf19d2e35dd2e54e671f06bd882c6a9199
fbf1f4fa6af40c86e768da6292e91c76fa3e217f878dc1f269893642b49aa77f
GET /-sihJWAzO8RelCwVYJLRddGxiIlwekR-OqkzBuM-larRorsG-qWvVGrWlodTPUofoMo6LDWRneS1j-oz3EEcxz0=w1280 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 22100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p7G-D2q_2wAZrA-_Dsy2CFpoljJ6RajwiBZqYW1TQv2yguXQDmG0HL2fzigngUby6jIknemVeCQzukNtNwIHPXfm9G28Of1Xfg2k=s0
200 OK 35 kB URL GET HTTP/2 lh3.googleusercontent.com/p7G-D2q_2wAZrA-_Dsy2CFpoljJ6RajwiBZqYW1TQv2yguXQDmG0HL2fzigngUby6jIknemVeCQzukNtNwIHPXfm9G28Of1Xfg2k=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 796x336, components 3\012- data
Hash f86461d9d343bcbac1e695e0f3f2189b
28ebebee0f468e0fa68f56b88746505880a814d6
be184abe6f37ff2d55fa4366368a7f6745d81d44461e2006a6ecec1887cfb832
GET /p7G-D2q_2wAZrA-_Dsy2CFpoljJ6RajwiBZqYW1TQv2yguXQDmG0HL2fzigngUby6jIknemVeCQzukNtNwIHPXfm9G28Of1Xfg2k=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 35258
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/kj-lKDJJg8GXnLfD_NHTHeJjOwYH_nJzv0ec54HLyVVeYa_yeQTXL13XJe77HYidpSnUpX0dRD7PMbfhb2g7eKuJ3Hf0hfRnZC0=s0
200 OK 30 kB URL GET HTTP/2 lh3.googleusercontent.com/kj-lKDJJg8GXnLfD_NHTHeJjOwYH_nJzv0ec54HLyVVeYa_yeQTXL13XJe77HYidpSnUpX0dRD7PMbfhb2g7eKuJ3Hf0hfRnZC0=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type PNG image data, 400 x 400, 8-bit colormap, non-interlaced\012- data
Hash 834d28f6b9fcd0b3f9c9057c6d68a9b4
1cd66448e0518314c81628b49cf4103a4ca0e964
8cb961f35ad97b55e2404f70cb9a9ba127e5df328a04d2f3fc732dd1831733f8
GET /kj-lKDJJg8GXnLfD_NHTHeJjOwYH_nJzv0ec54HLyVVeYa_yeQTXL13XJe77HYidpSnUpX0dRD7PMbfhb2g7eKuJ3Hf0hfRnZC0=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 30355
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/RNFVCcxucDHmpjCdvbbCL9Ni7o2FudRe3AjpGh60xp1pmVhDjGE7dFQUn71ZUNKmAMK2MCE123j1_eyCZv3HvrGfqRgMcK15_M4=w16
200 OK 489 B URL GET HTTP/2 lh3.googleusercontent.com/RNFVCcxucDHmpjCdvbbCL9Ni7o2FudRe3AjpGh60xp1pmVhDjGE7dFQUn71ZUNKmAMK2MCE123j1_eyCZv3HvrGfqRgMcK15_M4=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x15, components 3\012- data
Hash 5e43bf3c726a9ebd93c1466013310e87
ceba8568e770c002cfacde52854a12e382272d58
c056311cd4c08987373b23f31eaaa79f37f92269f03f0b1d3e65fd18dc15fada
GET /RNFVCcxucDHmpjCdvbbCL9Ni7o2FudRe3AjpGh60xp1pmVhDjGE7dFQUn71ZUNKmAMK2MCE123j1_eyCZv3HvrGfqRgMcK15_M4=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 489
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/8wRI3PCmjyXhCgUNdYt1RRLXfDeOfYRtAhagf435_7OahavXl43z7V_mK6Kk0BKhG02kpFg8N9K9Ew0WMNyveBKtuOb8GZD5eWQ=w16
200 OK 469 B URL GET HTTP/2 lh3.googleusercontent.com/8wRI3PCmjyXhCgUNdYt1RRLXfDeOfYRtAhagf435_7OahavXl43z7V_mK6Kk0BKhG02kpFg8N9K9Ew0WMNyveBKtuOb8GZD5eWQ=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x11, components 3\012- data
Hash 37fafeb76a08d4c54de299358da69be0
700e893f074239973bdc56ab44187aada2d10782
3629d6793a6fc468134d6675b8492213ef136187cebd1c74b7f6a9b7df57c6fe
GET /8wRI3PCmjyXhCgUNdYt1RRLXfDeOfYRtAhagf435_7OahavXl43z7V_mK6Kk0BKhG02kpFg8N9K9Ew0WMNyveBKtuOb8GZD5eWQ=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 469
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/HvZUeycCOVLeYMWUENpcX2phye0A6M5cBDctDkpSabcio4EpgGykONzTTummMDkxyLbX7o92gS7cKx9uf3Epdlh5yIeE3gLjh7-I=w16
200 OK 3.8 kB URL GET HTTP/2 lh3.googleusercontent.com/HvZUeycCOVLeYMWUENpcX2phye0A6M5cBDctDkpSabcio4EpgGykONzTTummMDkxyLbX7o92gS7cKx9uf3Epdlh5yIeE3gLjh7-I=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 16x20, components 3\012- data
Hash 6e446eec1ffd35ea07b445247dc52fbb
e16424f3f0ffe8f513f91e5a130d34c472fb0a6a
23e178ffaee3c2ccaafa458f18fabf078058c7ff9268c620b56dd3399d0f41fe
GET /HvZUeycCOVLeYMWUENpcX2phye0A6M5cBDctDkpSabcio4EpgGykONzTTummMDkxyLbX7o92gS7cKx9uf3Epdlh5yIeE3gLjh7-I=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 3763
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/ukf-eidAqZDDzZF5mp8e6x6gEC2S6S6csmeTUcaOOpJuwVFnXo3FpFXhI-_gePcHxYGXMvWbprZQnPOFDdY9KJSQcYpE8_HGcuM=s0
200 OK 32 kB URL GET HTTP/2 lh3.googleusercontent.com/ukf-eidAqZDDzZF5mp8e6x6gEC2S6S6csmeTUcaOOpJuwVFnXo3FpFXhI-_gePcHxYGXMvWbprZQnPOFDdY9KJSQcYpE8_HGcuM=s0
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=2, orientation=upper-left, copyright= ], baseline, precision 8, 473x361, components 3\012- data
Hash 86086a7646308984985ac403eb4f7768
9f3195f937693a202b5afee35218711adba2f82f
064cc0654141e3e6d13a728a1618c6449f4dc79cbbbcf79ac615438f80fec160
GET /ukf-eidAqZDDzZF5mp8e6x6gEC2S6S6csmeTUcaOOpJuwVFnXo3FpFXhI-_gePcHxYGXMvWbprZQnPOFDdY9KJSQcYpE8_HGcuM=s0 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 32291
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/N3ccxgGeXl-Z1skE4GEZ8r5r2byBSQWa1wt2M36RgIwZnC0IXsnm1kg51gELTtfjRHEqIk0YA4na0NHnjU1S7YuUk9f1mClM0EOK=w16
200 OK 4.8 kB URL GET HTTP/2 lh3.googleusercontent.com/N3ccxgGeXl-Z1skE4GEZ8r5r2byBSQWa1wt2M36RgIwZnC0IXsnm1kg51gELTtfjRHEqIk0YA4na0NHnjU1S7YuUk9f1mClM0EOK=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=600-00983790, software=Picasa, copyright=\251 Masterfile / Radius Images], baseline, precision 8, 16x16, components 3\012- data
Hash cc7c53ead4075c6710ef030131133dc8
ad969ad808ec6bffc161d554a9fb9665c001afdb
e5f85cee4937b5cb24d3e740735b3d8fcfafbef702eb9614cf39ade94282f44e
GET /N3ccxgGeXl-Z1skE4GEZ8r5r2byBSQWa1wt2M36RgIwZnC0IXsnm1kg51gELTtfjRHEqIk0YA4na0NHnjU1S7YuUk9f1mClM0EOK=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:54 GMT
server: fife
content-length: 4794
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/kMbrPOEwvBxzfhYfJgbpT2u1Mv4GMxHI0Q_qvLvAQXFH-5mCARtDEv1sA9E4V8HVvqI74dVZfSgiKZxMjl_8fe4dgpE2vW7KZUk=w230
200 OK 109 kB URL GET HTTP/2 lh3.googleusercontent.com/kMbrPOEwvBxzfhYfJgbpT2u1Mv4GMxHI0Q_qvLvAQXFH-5mCARtDEv1sA9E4V8HVvqI74dVZfSgiKZxMjl_8fe4dgpE2vW7KZUk=w230
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type PNG image data, 230 x 364, 8-bit/color RGBA, non-interlaced\012- data
Size 109 kB (109438 bytes)
Hash 2e04222456d648932f56f19fd720cd08
d816fb73de8e263eab38985c8ebae78a04a1d9c9
5fce0da73d199fdcf6ab0474fed995176538019f7eb8170264fa619ada7c3900
GET /kMbrPOEwvBxzfhYfJgbpT2u1Mv4GMxHI0Q_qvLvAQXFH-5mCARtDEv1sA9E4V8HVvqI74dVZfSgiKZxMjl_8fe4dgpE2vW7KZUk=w230 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
server: fife
content-length: 109438
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/player.module.js
200 OK 134 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/player.module.js
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Size 134 kB (133587 bytes)
Hash 02a26315018107dc1da706eba774cad7
f068f50ba55ca0c31181af8df0eab56b3afec61d
e0c5235dfecc82890a0f10aae5305cfc12ec52fd1a875fdf1510c8ecb80248c3
GET /p/4.25.17/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:56 GMT
age: 87914
x-served-by: cache-iad-kcgs7200027-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 28, 22
x-timer: S1698865617.828170,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 133587
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639880779-4df998e7b6391d42dab77b0bbb7738ca5ad722dff1e7dff99ae03e14699d9c78-d?mw=80&q=85
200 OK 1.4 kB URL GET HTTP/2 i.vimeocdn.com/video/1639880779-4df998e7b6391d42dab77b0bbb7738ca5ad722dff1e7dff99ae03e14699d9c78-d?mw=80&q=85
IP
Requested by https://player.vimeo.com/video/811340932?h=ce5afc73a8
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 7db219b9ea02b9ec9670003a4fa816e4
afa6337db7a279c2197420e0ce05e968d11857fc
ca582dfff71311a644807c17bc4f52f2fdb1fbf81166ebb438c6d7ba8f9f7a2b
GET /video/1639880779-4df998e7b6391d42dab77b0bbb7738ca5ad722dff1e7dff99ae03e14699d9c78-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 7db219b9ea02b9ec9670003a4fa816e4
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-cqbz
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:56 GMT
age: 651078
x-served-by: cache-dfw-kdal2120100-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 5920, 1
x-timer: S1698865617.824871,VS0,VE9
vary: Accept
content-length: 1356
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639870535-f61f7f83fd73ea00a72d0671b851b69a5918ec6c37a44547f12d9f300c52c288-d?mw=80&q=85
200 OK 1.5 kB URL GET HTTP/2 i.vimeocdn.com/video/1639870535-f61f7f83fd73ea00a72d0671b851b69a5918ec6c37a44547f12d9f300c52c288-d?mw=80&q=85
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash bd511313e300878344b4f7f20f86e0ef
9b03dc8c7827e58311925af108c84236300a7146
f3f0d07a83afb6d0e20de1e7d1426686847c187f95f842add160913f5ccfa3c9
GET /video/1639870535-f61f7f83fd73ea00a72d0671b851b69a5918ec6c37a44547f12d9f300c52c288-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: bd511313e300878344b4f7f20f86e0ef
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-jbrx
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:57 GMT
age: 2441331
x-served-by: cache-dfw-kdfw8210061-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 5248, 1
x-timer: S1698865617.354879,VS0,VE1
vary: Accept
content-length: 1450
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/vendor.module.js
200 OK 101 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/vendor.module.js
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65456)
Size 101 kB (100827 bytes)
Hash 2faddf7bb25a64e1101a2fd2e6ceb63b
4cbac7fbfe2668711e1811751912871d900dfde3
928fe731580150e943087ddac6d920d416233abff390b885fbd31816560ebb65
GET /p/4.25.17/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87916
x-served-by: cache-iad-kcgs7200084-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 30, 72488
x-timer: S1698865619.211690,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 100827
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/vendor.module.js
200 OK 101 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/vendor.module.js
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65456)
Size 101 kB (100827 bytes)
Hash 2faddf7bb25a64e1101a2fd2e6ceb63b
4cbac7fbfe2668711e1811751912871d900dfde3
928fe731580150e943087ddac6d920d416233abff390b885fbd31816560ebb65
GET /p/4.25.17/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87916
x-served-by: cache-iad-kcgs7200084-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 30, 72489
x-timer: S1698865619.214998,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 100827
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/vendor.module.js
200 OK 101 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/vendor.module.js
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65456)
Size 101 kB (100827 bytes)
Hash 2faddf7bb25a64e1101a2fd2e6ceb63b
4cbac7fbfe2668711e1811751912871d900dfde3
928fe731580150e943087ddac6d920d416233abff390b885fbd31816560ebb65
GET /p/4.25.17/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87916
x-served-by: cache-iad-kcgs7200084-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 30, 72490
x-timer: S1698865619.260456,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 100827
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/vendor.module.js
200 OK 101 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/vendor.module.js
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65456)
Size 101 kB (100827 bytes)
Hash 2faddf7bb25a64e1101a2fd2e6ceb63b
4cbac7fbfe2668711e1811751912871d900dfde3
928fe731580150e943087ddac6d920d416233abff390b885fbd31816560ebb65
GET /p/4.25.17/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87916
x-served-by: cache-iad-kcgs7200084-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 30, 72491
x-timer: S1698865619.260822,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 100827
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/vendor.module.js
200 OK 101 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/vendor.module.js
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65456)
Size 101 kB (100827 bytes)
Hash 2faddf7bb25a64e1101a2fd2e6ceb63b
4cbac7fbfe2668711e1811751912871d900dfde3
928fe731580150e943087ddac6d920d416233abff390b885fbd31816560ebb65
GET /p/4.25.17/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87916
x-served-by: cache-iad-kcgs7200084-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 30, 72492
x-timer: S1698865619.289666,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 100827
X-Firefox-Spdy: h2
prod.cbstatic.net/dist/assets/logo-tab-two-tone-en.png
200 OK 4.3 kB URL GET HTTP/2 prod.cbstatic.net/dist/assets/logo-tab-two-tone-en.png
IP
Requested by https://slimcrystal.com/start
Certificate IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type PNG image data, 321 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash c06ae1ecaaf7e0610c68af117658a7e0
337cc86d38734fd76333c063366ec36e7a7d343a
2f4d0823359307bdc2fbcc62d1004b361b02cc8ae5d6cb75f314658827ee1eeb
GET /dist/assets/logo-tab-two-tone-en.png HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 4341
date: Wed, 01 Nov 2023 19:07:00 GMT
last-modified: Mon, 21 Dec 2020 21:57:36 GMT
x-amz-version-id: 65GBUS1AcRJNN3GRB3Nf3yY51OsdERt0
etag: "c06ae1ecaaf7e0610c68af117658a7e0"
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BHivfM-vf58db7rB2wtpfoQ4enx3rE0Hd9lE_vpkpzYurDVj5j3j8w==
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/css/player.css
200 OK 22 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/css/player.css
IP
Requested by https://player.vimeo.com/video/811341012?h=0d30493fa3
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65494)
Hash 983c08451ac8003bd9786cbc02fc0241
39f66ca378d6c97ab451d93977abf0858b0d3e65
adb193532043b470eaeb11c6e234de3abc4d43a2b5d62e8aa250815814f373f2
GET /p/4.25.17/css/player.css HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87917
x-served-by: cache-iad-kiad7000134-IAD, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 52, 93036
x-timer: S1698865619.350241,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 22243
X-Firefox-Spdy: h2
prod.cbstatic.net/dist/assets/logo-header-two-tone-en.png
200 OK 3.5 kB URL GET HTTP/2 prod.cbstatic.net/dist/assets/logo-header-two-tone-en.png
IP
Requested by https://slimcrystal.com/start
Certificate IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type PNG image data, 472 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 47cdefc96f75be3d978d4b444737b00e
c9d8540c17ed48b72be610bb5795120e4d560d6f
84986c117f6f9418eff2f7ce5e55940671f178542c58092c05ef539ebd4da308
GET /dist/assets/logo-header-two-tone-en.png HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 3472
date: Wed, 01 Nov 2023 19:07:00 GMT
last-modified: Mon, 21 Dec 2020 21:57:35 GMT
x-amz-version-id: rgVoO.sKTwEpJN65bYI.UT4E8UVMZSpC
etag: "47cdefc96f75be3d978d4b444737b00e"
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lf1dTVCxsqtcmnBQTBbtl2qYtuJTrB3j_8RM_zA9CZZuEoiGjFePdQ==
X-Firefox-Spdy: h2
prod.cbstatic.net/dist/i18n/app-strings-en.json
200 OK 9 B URL GET HTTP/2 prod.cbstatic.net/dist/i18n/app-strings-en.json
IP
Requested by https://slimcrystal.com/start
Certificate IssuerAmazon
Subject*.cbstatic.net
FingerprintF8:81:4B:D2:24:61:E4:3E:E9:83:B4:81:64:D4:F0:F7:E4:96:CA:B2
ValidityWed, 19 Jul 2023 00:00:00 GMT - Fri, 16 Aug 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash cdfca8b09e61ae7324e48f01984c9b34
874b413675711909229ca228efea613383d6a9a4
00c89e0cd4c41144418e06885bb87e962fdb17567bf55adccb1678a1f6beca4c
GET /dist/i18n/app-strings-en.json HTTP/1.1
Host: prod.cbstatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 9
date: Wed, 01 Nov 2023 19:07:00 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 21 Dec 2020 21:57:36 GMT
x-amz-version-id: ZlnvsWVay.azLO76UGrGFfzKmZRJT9PH
etag: "cdfca8b09e61ae7324e48f01984c9b34"
server: AmazonS3
vary: Origin
x-cache: Miss from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lf3N4wclf2ieO8VcWokqLgtYsBEvtiUmWIdEzQ7yjG845K9a08JLDQ==
X-Firefox-Spdy: h2
api.leadpages.io/analytics/v1/observations/capture?version=1.8.6&correlateBy=BAjT2x2j8bLUGExQ3K2AEw&origin=center-js&kind=timer,timer,counter,timer&label=load-center,load-identify,ident-new,send-events&value=286,149,1,597
200 OK 35 B URL GET HTTP/1.1 api.leadpages.io/analytics/v1/observations/capture?version=1.8.6&correlateBy=BAjT2x2j8bLUGExQ3K2AEw&origin=center-js&kind=timer,timer,counter,timer&label=load-center,load-identify,ident-new,send-events&value=286,149,1,597
IP
Requested by https://slimcrystal.com/start
Certificate IssuerLet's Encrypt
Subject*.leadpages.io
Fingerprint82:04:EC:6A:8D:9D:D8:E2:90:A1:2D:96:68:08:FF:D4:1D:3D:72:A8
ValidityThu, 28 Sep 2023 15:13:30 GMT - Wed, 27 Dec 2023 15:13:29 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /analytics/v1/observations/capture?version=1.8.6&correlateBy=BAjT2x2j8bLUGExQ3K2AEw&origin=center-js&kind=timer,timer,counter,timer&label=load-center,load-identify,ident-new,send-events&value=286,149,1,597 HTTP/1.1
Host: api.leadpages.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://slimcrystal.com
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
x-request-id: 04c9dmjnt4e1k1n5nbfg
access-control-expose-headers: LP-Security-Token
access-control-allow-credentials: true
Server: Stargate
Date: Wed, 01 Nov 2023 19:06:59 GMT
access-control-allow-origin: https://slimcrystal.com
access-control-max-age: 600
X-Forwarded-For: 91.90.42.154
f.vimeocdn.com/p/4.25.17/js/player.module.js
200 OK 134 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/player.module.js
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type Unicode text, UTF-8 text, with very long lines (65444)
Size 134 kB (133587 bytes)
Hash 02a26315018107dc1da706eba774cad7
f068f50ba55ca0c31181af8df0eab56b3afec61d
e0c5235dfecc82890a0f10aae5305cfc12ec52fd1a875fdf1510c8ecb80248c3
GET /p/4.25.17/js/player.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 87917
x-served-by: cache-iad-kcgs7200027-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 28, 24
x-timer: S1698865619.413090,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 133587
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639874419-08327ee09d4cfbc3cd93eebe9f6d7bc36eebb87fb58f7e591bf259f35024ead2-d?mw=80&q=85
200 OK 1.1 kB URL GET HTTP/2 i.vimeocdn.com/video/1639874419-08327ee09d4cfbc3cd93eebe9f6d7bc36eebb87fb58f7e591bf259f35024ead2-d?mw=80&q=85
IP
Requested by https://player.vimeo.com/video/811341012?h=0d30493fa3
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 1760d49aba633241b454ba447f646ffe
4a34692161c06534fb61e7e432f1f70bdd44fd2d
a1856cea298b5c7687ba2395e81fd623e263b6c62f1b85c9b55e3c1aeb23e5a8
GET /video/1639874419-08327ee09d4cfbc3cd93eebe9f6d7bc36eebb87fb58f7e591bf259f35024ead2-d?mw=80&q=85 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 1760d49aba633241b454ba447f646ffe
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-353k
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 1769871
x-served-by: cache-dfw-kdfw8210027-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1258, 1
x-timer: S1698865619.415109,VS0,VE2
vary: Accept
content-length: 1053
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639861487-fe26c7b4ea831ced6348268e5519bd33ebce65d55d7c74725602b170b393c3e2-d?mw=900&mh=506
200 OK 18 kB URL GET HTTP/2 i.vimeocdn.com/video/1639861487-fe26c7b4ea831ced6348268e5519bd33ebce65d55d7c74725602b170b393c3e2-d?mw=900&mh=506
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 80a896b42471afbab5dc72df2ddaddf5
c6d970d74e9634622def91cc5a85ad806ae7dc5b
3ac1a83c71888963a4085fbffd0457354659b9fdc1e0d357a45ed979ad53a335
GET /video/1639861487-fe26c7b4ea831ced6348268e5519bd33ebce65d55d7c74725602b170b393c3e2-d?mw=900&mh=506 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 80a896b42471afbab5dc72df2ddaddf5
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-t123
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 1755764
x-served-by: cache-dfw-kdal2120067-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1083, 1
x-timer: S1698865619.465401,VS0,VE2
vary: Accept
content-length: 17904
X-Firefox-Spdy: h2
seal-boise.bbb.org/seals/blue-seal-153-100-clickbank-5004291.png
200 OK 4.3 kB URL GET HTTP/2 seal-boise.bbb.org/seals/blue-seal-153-100-clickbank-5004291.png
IP
Requested by https://slimcrystal.com/start
Certificate IssuerDigiCert Inc
Subject*.bbb.org
Fingerprint8F:36:F5:1E:22:A2:92:85:19:AC:63:3C:02:83:FE:60:8C:70:B5:FD
ValidityWed, 26 Apr 2023 00:00:00 GMT - Thu, 25 Apr 2024 23:59:59 GMT
File type PNG image data, 153 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 46b6fd2c200f981763f4a426f79134e6
e6c39e4791c9efcdadfac14c9482649dfe9237df
fb2c8beb4f53ff11e7f818d72943ed8e111d8104779fc79c46bc5894d3b41a14
GET /seals/blue-seal-153-100-clickbank-5004291.png HTTP/1.1
Host: seal-boise.bbb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: keycdn-engine
date: Wed, 01 Nov 2023 19:06:59 GMT
content-type: image/png
content-length: 4348
cache-control: max-age=14400
expires: Wed, 01 Nov 2023 23:06:59 GMT
last-modified: Wed, 01 Nov 2023 12:45:54 GMT
x-aspnet-version: 4.0.30319
x-robots-tag: noindex
x-powered-by: ASP.NET
x-cache: HIT
x-shield: active
x-edge-location: noos
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
lh3.googleusercontent.com/K7kinBes30FDzGamXV_9-gmSOpxdJ5s3h38KJ6un1uulCU7Fdtwv2imdYUlsjppnenNik6vEU2goEI-StZSBe8_FomSurESudBI=w416
200 OK 51 kB URL GET HTTP/3 lh3.googleusercontent.com/K7kinBes30FDzGamXV_9-gmSOpxdJ5s3h38KJ6un1uulCU7Fdtwv2imdYUlsjppnenNik6vEU2goEI-StZSBe8_FomSurESudBI=w416
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 416x521, components 3\012- data
Hash d4aa2077f5650624c4bd376a5c0d0d09
70eb55026b0fe62180fcaf54f2fd6c6dab437c1a
a7ba15232cd443e976ede3f2f53d959a961a3230cfc8565f338bb70ba57ec0fb
GET /K7kinBes30FDzGamXV_9-gmSOpxdJ5s3h38KJ6un1uulCU7Fdtwv2imdYUlsjppnenNik6vEU2goEI-StZSBe8_FomSurESudBI=w416 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:59 GMT
server: fife
content-length: 51423
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.vimeocdn.com/video/1639877389-18b478404bc2747b2c5d16b86645e7c723c8b15c65a3e3fa86d0ba3dee245194-d?mw=900&mh=506
200 OK 11 kB URL GET HTTP/2 i.vimeocdn.com/video/1639877389-18b478404bc2747b2c5d16b86645e7c723c8b15c65a3e3fa86d0ba3dee245194-d?mw=900&mh=506
IP
Requested by https://player.vimeo.com/video/811340978?h=bf52a5b496
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 953a5444bd0aaf078844c8671540d2a7
307680450eb4314f0360a781929d3005b17c871f
a824a50da05d3b873fb503d2983dce0694c1c84c6518d5a1ba20edc5b14feb92
GET /video/1639877389-18b478404bc2747b2c5d16b86645e7c723c8b15c65a3e3fa86d0ba3dee245194-d?mw=900&mh=506 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 953a5444bd0aaf078844c8671540d2a7
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-us-central1-dvrb
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 1218352
x-served-by: cache-dfw-kdfw8210086-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 248, 1
x-timer: S1698865620.602670,VS0,VE3
vary: Accept
content-length: 11268
X-Firefox-Spdy: h2
lh3.googleusercontent.com/JjvqHjEulJg6nccPdkwGmjFWBUZdynZXiSyp7qgkCod56iBRrOWjqKviji-5SdtVG-vtJ8pHvH9M6ROfzp7K1ZHjNIDvQefqDIs=w416
200 OK 49 kB URL GET HTTP/3 lh3.googleusercontent.com/JjvqHjEulJg6nccPdkwGmjFWBUZdynZXiSyp7qgkCod56iBRrOWjqKviji-5SdtVG-vtJ8pHvH9M6ROfzp7K1ZHjNIDvQefqDIs=w416
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 416x521, components 3\012- data
Hash 1ad2b3319350b9703c00b69053b650ee
98f3d504694d686a5a0dc6968d2388ac281bace0
f3ba7ab38cfed23e4729312e013067d143e36f511e05cf7dcb808786bdc52cfe
GET /JjvqHjEulJg6nccPdkwGmjFWBUZdynZXiSyp7qgkCod56iBRrOWjqKviji-5SdtVG-vtJ8pHvH9M6ROfzp7K1ZHjNIDvQefqDIs=w416 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 02 Nov 2023 19:06:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Wed, 01 Nov 2023 19:06:59 GMT
server: fife
content-length: 49330
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL GET HTTP/2 www.google.com/pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint13:D2:E3:B0:25:78:80:D7:35:78:09:81:0D:21:CE:31:CB:EF:DA:75
ValidityMon, 09 Oct 2023 08:11:26 GMT - Mon, 01 Jan 2024 08:11:25 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Nov 2023 19:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL GET HTTP/2 www.google.com/pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint13:D2:E3:B0:25:78:80:D7:35:78:09:81:0D:21:CE:31:CB:EF:DA:75
ValidityMon, 09 Oct 2023 08:11:26 GMT - Mon, 01 Jan 2024 08:11:25 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Nov 2023 19:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
200 OK 63 B URL GET HTTP/2 www.google.no/pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintC9:D2:53:22:39:42:94:46:74:AD:BB:1A:B2:BE:92:9B:6B:B6:8F:3D
ValidityMon, 09 Oct 2023 08:14:07 GMT - Mon, 01 Jan 2024 08:14:06 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/645944073/?random=1698865615689&cv=11&fst=1698865615689&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=gfV9CJm_q4MDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://slimcrystal.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Nov 2023 19:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
200 OK 63 B URL GET HTTP/2 www.google.no/pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintC9:D2:53:22:39:42:94:46:74:AD:BB:1A:B2:BE:92:9B:6B:B6:8F:3D
ValidityMon, 09 Oct 2023 08:14:07 GMT - Mon, 01 Jan 2024 08:14:06 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/645944073/?random=1698865615696&cv=11&fst=1698865615696&bg=ffffff&guid=ON&async=1>m=45be3au1v874086582&gcd=11l1l1l1l1&u_w=1280&u_h=1024&url=https%3A%2F%2Fslimcrystal.com%2Fstart&label=lF0sCKvH8IMDEImmgbQC&hn=www.google.com&frm=0&tiba=SLIMCRYSTAL%20-%20The%20World%27s%20Only%20Slimming%20Crystal%20Water%20Bottles!>m_ee=1&auid=927371221.1698865616&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://slimcrystal.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 01 Nov 2023 19:06:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639861789-979a72a9133f2265e81822a6c9805a1e13c768e8ddf7a3d95bfc201ede2a39d1-d?mw=900&mh=506
200 OK 16 kB URL GET HTTP/2 i.vimeocdn.com/video/1639861789-979a72a9133f2265e81822a6c9805a1e13c768e8ddf7a3d95bfc201ede2a39d1-d?mw=900&mh=506
IP
Requested by https://player.vimeo.com/video/811338299?h=e9a6bf7a2a
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 4b1683ecdfbc190376f74a20d198c75b
9cb72ce371c2154a95ed7ee2dc7d7f949f976b83
e9b075dc041ace11b5a4a0964181c403900ab0d57f5f42862a6e18fb84610c52
GET /video/1639861789-979a72a9133f2265e81822a6c9805a1e13c768e8ddf7a3d95bfc201ede2a39d1-d?mw=900&mh=506 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 4b1683ecdfbc190376f74a20d198c75b
x-viewmaster-lossless-format: automatic
cache-control: public, max-age=2592000
x-backend-server: varnish
via: vvarnish, 1.1 google, 1.1 varnish, 1.1 varnish
viewmaster-server: viewmaster-glb-prod
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:06:59 GMT
age: 2341892
x-served-by: cache-dfw-kdfw8210077-DFW, cache-bma1653-BMA
x-cache: HIT, HIT
x-cache-hits: 811, 1
x-timer: S1698865620.923623,VS0,VE1
vary: Accept
content-length: 15539
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639880779-4df998e7b6391d42dab77b0bbb7738ca5ad722dff1e7dff99ae03e14699d9c78-d?mw=900&mh=506
200 OK 34 kB URL GET HTTP/2 i.vimeocdn.com/video/1639880779-4df998e7b6391d42dab77b0bbb7738ca5ad722dff1e7dff99ae03e14699d9c78-d?mw=900&mh=506
IP
Requested by https://player.vimeo.com/video/811340932?h=ce5afc73a8
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 4e373906b877f28e295d72deab849ceb
a8cbeb81812ee3155d7cc2c1aa6ba484b674eebc
2602665c4a8b75e41913738053b8b3024968d01cca22893c22e218a27535c24e
GET /video/1639880779-4df998e7b6391d42dab77b0bbb7738ca5ad722dff1e7dff99ae03e14699d9c78-d?mw=900&mh=506 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 4e373906b877f28e295d72deab849ceb
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-glb-prod
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:07:00 GMT
age: 609570
x-served-by: cache-dfw-kdfw8210052-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 245, 1
x-timer: S1698865620.160325,VS0,VE2
vary: Accept
content-length: 33580
X-Firefox-Spdy: h2
f.vimeocdn.com/p/4.25.17/js/vendor.module.js
200 OK 101 kB URL GET HTTP/2 f.vimeocdn.com/p/4.25.17/js/vendor.module.js
IP
Requested by https://player.vimeo.com/video/811339366?h=d4a188601c
Certificate IssuerGlobalSign nv-sa
Subject*.vimeocdn.com
FingerprintBC:0E:AF:AE:76:C2:F1:A2:D8:14:DA:93:9B:BD:E4:4A:95:1D:41:5F
ValiditySat, 18 Feb 2023 22:45:19 GMT - Thu, 21 Mar 2024 22:45:18 GMT
File type ASCII text, with very long lines (65456)
Size 101 kB (100827 bytes)
Hash 2faddf7bb25a64e1101a2fd2e6ceb63b
4cbac7fbfe2668711e1811751912871d900dfde3
928fe731580150e943087ddac6d920d416233abff390b885fbd31816560ebb65
GET /p/4.25.17/js/vendor.module.js HTTP/1.1
Host: f.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://player.vimeo.com
DNT: 1
Connection: keep-alive
Referer: https://f.vimeocdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-encoding: br
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:07:00 GMT
age: 87917
x-served-by: cache-iad-kcgs7200084-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 30, 72494
x-timer: S1698865620.162521,VS0,VE0
vary: Accept-Encoding,x-http-method-override
cache-control: max-age=1209600
access-control-allow-origin: *
content-length: 100827
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639870535-f61f7f83fd73ea00a72d0671b851b69a5918ec6c37a44547f12d9f300c52c288-d?mw=900&mh=416
200 OK 37 kB URL GET HTTP/2 i.vimeocdn.com/video/1639870535-f61f7f83fd73ea00a72d0671b851b69a5918ec6c37a44547f12d9f300c52c288-d?mw=900&mh=416
IP
Requested by https://player.vimeo.com/video/811340891?h=4ac40705eb
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash 21b597b7f96089683eed55e9a24436ae
366ed3ef066c331cec5056fe9cde7b8019123ae6
82f869371ffa4dd3ea31893d4c5a8cb120df415958d99a516b6959c45d169885
GET /video/1639870535-f61f7f83fd73ea00a72d0671b851b69a5918ec6c37a44547f12d9f300c52c288-d?mw=900&mh=416 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: 21b597b7f96089683eed55e9a24436ae
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-glb-prod
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:07:00 GMT
age: 1909852
x-served-by: cache-dfw-kdfw8210087-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 1115, 1
x-timer: S1698865620.296440,VS0,VE2
vary: Accept
content-length: 36816
X-Firefox-Spdy: h2
i.vimeocdn.com/video/1639874419-08327ee09d4cfbc3cd93eebe9f6d7bc36eebb87fb58f7e591bf259f35024ead2-d?mw=900&mh=506
200 OK 61 kB URL GET HTTP/2 i.vimeocdn.com/video/1639874419-08327ee09d4cfbc3cd93eebe9f6d7bc36eebb87fb58f7e591bf259f35024ead2-d?mw=900&mh=506
IP
Requested by https://player.vimeo.com/video/811341012?h=0d30493fa3
Certificate IssuerGlobalSign nv-sa
Subject*.vimeo.com
FingerprintB1:D1:17:3D:08:07:A6:93:99:18:AC:B6:E9:C5:BC:F9:01:9F:32:9F
ValidityThu, 19 Oct 2023 18:39:17 GMT - Tue, 19 Nov 2024 18:39:16 GMT
File type ISO Media, AVIF Image\012- data
Hash e0e8934c06a6413d9dcbc6b8888dc27e
e76b8166ba465b77832167cac3fc2eb3a92e85de
27fea65c7d97243aaa567e73969c7d2f699cb976a3144ae036d0299d1e754df1
GET /video/1639874419-08327ee09d4cfbc3cd93eebe9f6d7bc36eebb87fb58f7e591bf259f35024ead2-d?mw=900&mh=506 HTTP/1.1
Host: i.vimeocdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://player.vimeo.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/avif
etag: e0e8934c06a6413d9dcbc6b8888dc27e
x-viewmaster-lossless-format: automatic
viewmaster-server: viewmaster-glb-prod
cache-control: public, max-age=2592000
via: vvarnish, 1.1 varnish, 1.1 varnish
x-backend-server: varnish
access-control-allow-origin: *
access-control-expose-headers: X-Viewmaster-Status
access-control-max-age: 86400
accept-ranges: bytes
date: Wed, 01 Nov 2023 19:07:00 GMT
age: 1421692
x-served-by: cache-dfw-kdal2120133-DFW, cache-bma1653-BMA
x-cache: miss, HIT, HIT
x-cache-hits: 301, 1
x-timer: S1698865621.590968,VS0,VE2
vary: Accept
content-length: 60916
X-Firefox-Spdy: h2
api.leadpages.io/analytics/v1/observations/capture?version=1.7.13&origin=page-speed&kind=timer,timer,timer,timer,timer,timer,timer,timer,timer,timer&label=domain-lookup,connect,request,ttfb,response,loading,interactive,content-loaded,complete,load&value=0,0,232,234,864,426,1571,1673,8262,8263
200 OK 35 B URL GET HTTP/1.1 api.leadpages.io/analytics/v1/observations/capture?version=1.7.13&origin=page-speed&kind=timer,timer,timer,timer,timer,timer,timer,timer,timer,timer&label=domain-lookup,connect,request,ttfb,response,loading,interactive,content-loaded,complete,load&value=0,0,232,234,864,426,1571,1673,8262,8263
IP
Requested by https://slimcrystal.com/start
Certificate IssuerLet's Encrypt
Subject*.leadpages.io
Fingerprint82:04:EC:6A:8D:9D:D8:E2:90:A1:2D:96:68:08:FF:D4:1D:3D:72:A8
ValidityThu, 28 Sep 2023 15:13:30 GMT - Wed, 27 Dec 2023 15:13:29 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash c2196de8ba412c60c22ab491af7b1409
5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
GET /analytics/v1/observations/capture?version=1.7.13&origin=page-speed&kind=timer,timer,timer,timer,timer,timer,timer,timer,timer,timer&label=domain-lookup,connect,request,ttfb,response,loading,interactive,content-loaded,complete,load&value=0,0,232,234,864,426,1571,1673,8262,8263 HTTP/1.1
Host: api.leadpages.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
x-request-id: 04c9dmv5ptsug18pvdg0
access-control-expose-headers: LP-Security-Token
access-control-allow-credentials: true
Server: Stargate
Date: Wed, 01 Nov 2023 19:07:00 GMT
X-Forwarded-For: 91.90.42.154
aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
5.8 kB URL aus5.mozilla.org/update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml
IP
File type gzip compressed data, max speed, from Unix\012- data
Hash ab05e7f1db760b79d32488a2d7401e88
a1857afa8ce0a202c349025cdf5b77f6e5bd00a4
c8cc3005f86ab3e6ee43752c31056f9fa66ee9ada1b6535ac95b88afd2586af9
GET /update/3/GMP/111.0a1/20230218104546/Linux_x86_64-gcc3/null/default/Linux%205.15.0-76-generic%20(GTK%203.24.34%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 01 Nov 2023 19:07:09 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
rule-id: 17856
rule-data-version: 3
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2023-12-08-22-56-18.chain; p384ecdsa=v7xt7dhUTAWtAuOBZed6ABYZzLDnEvvZtlfyEiEWv7Giw2iuR880Vjv9RTLNT2j3LRNxzP0I_6ox17RZVOTw71xJKjYDA0EXfjCXOaquph4xZ-LpOxOKbw5uqvTO0CUi
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
512 kB URL ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip
IP
File type Zip archive data, at least v2.0 to extract, compression method=deflate\012- data
Size 512 kB (511815 bytes)
Hash 152eda253e242e18443ef3282495bc7c
ff0fa85565f21ec4931baad4573b4c0bd08c4019
8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48
GET /openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip HTTP/1.1
Host: ciscobinary.openh264.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Last-Modified: Wed, 07 Jun 2023 18:17:03 GMT
ETag: 152eda253e242e18443ef3282495bc7c
Content-Length: 511815
Accept-Ranges: bytes
X-Timestamp: 1686161822.36709
Content-Type: application/zip
X-Trans-Id: tx850f8ba461544848b47ef-006519bffadfw1
Cache-Control: public, max-age=192401
Expires: Sat, 04 Nov 2023 00:33:50 GMT
Date: Wed, 01 Nov 2023 19:07:09 GMT
Connection: keep-alive
200 OK 392 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectslimcrystal.com
Fingerprint1F:E3:0E:03:3C:8E:18:56:2C:B0:9A:3C:21:9C:26:16:74:1A:9F:11
ValidityThu, 28 Sep 2023 17:41:54 GMT - Wed, 27 Dec 2023 17:41:53 GMT
Size 392 kB (392017 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /start HTTP/1.1
Host: slimcrystal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 01 Nov 2023 19:06:52 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=0
expires: Wed, 01 Nov 2023 19:06:52 GMT
last-modified: Wed, 01 Nov 2023 18:48:51 GMT
vary: Accept-Encoding,Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DJ%2BZgFBwJJbdEs1qB5lQS6hgaPNPQIA%2BkG4MfhQn9iZWSQmvrJoMRxQJAJCrOVOJAYPEDgRHBHssEd%2BxxSyLpzbU6TF97Ogyw0MIyB7L8MhDaNExDwFh7E4fWF%2BSW1W4ZWw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81f66addee2ab505-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
slimcrystal.com/?op=start
302 Found 392 kB URL User Request GET HTTP/2 slimcrystal.com/?op=start
IP
Certificate IssuerGoogle Trust Services LLC
Subjectslimcrystal.com
Fingerprint1F:E3:0E:03:3C:8E:18:56:2C:B0:9A:3C:21:9C:26:16:74:1A:9F:11
ValidityThu, 28 Sep 2023 17:41:54 GMT - Wed, 27 Dec 2023 17:41:53 GMT
Size 392 kB (392017 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?op=start HTTP/1.1
Host: slimcrystal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 01 Nov 2023 19:06:52 GMT
content-type: text/html; charset=UTF-8
location: start
cache-control: no-cache, no-store, must-revalidate, max-age=0
expires: Wed, 01 Nov 2023 19:06:52 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bmscdjGYOO%2Bb%2F%2F4nbzmxQ5ZSSzcHceRa4BGwh56nNReY8YlNH7oFRy6ccZqRIl36tq69qzJITvsnzLZz1gmxq17ihd0BCN9fV28jjFJ0dLSSxe7lE3kTTVd5zX%2F8w93T02s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81f66adb2afcb505-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.ssmbtrk.com/scripts/sdk/everflow.js
200 OK 61 kB URL GET HTTP/2 www.ssmbtrk.com/scripts/sdk/everflow.js
IP
Requested by https://slimcrystal.com/start
Certificate IssuerStarfield Technologies, Inc.
Subjectloguq.com
Fingerprint2C:84:84:98:F6:F5:25:B3:77:51:F8:D6:46:65:C7:7F:85:E6:8D:59
ValidityWed, 27 Sep 2023 16:07:29 GMT - Fri, 19 Jan 2024 16:03:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /scripts/sdk/everflow.js HTTP/1.1
Host: www.ssmbtrk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 01 Nov 2023 19:06:53 GMT
content-type: text/javascript
accept-ch: Sec-Ch-Ua-Platform-Version
cache-control: max-age=14400
vary: Origin
x-eflow-request-id: 995beebe-978e-4222-bd24-0070f8b7bfda
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
slimcrystal.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 1.2 kB URL GET HTTP/3 slimcrystal.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subjectslimcrystal.com
Fingerprint1F:E3:0E:03:3C:8E:18:56:2C:B0:9A:3C:21:9C:26:16:74:1A:9F:11
ValidityThu, 28 Sep 2023 17:41:54 GMT - Wed, 27 Dec 2023 17:41:53 GMT
File type HTML document, ASCII text, with very long lines (1271), with no line terminators
Hash 40d981045a7516cdadd00e8dccc9c58d
8b8d9a48c6b9d2fba596034ef5db3dd0f2f781c3
71c7d5fc630ff38080f71945be1e8b0c43140d8c25338056b752495e18739c0c
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: slimcrystal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/start
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 01 Nov 2023 19:06:53 GMT
content-type: application/javascript
last-modified: Fri, 27 Oct 2023 14:30:26 GMT
etag: W/"653bc982-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=whxauGJ0cQ4Hx%2FkpAAbL8l5SdaQaQJ664bheeR6mU13qB7GtDtuPuoc8izslobc2oz0bS51YClydsDUiIcoSOTMSG6UlyW7Qgq2U7gxYKAz4D%2FVhOFGov7nLv2Ewmf04yvw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81f66ae3f9cf56bd-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 03 Nov 2023 19:06:53 GMT
cache-control: max-age=172800, public
content-encoding: gzip
lh3.googleusercontent.com/FEeaGs38TnSkjB6dGpOT9FXZm4ayc25_W1AOHgdBk155iA2QUZacHnTMoL0Zvu-yLoA80WksstGen0IrHi2hjolcavnKEyZVtIc=w16
200 OK 504 B URL GET HTTP/2 lh3.googleusercontent.com/FEeaGs38TnSkjB6dGpOT9FXZm4ayc25_W1AOHgdBk155iA2QUZacHnTMoL0Zvu-yLoA80WksstGen0IrHi2hjolcavnKEyZVtIc=w16
IP
Requested by https://slimcrystal.com/start
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint5E:EF:C0:E1:67:C9:67:A3:95:36:92:94:58:17:E4:59:B6:C9:8E:E5
ValidityMon, 09 Oct 2023 08:11:06 GMT - Mon, 01 Jan 2024 08:11:05 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 16x18, components 3\012- data
Hash 60ff38651bc7b2a533819d5b87584725
21b40cf24e59fbc7e087c2cf6eb43ca436917cd5
0df220e5e54e2d73c09138e40dc673550b6b0c42134de49023ee1123702229d1
GET /FEeaGs38TnSkjB6dGpOT9FXZm4ayc25_W1AOHgdBk155iA2QUZacHnTMoL0Zvu-yLoA80WksstGen0IrHi2hjolcavnKEyZVtIc=w16 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://slimcrystal.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 504
x-xss-protection: 0
date: Wed, 01 Nov 2023 19:06:54 GMT
expires: Thu, 02 Nov 2023 19:06:54 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1"
content-type: image/jpeg
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
18.184.38.55
172.66.43.113
188.114.96.1
2.18.121.73
104.17.25.14
82.102.27.18
151.101.246.109