| www.zjuonei.top/ |  104.17.233.29 | 301 Moved Permanently | 0 B |
IP104.17.233.29:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.zjuonei.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 13 Dec 2022 02:42:19 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 13 Dec 2022 03:42:19 GMT
Location: https://www.zjuonei.top/
Set-Cookie: __cf_bm=R4EmEsJrhhUqn..lhrBcSCxMU1WxBsCTvTa4sfdoIuw-1670899339-0-AYqSYXZlrCgHMJUg9yGBWM9lIWoTdd5dZZ8qiH0luycYPDGadW9tTm/1rTcAllMfSvSFEmGBsB90DOXwrXSZRio=; path=/; expires=Tue, 13-Dec-22 03:12:19 GMT; domain=.www.zjuonei.top; HttpOnly; SameSite=None
Server-Timing: cf-q-config;dur=7.0000096457079e-06
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 778b58896b960b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash358212db02ecc7c1fa088906bd2dba14 091a0688da9de609d97349215ba9e452dfc346a4 7486e512e4de8172ac07f07f47da3a96dd3ac7cb054b335f3e4929261440e672
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7486E512E4DE8172AC07F07F47DA3A96DD3AC7CB054B335F3E4929261440E672"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4953
Expires: Tue, 13 Dec 2022 04:04:52 GMT
Date: Tue, 13 Dec 2022 02:42:19 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashb642ec5702fb818c5d1c67168cc68fdb 015146489a8e7fcb4ba0ba74cfe757a072705f93 4846d047a23903856bd113d02639ce7e08a1e40030151d302295b2d12df98ffc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4846D047A23903856BD113D02639CE7E08A1E40030151D302295B2D12DF98FFC"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3999
Expires: Tue, 13 Dec 2022 03:48:58 GMT
Date: Tue, 13 Dec 2022 02:42:19 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashb44c4b5daa307a355e7bab1c83c1ca82 dbd14cd873f1dd4502f277b3f51cb7bc8da0c080 fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Alert, Retry-After, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 13 Dec 2022 02:33:44 GMT
content-type: application/json
age: 515
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdbd022fec0a71226daaf29b7563a8896 c37d14dc7b3849a4bb815fa325fb5e70fae54039 22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5176
Expires: Tue, 13 Dec 2022 04:08:35 GMT
Date: Tue, 13 Dec 2022 02:42:19 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash53341dea33f4f3d9b4966f80589f429a 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UcrBGTNWUas2GViXuIsshMN2Iw9y3O7iKI4+0FT8vwyagXOPOwFKZgNOxvA3FUMlRrWbw1agxl0=
x-amz-request-id: A4PT3EJSF1CZM1QK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 13 Dec 2022 01:49:51 GMT
age: 3148
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Dec 2022 02:42:20 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashaed282d3bf42749a4c805327ef9bc930 84219b6c4fe51245dd69ca79b9a4f958a47ace22 fb21203997f21c56333dd1eb84f21e9cedac0417c58271f6efffa1b35ef5e6ee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:20 GMT
Server: ECS (amb/6B7E)
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hashaed282d3bf42749a4c805327ef9bc930 84219b6c4fe51245dd69ca79b9a4f958a47ace22 fb21203997f21c56333dd1eb84f21e9cedac0417c58271f6efffa1b35ef5e6ee
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:20 GMT
Last-Modified: Tue, 13 Dec 2022 02:42:20 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 279
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 13 Dec 2022 02:33:17 GMT
age: 543
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashee19f96e42a0eca99d00c8d91f977c35 3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9 6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1787
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:20 GMT
Last-Modified: Tue, 13 Dec 2022 02:12:33 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 278 B |
IP93.184.220.29:0
Hasha24dccabe7ae6f125d04cee1e9a4fb81 824aeab551084261061f4ca8f45def7958d0f56c 01c1d03aca0dd7460581c59a8abf8c6b01f0f1f20107b60c985a5d7a11a83a8b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 647
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:20 GMT
Last-Modified: Tue, 13 Dec 2022 02:31:33 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 278
|
|
| ocsp.sca1b.amazontrust.com/ | 143.204.42.88 | 200 OK | 471 B |
URL HTTP/1.1ocsp.sca1b.amazontrust.com/ IP143.204.42.88:0
Hash3d9b7eafa0453a7a167deb2570907393 0c305ed41f85649a84272412fb526b1ffa59cb5c ab732449e2fbb30bac20204bfcb2aebf7788445a223274d21af1000a065985b1
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=143339
Date: Tue, 13 Dec 2022 02:42:20 GMT
Etag: "63975a10-1d7"
Expires: Wed, 14 Dec 2022 18:31:19 GMT
Last-Modified: Mon, 12 Dec 2022 16:42:56 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: iQIWdZh4N0mbpxStpLSPIQ-BhBVDs5RnAiNnhLuVBVjlNkvx2o3jCA==
Age: 6503
|
|
| push.services.mozilla.com/ | 54.149.203.40 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.149.203.40:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W/PjijJzB48S2T/sL3TU6w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YfB+t2LQa3FQdtWRwEYmVeTiGUM=
|
|
| img-preview.myshopline.com/image/shopline/eb9ebba8044644f5adcba83def3d8164.png | 54.230.111.28 | 200 OK | 3.0 kB |
URL HTTP/2img-preview.myshopline.com/image/shopline/eb9ebba8044644f5adcba83def3d8164.png IP54.230.111.28:0
File typeRIFF (little-endian) data, Web/P image\012- data Hash8b2151c9e7cf07f1aa889c00f63d5f00 6811433a8af0089410f1fa8839735dab2993b66c 3268174aaeea4481d3ef3d580529f971e21039fe8dd936fcd60dad79c4f7a6d5
GET /image/shopline/eb9ebba8044644f5adcba83def3d8164.png HTTP/1.1
Host: img-preview.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 2966
server: AliyunOSS
x-oss-request-id: 6392F32895F22BE2B261439E
last-modified: Thu, 08 Dec 2022 12:13:05 GMT
x-oss-object-type: Normal
x-oss-storage-class: Standard
content-disposition: inline
x-oss-force-download: true
x-oss-server-time: 24
x-oss-hash-crc64ecma: 9462751570369226081
date: Mon, 12 Dec 2022 08:37:11 GMT
etag: "47C0D3FB3DB9CBB05326C3F037953587"
vary: Accept-Encoding
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
age: 65127
cache-control: public, max-age=31556952, immutable;
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Egpq-paTsOaIEhVEIJXbdLEcYYbfkBmRtfa6Uikp1j-c4RoYSVvVEA==
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 557 B |
IP93.184.220.29:0
Hash27163a2fafde07bba2bf0f7010c013ac 80086aa13e69ca853a05430ea3bca48424807104 c2943b53aaf862fe17bfadf82ff959e4a6dd973c02bb18c74c058911b2710d77
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4741
Cache-Control: max-age=171476
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:21 GMT
Etag: "6397cedc-1d7"
Expires: Thu, 15 Dec 2022 02:20:17 GMT
Last-Modified: Tue, 13 Dec 2022 01:01:16 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| connect.facebook.net/en_US/fbevents.js | 157.240.240.1 | 200 OK | 27 kB |
URL HTTP/2connect.facebook.net/en_US/fbevents.js IP157.240.240.1:0
File typeASCII text, with very long lines (64348) Hash470e4aea6e001f873722e538eac088d6 13462ac01b14053d7ca780c20db161619adcc2b4 e744b9ec87192ee329221101dbfc1fb034e93c3a7e44734f08827323982189d2
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src * data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: bUL7+8VxJP/GigMn7or81LbpYg4sZzFHBJYDjvBs5ty5WOoD4/C4E25r5fsgFBsOp7vqI5bjwMFxM4r7WyN6tw==
content-length: 27316
x-fb-trip-id: 1679558926
date: Tue, 13 Dec 2022 02:42:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash4b1dfadd44861ce3644c2aff158e9cc1 de69a782c797e32181c7abee8e8143575b3b6697 b34a07a5c0dd2be8c8695d82c8032f3dfbdd6ef08edc2eed2709302863129082
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4741
Cache-Control: max-age=171476
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:21 GMT
Etag: "6397cedc-1d7"
Expires: Thu, 15 Dec 2022 02:20:17 GMT
Last-Modified: Tue, 13 Dec 2022 01:01:16 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
|
|
| cdn.myshopline.com/sl/sdk/hdsdk-1.6.24.modern.min.js | 143.204.55.29 | 200 OK | 19 kB |
URL HTTP/2cdn.myshopline.com/sl/sdk/hdsdk-1.6.24.modern.min.js IP143.204.55.29:0
Hashde41b3cbb7d171a99aed0578b6f8f3aa 98d637a14d3c80351c574de9279af3eafa02641f 3b5b5ae47d10e6d31dfffbcd4d22c4f0b04322ff7631c9efe9825828d59afc62
GET /sl/sdk/hdsdk-1.6.24.modern.min.js HTTP/1.1
Host: cdn.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 12 Nov 2022 22:08:14 GMT
last-modified: Wed, 14 Sep 2022 02:40:25 GMT
etag: W/"6ec9f4df78688c99ddc1c7fe5bc5232a"
cache-control: public, max-age=31556952, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NT4o-S9TjGJIIIm2VkBQWE2WTocwDqocrYFv3pzBZpIRmYmlSQXqSQ==
age: 2608447
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash26c6025b12d33a0674edeef8c1491ff6 084f3e27246d3f10c36f8251034a32f71e4905be a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8772
Expires: Tue, 13 Dec 2022 05:08:34 GMT
Date: Tue, 13 Dec 2022 02:42:22 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash26c6025b12d33a0674edeef8c1491ff6 084f3e27246d3f10c36f8251034a32f71e4905be a3b48719537321a85667771544ce54728ebdb8d3145a8db154997b6376dba12f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3B48719537321A85667771544CE54728EBDB8D3145A8DB154997B6376DBA12F"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8772
Expires: Tue, 13 Dec 2022 05:08:34 GMT
Date: Tue, 13 Dec 2022 02:42:22 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3bd4c12-e778-472e-ac9c-d2cd99425501.jpeg | 34.120.237.76 | 200 OK | 6.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3bd4c12-e778-472e-ac9c-d2cd99425501.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashf885add3e7cb373da8fbb0e773b169d0 b5d9aea1fcf2c7139710dd8b1cf06f595f59e3a2 8e527efa846977908cbf1b9b82f6a09fc84a512f62286c5ef4410b6ffd76d3cd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff3bd4c12-e778-472e-ac9c-d2cd99425501.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6619
x-amzn-requestid: 3f7210b8-b010-4d13-9ea2-ab331dfb6700
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c0rHIHhjoAMFixQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6391befa-090c90f7543e16cb678e0524;Sampled=0
x-amzn-remapped-date: Thu, 08 Dec 2022 10:39:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: p0KPXrm-YBTEDxq6ds7BUJ5IfWQ6psS_mmXZLYV40cm6iX0ASz_4XA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:54:08 GMT
age: 17294
etag: "b5d9aea1fcf2c7139710dd8b1cf06f595f59e3a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffebdc4d5-a724-47ca-a30a-bce3e96bbbe3.jpeg | 34.120.237.76 | 200 OK | 3.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffebdc4d5-a724-47ca-a30a-bce3e96bbbe3.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash2f6f26cc088c96e477fab6eb3bfac37b 7c2728ee396b9aa4d8c32300fb3695e04fcb9d6c 29f7be917aa2ada98958c1e5cc12073417573a46376b35334535587e09c37948
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffebdc4d5-a724-47ca-a30a-bce3e96bbbe3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3666
x-amzn-requestid: 9eb88928-c5fe-4a71-bc9b-a3aa9ffc2d06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dDWgPE_CoAMFv7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63979e01-6ed9af730d773de1607af63c;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 21:32:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: u4VOkrCbMz_iuTxWEtB5BW5xEeg6X1dBj6Y1QV8ndXkA5QELnhvleg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 21:47:02 GMT
age: 17720
etag: "7c2728ee396b9aa4d8c32300fb3695e04fcb9d6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 | 104.16.56.101 | 200 OK | 11 kB |
URL HTTP/2static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 IP104.16.56.101:0
Hash59d347ac9448d829cb8a9952f9ec0c7e 75662f963fab3b76d5ff2715e67fde728f4a7626 f05099cf54963ce4b3fd247dec51f864e074b8750e8d67294c575a2bd8b9bd85
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://julia.nvctkz.shop
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:42:20 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 778b589088c9b506-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.myshopline.com/t/layout/plugin/2022120816595555/googleTranslatePlugin.js | 143.204.55.29 | 200 OK | 63 kB |
URL HTTP/2cdn.myshopline.com/t/layout/plugin/2022120816595555/googleTranslatePlugin.js IP143.204.55.29:0
Hash0db589cbf5086cb7d57ed6dad9b53e4e ac3baee98c5a4f51db2a2b1f676c8d1e68a6946a 5a4a8ecedf952e75af1cdfb3f3cdf72ef197ae592dc97ab929b912812844adfe
GET /t/layout/plugin/2022120816595555/googleTranslatePlugin.js HTTP/1.1
Host: cdn.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 08 Dec 2022 09:00:01 GMT
last-modified: Thu, 08 Dec 2022 08:59:58 GMT
etag: W/"df397b87c10d34433efccd8e44872dd2"
cache-control: public, max-age=31556952, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
age: 409340
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: BpjPtbA9hCRXIqQYzON01S6nQrl4267ZQhliLU-QciLB71RYr9Ou8g==
X-Firefox-Spdy: h2
|
|
| cdn.myshopline.com/t/layout/plugin/2022120712071010/sales-notice-plugin/index-f9bb7385.js | 143.204.55.29 | 200 OK | 8.0 kB |
URL HTTP/2cdn.myshopline.com/t/layout/plugin/2022120712071010/sales-notice-plugin/index-f9bb7385.js IP143.204.55.29:0
File typeASCII text, with very long lines (5093) Hashc573e7c6788a981b1fa9e4413548e77a 828b12ce3b63175503dd1f9c6bd06a1eba0125a8 366a2605dd8a1a46c2a0af439afcee9c8a3dac59410cb545a79538273dac2ca2
GET /t/layout/plugin/2022120712071010/sales-notice-plugin/index-f9bb7385.js HTTP/1.1
Host: cdn.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://julia.nvctkz.shop
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Fri, 09 Dec 2022 07:49:52 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30000
last-modified: Fri, 09 Dec 2022 07:38:27 GMT
etag: W/"568ea1be5de9bd97faa06a6882728310"
cache-control: public, max-age=31556952, immutable
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
age: 327149
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: E3xb1fm91y6VphvJcxhABrmVEgUMEFkPdQZGqnEzzYwNwHLY6ErF7w==
X-Firefox-Spdy: h2
|
|
| cdn.myshopline.com/t/layout/plugin/2022112411482121/sales-popup-plugin/index-e62528e9.js | 143.204.55.29 | 200 OK | 12 kB |
URL HTTP/2cdn.myshopline.com/t/layout/plugin/2022112411482121/sales-popup-plugin/index-e62528e9.js IP143.204.55.29:0
Hash35182716080b47b60f5398b52f3de1f0 a0875d32ae16f426f3528a4349224d4e84e43f6a 1d53b2770aeb31bb700825b2a265414031b5a8d144a7cbb9e2d55eedcf27215f
GET /t/layout/plugin/2022112411482121/sales-popup-plugin/index-e62528e9.js HTTP/1.1
Host: cdn.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://julia.nvctkz.shop
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 03 Dec 2022 18:16:49 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 30000
last-modified: Thu, 24 Nov 2022 07:47:35 GMT
etag: W/"b840108c80ddc6102b13ad158a58d49a"
cache-control: public, max-age=31556952, immutable
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
age: 807932
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qUgwSAUpnvspLy66FBBi1ymwtKjR4pf4ii-OKnl96nLYsumHN5cNgQ==
X-Firefox-Spdy: h2
|
|
| admin.innovelabs.com/apps/api/frontend/google-translate/config/load? | 3.220.252.186 | 200 OK | 0 B |
URL HTTP/2admin.innovelabs.com/apps/api/frontend/google-translate/config/load? IP3.220.252.186:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /apps/api/frontend/google-translate/config/load? HTTP/1.1
Host: admin.innovelabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-handle,x-merchant-id,x-store-id
Referer: https://julia.nvctkz.shop/
Origin: https://julia.nvctkz.shop
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:42:22 GMT
content-length: 0
access-control-allow-origin: https://julia.nvctkz.shop
access-control-allow-methods: *
access-control-allow-credentials: true
access-control-allow-headers: Authorization,Origin,X-Requested-With,Content-Type,Accept,Access-Token,X-Handle,X-Merchant-Id,X-Store-Id,X-App-Key,X-App-Key
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
X-Firefox-Spdy: h2
|
|
| ocsp.dcocsp.cn/ |  79.133.176.226 | 200 OK | 471 B |
IP79.133.176.226:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash1c8db0b1a1987441f8c265eb525a9a21 e5f1faa1be021e1f290fe43cceebda8829cdff42 cf9bd2aed78b84f86e034b78e2b9ffe579fcd9ec8e78a39a060a7f037a869a63
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 13 Dec 2022 02:02:09 GMT
Last-Modified: Mon, 12 Dec 2022 09:13:12 GMT
ETag: "6396f0a8-1d7"
Expires: Wed, 14 Dec 2022 09:13:12 GMT
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1670896929
Via: cache21.l2de2[0,0,304-0,H], cache15.l2de2[0,0], cache1.gb1[0,0,200-0,H], cache1.gb1[1,0]
Age: 2413
X-Cache: HIT TCP_MEM_HIT dirn:11:389008678
X-Swift-SaveTime: Tue, 13 Dec 2022 02:32:55 GMT
X-Swift-CacheTime: 1754
Timing-Allow-Origin: *
EagleId: 4f85b09516708993423045829e
|
|
| ocsp.dcocsp.cn/ | 79.133.176.226 | 200 OK | 471 B |
IP79.133.176.226:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash1c8db0b1a1987441f8c265eb525a9a21 e5f1faa1be021e1f290fe43cceebda8829cdff42 cf9bd2aed78b84f86e034b78e2b9ffe579fcd9ec8e78a39a060a7f037a869a63
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 13 Dec 2022 02:02:09 GMT
Last-Modified: Mon, 12 Dec 2022 09:13:12 GMT
ETag: "6396f0a8-1d7"
Expires: Wed, 14 Dec 2022 09:13:12 GMT
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1670896929
Via: cache21.l2de2[0,0,304-0,H], cache12.l2de2[1,0], cache5.gb1[12,21,200-0,H], cache5.gb1[22,0]
Age: 2413
X-Cache: HIT TCP_REFRESH_HIT dirn:7:579723392
X-Swift-SaveTime: Tue, 13 Dec 2022 02:42:22 GMT
X-Swift-CacheTime: 1187
Timing-Allow-Origin: *
EagleId: 4f85b09916708993423042036e
|
|
| admin.innovelabs.com/apps/api/frontend/google-translate/config/load? | 3.220.252.186 | 200 OK | 200 B |
URL HTTP/2admin.innovelabs.com/apps/api/frontend/google-translate/config/load? IP3.220.252.186:0
File typeJSON data\012- , Unicode text, UTF-8 text, with no line terminators Hash9ed824e619501a6fd92b62a175e61afd fe1b519672301f630940412abdf72ceb8b3d6c9e 47405e8c97199c9ee3b29c1a73f318030a3aaf4360874f456803eda99d54305c
GET /apps/api/frontend/google-translate/config/load? HTTP/1.1
Host: admin.innovelabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://julia.nvctkz.shop/
X-Store-Id: 1668667083156
X-Merchant-Id: 2001316736
X-Handle: wl-05
Content-Type: application/json
Origin: https://julia.nvctkz.shop
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:42:22 GMT
content-type: application/json
content-length: 200
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://julia.nvctkz.shop
access-control-allow-credentials: true
access-control-allow-methods: *
access-control-allow-headers: Authorization,Origin,X-Requested-With,Content-Type,Accept,Access-Token,X-Handle,X-Merchant-Id,X-Store-Id,X-App-Key,X-App-Key
X-Firefox-Spdy: h2
|
|
| ocsp.dcocsp.cn/ | 79.133.176.226 | 200 OK | 471 B |
IP79.133.176.226:0 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Hash4e2d137378e7e2ee8cd7ef51ae711d32 bf80cf8f70804e8958fb91ff260ac981152bd6c6 01963fba05f24dc7a6ec093ccafd889faa2a24b1736a7068fe57c90f7206ec82
POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Tue, 13 Dec 2022 01:52:15 GMT
Ali-Swift-Global-Savetime: 1670896335
Via: cache21.l2de2[0,0,200-0,H], cache8.l2de2[1,0], cache1.gb1[0,0,200-0,H], cache1.gb1[1,0]
Age: 3007
X-Cache: HIT TCP_MEM_HIT dirn:9:406552035
X-Swift-SaveTime: Tue, 13 Dec 2022 02:32:47 GMT
X-Swift-CacheTime: 1168
Timing-Allow-Origin: *
EagleId: 4f85b09516708993429956583e
|
|
| sentry-new.myshopline.com/api/491/envelope/?sentry_key=c8b00fec77ad4e82b85735e34c7a3ef0&sentry_version=7 |  161.117.0.147 | 200 OK | 41 B |
URL HTTP/2sentry-new.myshopline.com/api/491/envelope/?sentry_key=c8b00fec77ad4e82b85735e34c7a3ef0&sentry_version=7 IP161.117.0.147:0 ASN#45102 Alibaba US Technology Co., Ltd.
File typeJSON data\012- , ASCII text, with no line terminators Hash66eb5bf01d546fb59096527ed81eac77 7dea68e12cce80e1948e827df9e20cc35a7b7416 a3cc6cc0184e1b3e1964f51915238c5447b6e708cbdc86a6ba886e846b4d8b04
POST /api/491/envelope/?sentry_key=c8b00fec77ad4e82b85735e34c7a3ef0&sentry_version=7 HTTP/1.1
Host: sentry-new.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://julia.nvctkz.shop/
Content-Type: text/plain;charset=UTF-8
Origin: https://julia.nvctkz.shop
Content-Length: 1325
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:42:23 GMT
content-type: application/json
content-length: 41
access-control-allow-origin: https://julia.nvctkz.shop
access-control-expose-headers: x-sentry-rate-limits, retry-after, x-sentry-error
vary: Origin
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0f3dad0d025c4b6b8abd5d698f00cfbd 3a82ecac8709c7acd620316502a0e774ac3b1170 8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| translate.googleapis.com/translate_static/css/translateelement.css | 142.250.74.74 | 200 OK | 3.6 kB |
URL HTTP/2translate.googleapis.com/translate_static/css/translateelement.css IP142.250.74.74:0
File typeASCII text, with very long lines (18670) Hash897ba9a21d9625286674da769dacc2e2 84b4923ab7dee562395160824d53496314499b77 696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 02:27:06 GMT
expires: Tue, 13 Dec 2022 03:27:06 GMT
cache-control: public, max-age=3600
age: 918
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/translate_static/js/element/main_zh-CN.js | 142.250.74.74 | 200 OK | 3.0 kB |
URL HTTP/2translate.googleapis.com/translate_static/js/element/main_zh-CN.js IP142.250.74.74:0
File typeASCII text, with very long lines (842) Hashbe080c5bd55f10c58ac56ff73bbebb32 0fd3b26c48a4ee466c483da6e27c5a80d1336247 be2f38fda27486a68a02366fe36c238373fd4b774e49ad2c551ff5161188264c
GET /translate_static/js/element/main_zh-CN.js HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 2968
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 02:37:24 GMT
expires: Tue, 13 Dec 2022 03:37:24 GMT
cache-control: public, max-age=3600
age: 300
last-modified: Mon, 22 Aug 2022 08:08:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| translate.googleapis.com/element/TE_20220815_00/e/js/element/element_main.js | 142.250.74.74 | 200 OK | 90 kB |
URL HTTP/2translate.googleapis.com/element/TE_20220815_00/e/js/element/element_main.js IP142.250.74.74:0
File typeHTML document, ASCII text, with very long lines (1801) Hash838506fe6f8b2e63e21649206b32c9af 937ead3b73afdf4e96824edf3b76b386b94d02ed ed6ada3a8a39b62aa5e7a503f7c0b9529ce46b1eab13fedc74b161a3da0b9362
GET /element/TE_20220815_00/e/js/element/element_main.js HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 90192
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 18:38:52 GMT
expires: Wed, 06 Dec 2023 18:38:52 GMT
cache-control: public, max-age=31536000
age: 547412
last-modified: Mon, 15 Aug 2022 09:51:24 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash0f3dad0d025c4b6b8abd5d698f00cfbd 3a82ecac8709c7acd620316502a0e774ac3b1170 8d98454c05e1bfb1e534913e69fe76f4b0cb619c02626bcdc163f7be48b1621f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6d462d3e6bc6168ee30040355f8b96ee 7578100cefe27a95fc25fa11481d78353185a9f0 7371baa9980618773809e1f238fb57f8ec6eef6bdc37d127bead092b7fde990c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash2e5ee531cc0386adab9fe3d62f530231 16ec934be53e9ce97d40aedf906430551ad1b58a 0259d529060dc76765ae2bfb9bb5f513662c41e1b6608ec3a950d8b4b04ec056
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.gstatic.com/images/branding/product/1x/translate_24dp.png | 216.58.211.3 | 200 OK | 846 B |
URL HTTP/2www.gstatic.com/images/branding/product/1x/translate_24dp.png IP216.58.211.3:0
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashe9cd262114358f26b7608b56905185dc 6dbde0a96deaab2b529723ce26c62043cf9180ab 5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /images/branding/product/1x/translate_24dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 846
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 18:47:19 GMT
expires: Tue, 12 Dec 2023 18:47:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Oct 2021 09:08:00 GMT
content-type: image/png
age: 28505
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png | 216.58.211.3 | 200 OK | 910 B |
URL HTTP/2www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png IP216.58.211.3:0
File typePNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data Hashefa6bb2bfe459bc6f4bdafa3db0383f6 52d15ce52fe50643e542c17812de43f4ed1b6ee0 6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 910
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:11 GMT
expires: Sat, 09 Dec 2023 13:33:11 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
age: 306553
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png | 216.58.211.3 | 200 OK | 1.6 kB |
URL HTTP/2www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png IP216.58.211.3:0
File typePNG image data, 68 x 28, 8-bit/color RGBA, non-interlaced\012- data Hashc4a931d597decd2553aac6634b766cf2 6ec84fb4a2745b4b71520241be77db1fd1013830 f56402b127698db4b4dc611a97a6f081d04c4691c60522c5912d189e37c94a9e
GET /images/branding/googlelogo/1x/googlelogo_color_68x28dp.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1597
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 15:42:47 GMT
expires: Wed, 06 Dec 2023 15:42:47 GMT
cache-control: public, max-age=31536000
age: 557977
last-modified: Tue, 22 Oct 2019 18:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash6d462d3e6bc6168ee30040355f8b96ee 7578100cefe27a95fc25fa11481d78353185a9f0 7371baa9980618773809e1f238fb57f8ec6eef6bdc37d127bead092b7fde990c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hasha41c1c2a6aad29835a33369555bbe359 4e104748d3d8c3237d58e03b6f7493fcc9182142 a0495e2ab6ed55134a4bf56eb85252977c6978eb965b14724d47e3c979f25ab4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 471 B |
IP142.250.74.131:0
Hashb14162cab0131ca3a7e7c1c6d72c77f3 87a1ae365bc2a459c323770eb9632d28649b2b1b 759526e8274b5fa52e1a46496e286cc04466a27c41a8f20de6aee1b756feb87c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| translate.google.com/gen204?sl=auto&nca=te_ap&client=te&logld=vTE_20220815_00 | 142.250.74.174 | 204 No Content | 0 B |
URL HTTP/2translate.google.com/gen204?sl=auto&nca=te_ap&client=te&logld=vTE_20220815_00 IP142.250.74.174:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gen204?sl=auto&nca=te_ap&client=te&logld=vTE_20220815_00 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: image/gif; charset=us-ascii
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 13 Dec 2022 02:42:24 GMT
cross-origin-resource-policy: cross-origin
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"TranslateApiHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/TranslateApiHttp/external"}]}
cross-origin-opener-policy: same-origin; report-to="TranslateApiHttp"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-security-policy: script-src 'nonce-HL0Rd0K1dTcistRQigGAWA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: __Secure-ENID=8.SE=Jvv9-29WN0NAwNW9ZYfCDwqEoJSctR71MyUjuOen3IfcxEVe5-6X_dpWCndpOrComOj2W7LyBgyOta5fVaXWs54BpFrK0radpfqc8mqOm2k5qruR_anlfkCF8MGuso2tqrK9Pro7DwuYj9z41jaSwUSDkElNPpQ1bYFDyk4NNRs; expires=Fri, 12-Jan-2024 19:00:42 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.com/images/cleardot.gif | 142.250.74.132 | 200 OK | 43 B |
URL HTTP/2www.google.com/images/cleardot.gif IP142.250.74.132:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashfc94fb0c3ed8a8f909dbc7630a0987ff 56d45f8a17f5078a20af9962c992ca4678450765 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /images/cleardot.gif HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/gif
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Tue, 13 Dec 2022 02:42:24 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hash8bc1b4db769ee14aba872f3f93af10b1 f24c742805ff56d77d50924d60dabd2b6750c46e 35e6181045327df4b97bddff70ea1f9510e03d6896213b5f8473d8da771b15f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | 200 OK | 472 B |
IP142.250.74.131:0
Hasha41c1c2a6aad29835a33369555bbe359 4e104748d3d8c3237d58e03b6f7493fcc9182142 a0495e2ab6ed55134a4bf56eb85252977c6978eb965b14724d47e3c979f25ab4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 13 Dec 2022 02:42:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| s2cdn.myshopline.com/fe-files/2022/08/12/251209/sentry6161.js | 54.230.111.122 | 200 OK | 0 B |
URL HTTP/2s2cdn.myshopline.com/fe-files/2022/08/12/251209/sentry6161.js IP54.230.111.122:0
GET /fe-files/2022/08/12/251209/sentry6161.js HTTP/1.1
Host: s2cdn.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://julia.nvctkz.shop
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript
date: Sun, 11 Dec 2022 23:58:30 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT
last-modified: Fri, 12 Aug 2022 02:08:00 GMT
etag: W/"d110b8073cd0e64045394ed7fd12fba5"
server: AmazonS3
content-encoding: br
vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -cTEmfFDrXCO6OwzyAJIsp7kTMxhflaqZUnh9ANK_ahRp8y7PfKygA==
age: 96232
X-Firefox-Spdy: h2
|
|
| www.zjuonei.top/ | 104.17.232.29 | 302 Found | 0 B |
IP104.17.232.29:0
GET / HTTP/1.1
Host: www.zjuonei.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
date: Tue, 13 Dec 2022 02:42:20 GMT
content-type: text/html; charset=utf-8
location: https://julia.nvctkz.shop/
vary: Origin
x-request-id: 8fe5a4140eba4c4e63159fd9b3bcea15
x-response-time: 4
x-xss-protection: 1; mode=block
x-download-options: noopen
x-readtime: 4
cf-cache-status: DYNAMIC
set-cookie: n_u=6dd56e0a1c9f6cd4d06dc6427fc529fd; path=/; expires=Fri, 31 Dec 9999 23:59:59 GMT; samesite=none; secure
f_ds_info=X92DeL7bWA2JraUAbBf14N6hjCSYIlD77KIg/AJjiSkaGHogelSmYJqgfiqbbKbcYEZKj5kOO+OxU5eNBLt8HQ==; path=/; secure
f_ds_info.sig=EkoLNwp8dxAHhRZjTmfcM0w9hbru9ZVjqDwxma13_5k; path=/; secure
store_id=1668667083156; path=/; secure
store_id.sig=U2HMvUFDNkDJpRDg89hjqwq75WK3z4h0KP9GkoLD0s8; path=/; secure
merchant_id=2001316736; path=/; secure
merchant_id.sig=1A6H_jNuXZjdpSR94tr-i5LrrD1wUGyOorPt66VehNA; path=/; secure
currency_code=USD; path=/; secure
currency_code.sig=nEGddW1-E-8oJfI_Pm_5XNzC2sMi1n3aVzZ3v01csyY; path=/; secure
n_sess={"session_id":"3d52e458-c653-40c2-b2fd-0b38052003dd","created_at":1670899340245,"last_session_id":"","session_create_type":101}; path=/; secure
__cf_bm=1Wlj6CJ.diLeN69U_mO8VzvLti.CNxho5U9Mj.36DlQ-1670899340-0-AV64JfAQ8QlSZ0pGEi60dCgrfhL0zVoJRYVDw3WKQA5LsXek5YTCqjHEyPtrv3PMschmamYD0g6+AloO0GhPmGU=; path=/; expires=Tue, 13-Dec-22 03:12:20 GMT; domain=.www.zjuonei.top; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 778b588c1dbab512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| julia.nvctkz.shop/ | 104.17.232.29 | 200 OK | 0 B |
IP104.17.232.29:0
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET / HTTP/1.1
Host: julia.nvctkz.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 13 Dec 2022 02:42:20 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding, Origin
x-request-id: 4a42aac7d130d8a31bb292e57ad27a68
x-response-id: ae5ed1fb17cefe23d11366d1882a269d
x-le-theme-id: 6386f21f5d9c6671c3df3eb6
x-le-theme: Arise
x-le-theme-version: 1.2.52
cache-control: private, max-age=0, no-cache, no-store
x-le-render-mode: stream-like
x-response-time: 138
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 138
cf-cache-status: DYNAMIC
set-cookie: n_u=d4b29a582e2ade2b9b8769e4439ea0e2; path=/; expires=Fri, 31 Dec 9999 23:59:59 GMT; samesite=none; secure
f_ds_info=X92DeL7bWA2JraUAbBf14N6hjCSYIlD77KIg/AJjiSkaGHogelSmYJqgfiqbbKbcYEZKj5kOO+OxU5eNBLt8HQ==; path=/; secure
f_ds_info.sig=EkoLNwp8dxAHhRZjTmfcM0w9hbru9ZVjqDwxma13_5k; path=/; secure
store_id=1668667083156; path=/; secure
store_id.sig=U2HMvUFDNkDJpRDg89hjqwq75WK3z4h0KP9GkoLD0s8; path=/; secure
merchant_id=2001316736; path=/; secure
merchant_id.sig=1A6H_jNuXZjdpSR94tr-i5LrrD1wUGyOorPt66VehNA; path=/; secure
currency_code=USD; path=/; secure
currency_code.sig=nEGddW1-E-8oJfI_Pm_5XNzC2sMi1n3aVzZ3v01csyY; path=/; secure
localization=GB; path=/; max-age=31536000; expires=Wed, 13 Dec 2023 02:42:20 GMT; samesite=lax; secure
lang=en; path=/; secure
lang.sig=HPZEXM6qRQA3fl9QF0Gl5KM_KZ7FwUtDpVV9UEUrrek; path=/; secure
addressLang=en; path=/; secure
addressLang.sig=fZhLaUxh_564Gt_Ygb8agf56cVb1lYYp6NMpk7wfgaM; path=/; secure
userSelectLocale=en; path=/; secure
userSelectLocale.sig=xaWhkiDLccJKOWtBx98z0KVVx7o_iP0WoEYPBrEqJCw; path=/; secure
store_block_region_status=1; path=/; max-age=1800; expires=Tue, 13 Dec 2022 03:12:20 GMT; secure; httponly
currency_code_userSetting=USD; path=/; secure
currency_code_userSetting.sig=wreMdGqvcOcZfYXi-Fd1QDxl5OWoQm3s2QLyXkCpvxE; path=/; secure
n_sess={"session_id":"9daae9b0-4904-41e2-b7c0-754da6964c40","created_at":1670899340576,"last_session_id":"","session_create_type":101}; path=/; secure
_tracking_consent=%7B%22con%22%3A%7B%22GDPR%22%3A%22%22%7D%2C%22v%22%3A%221.0%22%2C%22lim%22%3A%5B%5D%2C%22reg%22%3A%22GDPR%22%7D; Max-Age=31536000; Path=/; SameSite=Lax
__cf_bm=lBOQNJvaMFAUi55LBPW_CEiQJJ0EM4E63umkxtaObiE-1670899340-0-ARt1Ur8qUCDaYZBq+3vzrIF1JQe+tObEMT0Td89Dl91a/YLxYORm4f7ok8cNnnCaDJMlljQr29RQeYWp2EMXCVw=; path=/; expires=Tue, 13-Dec-22 03:12:20 GMT; domain=.julia.nvctkz.shop; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 778b588d39a2b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.myshopline.com/t/layout/plugin/2022110307314545/reference-sdk.umd.min.js | 143.204.55.29 | 200 OK | 0 B |
URL HTTP/2cdn.myshopline.com/t/layout/plugin/2022110307314545/reference-sdk.umd.min.js IP143.204.55.29:0
GET /t/layout/plugin/2022110307314545/reference-sdk.umd.min.js HTTP/1.1
Host: cdn.myshopline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://julia.nvctkz.shop/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 03 Nov 2022 07:31:49 GMT
server: AmazonS3
content-encoding: br
date: Fri, 09 Dec 2022 19:34:22 GMT
cache-control: public, max-age=31556952, immutable
etag: W/"d3f97dbdd0e642d82fd401b356b21ada"
vary: Accept-Encoding
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
age: 1063521
access-control-allow-origin: *
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9W_ghCwTdLGz0Aji7aiQAlHf0yW9egK093RBWgiqX9krTv-T3TmTcA==
X-Firefox-Spdy: h2
|
|
104.17.233.29