r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 8083775b7a6637d27672cc4a2581fa2d
023420d026fbf2cd0f69d5606524094011375202
66664ed1d36948fe99498950e3525d03c1797689c9186c4cd0bd5ded531b3bac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "66664ED1D36948FE99498950E3525D03C1797689C9186C4CD0BD5DED531B3BAC"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12966
Expires: Sun, 26 Feb 2023 19:38:18 GMT
Date: Sun, 26 Feb 2023 16:02:12 GMT
Connection: keep-alive
vanityshepherd.cn/biedronka2023/tb.php?qk=zi1677420264884
104.21.1.180200 OK 547 B URL HTTP/1.1 vanityshepherd.cn/biedronka2023/tb.php?qk=zi1677420264884
IP 104.21.1.180:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (546), with CRLF line terminators
Hash 31d217e4f6a79aba7780ca236ef718cb
6687ee478135853c5b4df27665929e2f20ba5345
0cdeae77186628f5bf0e5358819e2e18895918c4fdae6eee7a73110af1a4c0de
GET /biedronka2023/tb.php?qk=zi1677420264884 HTTP/1.1
Host: vanityshepherd.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dx0yi4KkVIy%2FrAMl%2FXrrXquraCbRrrsTiSry%2BtYafmc%2BIX3lo7hh7wkCZyDXf6ILY3CweHlmo3e0R2NUo4uEslybmouOq11TRMPQErvP%2B6jBdUZVUJqyvQJHZxPL5%2F7wG6CW4A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79f9e75d8ba5b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 7a57f620f4b5b83c5c9520e881269446
d46ca3756afc5d9775c1e48c78b39d11574d507a
8417deae76018365ad55aabd7950ed99f429e02c3915626137695f90c955215b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8417DEAE76018365AD55AABD7950ED99F429E02C3915626137695F90C955215B"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3956
Expires: Sun, 26 Feb 2023 17:08:08 GMT
Date: Sun, 26 Feb 2023 16:02:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 26 Feb 2023 15:12:33 GMT
content-type: application/json
age: 2979
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 29cfccb9238759ed21dbb0d92cae75f8
f41ad1b02e353cd2b33af7618c71cc16fae2886e
91e392e78e584e8a82762dab0d5615aa1af3893237d601db3d45bb6fad488580
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "91E392E78E584E8A82762DAB0D5615AA1AF3893237D601DB3D45BB6FAD488580"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3284
Expires: Sun, 26 Feb 2023 16:56:57 GMT
Date: Sun, 26 Feb 2023 16:02:13 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: b55LGGGh5eyp4kMxYOMhHmi4951oO2SXxCoB8I+RGX15X2pnMqbry10WX7wxo/vykMdSkVd2e/w=
x-amz-request-id: 32WV34JNE1F8NEYN
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 26 Feb 2023 15:13:45 GMT
age: 2908
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Feb 2023 16:02:12 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
vanityshepherd.cn/favicon.ico
104.21.1.180200 OK 455 B URL HTTP/1.1 vanityshepherd.cn/favicon.ico
IP 104.21.1.180:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c5d244b8b6b192c76a2c4331450c235
7e53f5ad871fcd67705eaf77f1ca9ff247143e1e
e0f26b6349453a86cd1f0f87cfd80559ef7edb6d88ff0af9ced7d7e413c548e3
GET /favicon.ico HTTP/1.1
Host: vanityshepherd.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vanityshepherd.cn/biedronka2023/tb.php?qk=zi1677420264884
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:13 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2016 03:54:11 GMT
ETag: W/"5861e5e3-1b0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 6549
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H7o3TFDaN%2BzJAVmeFH%2FOl1oLNMJMumrOfIpcODxpzIaWpLVbsNEMHDRzp4UsOLpLd1H5UPiNdn8Zt5bB6jmidiiHwTVTU0n090SLo3Gc4Lrmpq0U2VaLQ1zVLzGzxtomGgon4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79f9e75fd8a2b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
vanityshepherd.cn/j/og2.js?_t=1677427428810
104.21.1.180200 OK 942 B URL HTTP/1.1 vanityshepherd.cn/j/og2.js?_t=1677427428810
IP 104.21.1.180:0
File type ASCII text, with CRLF line terminators
Hash bad1af26351d2e87c035596233940ab0
9ac0e34dcbfd29ca3070c506c200777a8016b161
bc734ed6fc97cbcbaa0ed5236ce8aa46754596a9a79eef96684242d231d0644e
GET /j/og2.js?_t=1677427428810 HTTP/1.1
Host: vanityshepherd.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://vanityshepherd.cn/biedronka2023/tb.php?qk=zi1677420264884
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Oct 2022 16:09:56 GMT
Vary: Accept-Encoding
ETag: W/"635172d4-850"
Expires: Mon, 27 Feb 2023 04:02:13 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9k0Wp5pFVfKjYKDtffsfvE8Kvn9do6aIrW70SdFhriFqNe9H43N%2BC76%2B3VDNM6cHB3mq%2F3QhKHSBTSngiffZsGXI5UJ0%2FzW%2F2lD4RM05xTyrIx8jWets2u2KUTiQCCRHObOzzw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79f9e7607984b4f9-OSL
alt-svc: h2=":443"; ma=60
vanityshepherd.cn/j/og2.php?_t=1677427428927
104.21.1.180200 OK 101 B URL HTTP/1.1 vanityshepherd.cn/j/og2.php?_t=1677427428927
IP 104.21.1.180:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 6e6ee5ac4966b8ca1f2e993ea213cfd2
aa8090c20a599bbc1d8f81dbeea915f588288a43
ad8db7918464f5019fd734a70a42bde86f7fe4ea9625f127cf4a1d717e93b60b
Analyzer Verdict Alert fortinet Phishing
POST /j/og2.php?_t=1677427428927 HTTP/1.1
Host: vanityshepherd.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 51
Origin: http://vanityshepherd.cn
Connection: keep-alive
Referer: http://vanityshepherd.cn/biedronka2023/tb.php?qk=zi1677420264884
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:13 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hBzzbbWjmPNXxl4CsHMcRGpcEYibqAt33WFx4pVi96DvWvRGfo1k8x72nQWntiJcu7zdc9DzNrGewXCeBrpjv4wCexdkn8MyrMS6%2FaUbrejdLl6euDMLSdPKFywTjmbXJ2JDgw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79f9e7613a75b4f9-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Cache-Control, Backoff, Pragma, Expires, Last-Modified, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 26 Feb 2023 15:03:35 GMT
age: 3518
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 85cbb48f071581b644dd200623699bd6
0c9d7c3ca38562a97a4a6af3fb96f68982027594
d83caa4c6791e3b475a8ae8c255b84dc0bf0a8d06b65e5e6195af4f66e47eb86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D83CAA4C6791E3B475A8AE8C255B84DC0BF0A8D06B65E5E6195AF4F66E47EB86"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2342
Expires: Sun, 26 Feb 2023 16:41:15 GMT
Date: Sun, 26 Feb 2023 16:02:13 GMT
Connection: keep-alive
cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
151.101.193.229200 OK 2.2 kB URL HTTP/2 cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
IP 151.101.193.229:0
File type ASCII text, with very long lines (16263)
Hash bd3ea59ca12635e32402ec20cb196249
b1bfdaba4a00c2932245ff9eabea38016f9c9069
b99f8f79de257275fdbf6a8e0eb4652b0d69429552234b1f444c08ae85000341
GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Feb 2023 16:02:13 GMT
age: 11093748
x-served-by: cache-fra-eddf8230031-FRA, cache-bma1621-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2162
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
151.101.193.229200 OK 21 kB URL HTTP/2 cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
IP 151.101.193.229:0
File type ASCII text, with very long lines (65317)
Hash b5ae87c0e4dd241b533e67053b0b719d
6b7b568694a95d81a94dea9ef7a85d1317d448dc
5bae5997fbca925ac6e52be8163ca897e751fcc9331552e0f77a22dd35b64521
GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 26 Feb 2023 16:02:13 GMT
age: 373294
x-served-by: cache-fra-eddf8230119-FRA, cache-bma1621-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20556
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
IP 142.250.74.131:0
Hash ebf8d9a73645b6ffd651ffa6fb8f18d4
c68a859321d56da68346797012b2fb993b854fe6
e559513af53f6a59e4b4d38ff30c6e8662a271566da03ca017443eebb06457ee
POST /s/gts1p5/XU7QMKYcWY4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
IP 142.250.74.131:0
Hash ebf8d9a73645b6ffd651ffa6fb8f18d4
c68a859321d56da68346797012b2fb993b854fe6
e559513af53f6a59e4b4d38ff30c6e8662a271566da03ca017443eebb06457ee
POST /s/gts1p5/XU7QMKYcWY4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
IP 142.250.74.131:0
Hash ebf8d9a73645b6ffd651ffa6fb8f18d4
c68a859321d56da68346797012b2fb993b854fe6
e559513af53f6a59e4b4d38ff30c6e8662a271566da03ca017443eebb06457ee
POST /s/gts1p5/XU7QMKYcWY4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
IP 142.250.74.131:0
Hash ebf8d9a73645b6ffd651ffa6fb8f18d4
c68a859321d56da68346797012b2fb993b854fe6
e559513af53f6a59e4b4d38ff30c6e8662a271566da03ca017443eebb06457ee
POST /s/gts1p5/XU7QMKYcWY4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
IP 142.250.74.131:0
Hash ebf8d9a73645b6ffd651ffa6fb8f18d4
c68a859321d56da68346797012b2fb993b854fe6
e559513af53f6a59e4b4d38ff30c6e8662a271566da03ca017443eebb06457ee
POST /s/gts1p5/XU7QMKYcWY4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash b2ffc9a96adf221d32379861c71882a5
c658e2f09fd511b44cff41f22288b7940f52789b
344a5c0709897a8d63161912d29eab016ae6049691a48f6cd4909622ee00a64d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.21.226:0
Hash 5c5935990d3068305130e1f776f324fe
e28d4528ee9dcdb38ecc162ce4ef42bb71603914
045b498bbf508f41998bf59d0ebdd1611e028b3bc344ddd3e7ee9a01d92aff4e
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:13 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "4FA9D4E0DEDF22110F9B0D5CCB5CE63E5CF409C1"
Expires: Mon, 27 Feb 2023 02:00:00 GMT
Last-Modified: Sun, 26 Feb 2023 14:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1608
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79f9e7644ade1c0a-OSL
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 060959ae86116aa3d51a999c6f0fa613
a212f5a5a6485dfc0f686a1210924def48222078
d0f3f72b8635291bf8486411680ae2d001581a51f0038536ac78f46968816fa4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
142.250.74.40200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
IP 142.250.74.40:0
File type ASCII text, with very long lines (19467)
Hash ab59375b0d0f4847c587dcaa8580a3f1
32730e4f06c2a8191c13a0f9ddb96793308fcdda
4716acf84cc383f7cc23a661e4226f5756a18137a7637ea911faf3a9979f6517
GET /gtag/js?id=G-0C230YDF7G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 26 Feb 2023 16:02:13 GMT
expires: Sun, 26 Feb 2023 16:02:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77947
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
142.250.74.40200 OK 78 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
IP 142.250.74.40:0
File type ASCII text, with very long lines (19467)
Hash 4414aa477fc0a4bb225b1761368966f4
f953f7da64e1aed8d7e3c0225d41b1a9ce37affd
817476702bd54fba6819fa1c23ebdc374907c077018c45820cbec9e8d87f0989
GET /gtag/js?id=G-LW7434MYMN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 26 Feb 2023 16:02:13 GMT
expires: Sun, 26 Feb 2023 16:02:13 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77952
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 0b6d6ee2d615e844343da53bee86938a
30231d1c096d501053084440e05f119ac0e39f56
27d17c71d4e3a7cdcca31c791fcd0e6a848f8b40e885122f13b2b6b7e8f407b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "27D17C71D4E3A7CDCCA31C791FCD0E6A848F8B40E885122F13B2B6B7E8F407B5"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12784
Expires: Sun, 26 Feb 2023 19:35:17 GMT
Date: Sun, 26 Feb 2023 16:02:13 GMT
Connection: keep-alive
ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/XU7QMKYcWY4
IP 142.250.74.131:0
Hash ebf8d9a73645b6ffd651ffa6fb8f18d4
c68a859321d56da68346797012b2fb993b854fe6
e559513af53f6a59e4b4d38ff30c6e8662a271566da03ca017443eebb06457ee
POST /s/gts1p5/XU7QMKYcWY4 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
34.214.84.191101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.84.191:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 15qO4fbyS9Op4pOsZJW/9Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oFFinSRpbsIrAshplo2v6gvHvYA=
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 76fa2c5fcd449e8a59a87b6f627bb865
3b6dabe97ae3081bea8fde746c611d1338a3a005
04c39b756e7d0b7a3f84b8e522940988dafa699655775de654243b8f1c7f31a2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "04C39B756E7D0B7A3F84B8E522940988DAFA699655775DE654243B8F1C7F31A2"
Last-Modified: Sat, 25 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1476
Expires: Sun, 26 Feb 2023 16:26:50 GMT
Date: Sun, 26 Feb 2023 16:02:14 GMT
Connection: keep-alive
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a44991ac4cc9f430e8012f166dceabeb
4c7c17f76ff8493e3d5bf2cc2f9b89c9648c3d10
0397123538f70c1e47129f1eb03d06539cc588aeb79fbe0a1a71a5b0c09ee8ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "0397123538F70C1E47129F1EB03D06539CC588AEB79FBE0A1A71A5B0C09EE8CE"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2973
Expires: Sun, 26 Feb 2023 16:51:47 GMT
Date: Sun, 26 Feb 2023 16:02:14 GMT
Connection: keep-alive
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a44991ac4cc9f430e8012f166dceabeb
4c7c17f76ff8493e3d5bf2cc2f9b89c9648c3d10
0397123538f70c1e47129f1eb03d06539cc588aeb79fbe0a1a71a5b0c09ee8ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "0397123538F70C1E47129F1EB03D06539CC588AEB79FBE0A1A71A5B0C09EE8CE"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2973
Expires: Sun, 26 Feb 2023 16:51:47 GMT
Date: Sun, 26 Feb 2023 16:02:14 GMT
Connection: keep-alive
cdnbun.com/upload/biedronka2023-show.jpg
104.21.14.142200 OK 59 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-show.jpg
IP 104.21.14.142:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x337, components 3\012- data
Hash f666134aed1ea2d039838ceea4419f06
8c18577235553e53359817ff39b3e83427faceb7
0e303dc640d0c48b662246370659a9bba1270712d19f5345930f57456146f358
GET /upload/biedronka2023-show.jpg HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 58972
x-guploader-uploadid: ADPycdt4OsePZlKFYln9ilXdvjMMatdDITJFHVsCDcYkpK9Q1__KfUPwsVpBXlr60mTucc2vaAPAiLlfMVgl0zikHa-lmLq8p2XS
expires: Sun, 26 Feb 2023 15:53:08 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:59 GMT
etag: "f666134aed1ea2d039838ceea4419f06"
x-goog-generation: 1676471219345497
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 58972
x-goog-hash: crc32c=kT4t8g==, md5=9mYTSu0eotA5g4zupEGfBg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KVz7mFHQowdo063Dpb1yrCQoyWQ1PP0qpD3mlx%2FgSqakmuHmgw8yaF1DbmInVUdDY49nC03L1ct44n%2Fo0twCuXcwRp6TUFpKz3Idqx%2BA7MMUKVdNkbRCJx2S%2FEo4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7660f59b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/biedronka2023-box2.png
104.21.14.142200 OK 3.5 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-box2.png
IP 104.21.14.142:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash f64d3d38ba71d8b510a7c0901b5ec67d
252b6ee1280907ce8e15c72a78288f333e6453cd
d95cb5b42d435543bf930101ee9c5ea08ca13c8418367ae5ed8415b23ecbb420
GET /upload/biedronka2023-box2.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 3503
x-guploader-uploadid: ADPycduvPSMcFbgiO-x0PNbzOVFVPYhxnX4ewhwy0okGfdI65XCCzeT_GlS_0OLbJg3OvRiRtKVVE2f9ZQYr2E-Q3gIl4xRIF2pg
expires: Sun, 26 Feb 2023 15:25:56 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:56 GMT
etag: "f64d3d38ba71d8b510a7c0901b5ec67d"
x-goog-generation: 1676471215986289
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3503
x-goog-hash: crc32c=LdzWqQ==, md5=9k09OLpx2LUQp8CQG17GfQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uj9fyTikcg7K8KyBL1Lc2AZOkGwENRymDHJE%2BA3%2F5yDv9cIvmYnPIIg%2FL%2BjdqNUJykxWIF1pir54Q9pHm583HtKm1imAdLPBpJM0UmKYxFYS2rqkZJyFqmOmS0lp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7660f5bb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/biedronka2023-inbox.png
104.21.14.142200 OK 24 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-inbox.png
IP 104.21.14.142:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash 210d4d2829bf1175aaaf042be446e964
3e45cf06d5c5ca3240446e802d21224be1bcabab
55d2a8baced00af6634b5ecacc46935fcee7f969c1a70cf8e4840fcd9e016705
GET /upload/biedronka2023-inbox.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 24322
x-guploader-uploadid: ADPycdvGJjYaECXGOqhD0ZjAYRIGfSDeqwarZu1L6Xr_n8haFBONew7JOerv1tyvde_k3e5KLGZgv4AzRll2C2wOrAHl6WiZC8RE
expires: Sun, 26 Feb 2023 16:26:29 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:57 GMT
etag: "210d4d2829bf1175aaaf042be446e964"
x-goog-generation: 1676471217056330
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 24322
x-goog-hash: crc32c=EqaCrg==, md5=IQ1NKCm/EXWqrwQr5EbpZA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0EofZeojqtPyQNmEDz562sEDXu1uCDyK0ighrj7sotY6xH3Gsr5930BWHEjNueiVUGruEpA%2FLiT%2BauSvtks2HIM7Vd2LP07gWBOX73KpVVgSywjEmddKVH1NPFg4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7660f5db50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
172.67.152.134200 OK 16 kB URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
IP 172.67.152.134:0
File type ASCII text, with very long lines (63188), with CRLF line terminators
Hash 92f9c893d1cb1389883ef04d2a81f4d3
59719d1fa28111ed27681e27ee85c639b1d47d80
3a3da66002aa8c330f106e7e2a745c9a314cd409a187a6621c2c5d6b9d9ee685
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdv0chj5F1Awc6K7Usaiie2qXL87Fxg5kp7mYqQH9s8HWV5Nuv0HuTqJ2hz1F5xUG9MGapUfK4P-pfLXRasYr-w
expires: Sun, 26 Feb 2023 15:58:04 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wr3qk6Z3HsKlGP0YUFZfbRGlxPu%2FizNP%2BD7hHaX52qWlNzsRsgt71hXPvrIcPryGvfx0pCUEHYWs9YguiyjSxJAXmhGH45vkoovr2RP6lDLt7UMSplsrSkqNC1pzQnHTxW4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7644ee4b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/biedronka2023-box3.png
104.21.14.142200 OK 28 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-box3.png
IP 104.21.14.142:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash 488593a16b93e295cbf1b620494bdfb7
62958a134099b90a589029718d14424cc66d3bf8
7e244493059a0294b42f93b3fb6cb3912ecc6640490018d1b4a8c9e4aee90758
GET /upload/biedronka2023-box3.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 28423
x-guploader-uploadid: ADPycdtWjQ100jI5R72Ph17I5M6Rp5u5yYxF5vks09b-rCMluVWDB9DGyvbJVIQnDNzp4lBMqLCW0n-ZdDf3Y9mZ5kgj0NyT1ELr
expires: Sun, 26 Feb 2023 16:26:29 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:56 GMT
etag: "488593a16b93e295cbf1b620494bdfb7"
x-goog-generation: 1676471216031198
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 28423
x-goog-hash: crc32c=JPTXAw==, md5=SIWToWuT4pXL8bYgSUvftw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ep8QB4kN%2BDTjHUIkUuaoI%2Boo1Jom%2FDiF%2BEE3v097iXGyUd4CbV3ikzSKgM1UaD4BpV58VSYGVEIYCevmB5jSbED91CaU%2BARP1L6u6uDIgzoDXZkdGKfLOnT9QwYS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7662f91b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/biedronka2023-m.png
104.21.14.142200 OK 10 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-m.png
IP 104.21.14.142:0
File type PNG image data, 135 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 4ef5cd1c0b2bc5d475483fc8dbac3247
0f4325bcc9f305ffcfb57e737ad1c94374c24de2
a452cd7ed47ab2904141fdc35de0dd20748867e4588f6f00ec9bb41150cc8826
GET /upload/biedronka2023-m.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 10317
x-guploader-uploadid: ADPycdvuDBNbXRe1k6rza7igfxoVIb5dnb02nikWwfPH8PTeYjBT2ff_raNPM_4XriBQEHJzWG6ovazCHQya_6ag72aK
expires: Sun, 26 Feb 2023 16:07:42 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:58 GMT
etag: "4ef5cd1c0b2bc5d475483fc8dbac3247"
x-goog-generation: 1676471218004982
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 10317
x-goog-hash: crc32c=FZulYw==, md5=TvXNHAsrxdR1SD/I26wyRw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iMW8ypIkEIfmfWdLOyBZEBekiKJoGfw5vfiBaLUVZP2fttMcmlR7DPaxyVJfgHULOTyjO3s7O4mN2g%2BS9vfXH2a%2Fqrv7tPYQmGstDtA%2Fu%2BIPqOryDcj2diWA39fr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7663f9cb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/biedronka2023-box1.png
104.21.14.142200 OK 30 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-box1.png
IP 104.21.14.142:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash 8fa3098b9b9a4b956898a03f566c6b84
fe557ce64af0b97f2dcfa00e43968ee871ce78e5
6d2dadfa6ded951ac3b94b6575dacf8ca4df9b40eec8946cfc02ab7320e8f086
GET /upload/biedronka2023-box1.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 29910
x-guploader-uploadid: ADPycds1SS63048UdLpDihpeoB0FBv-SImT-B1LVk4nQxlkS1AWF1z4FmV6Kw6S1rEq8mOhg51b4U53F2lKXMHFqI5ti
expires: Sun, 26 Feb 2023 13:25:03 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:55 GMT
etag: "8fa3098b9b9a4b956898a03f566c6b84"
x-goog-generation: 1676471215939976
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29910
x-goog-hash: crc32c=9bpMUQ==, md5=j6MJi5uaS5VomKA/VmxrhA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uai5jR9ZTQjM%2BUH9yuKfUp5loZjdl0ventIONkytKuGiCL6Gn9x1LLT9FXOgMd7hZXQYswL%2FUCblML0jCAcomTYhiqEzKFLdNkh8Dco7DcQOjNU3fgbX91t4C%2BpV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7663fa3b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/biedronka2023-left.png
104.21.14.142200 OK 951 B URL HTTP/2 cdnbun.com/upload/biedronka2023-left.png
IP 104.21.14.142:0
File type PNG image data, 14 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 9532d771684e9bfb6ea034d5b2aa4765
1b520fbfcf20e9ad4835658b777738814ed70db4
8eaac2da0499910681ff7d87f26053c3e5ac87ad56389e6a4b5ce04ec90960a8
GET /upload/biedronka2023-left.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 951
x-guploader-uploadid: ADPycdshyh43cClOXvx3cJN8V5wGnJWyEIxyJ7gk_9En6GFOb-yy3ygDxRP0H7VfjiD3T5sbl_SvGKae7-Ad008rsJ2l
expires: Sun, 26 Feb 2023 15:53:08 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:57 GMT
etag: "9532d771684e9bfb6ea034d5b2aa4765"
x-goog-generation: 1676471217173593
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 951
x-goog-hash: crc32c=rjS8Gw==, md5=lTLXcWhOm/tuoDTVsqpHZQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KryYidGy%2FfmMfIx%2F%2BwZ1iGuEkV2j87%2F91PXXChXjWFSt312QUnmbs9%2Bwgo16hSXgzdkBXgH3NxD8xeBlhgl2pueSwYMliufIsEHQQOMtNTP32Jg1Z04tvikCKFBg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7664fc3b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 060959ae86116aa3d51a999c6f0fa613
a212f5a5a6485dfc0f686a1210924def48222078
d0f3f72b8635291bf8486411680ae2d001581a51f0038536ac78f46968816fa4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a44991ac4cc9f430e8012f166dceabeb
4c7c17f76ff8493e3d5bf2cc2f9b89c9648c3d10
0397123538f70c1e47129f1eb03d06539cc588aeb79fbe0a1a71a5b0c09ee8ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "0397123538F70C1E47129F1EB03D06539CC588AEB79FBE0A1A71A5B0C09EE8CE"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2973
Expires: Sun, 26 Feb 2023 16:51:47 GMT
Date: Sun, 26 Feb 2023 16:02:14 GMT
Connection: keep-alive
cdnbun.com/upload/biedronka2023-outbox.png
104.21.14.142200 OK 54 kB URL HTTP/2 cdnbun.com/upload/biedronka2023-outbox.png
IP 104.21.14.142:0
File type PNG image data, 406 x 264, 8-bit/color RGBA, non-interlaced\012- data
Hash 715374dc8841ea7f0a69e3ccdfa7a164
06707f5264746b8e18b4e162fa8ef66b942a7c02
74667a78aeaf968a453f70400fe6aee95eff52381defcccdbed8145bb2e5aa04
GET /upload/biedronka2023-outbox.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/png
content-length: 53758
x-guploader-uploadid: ADPycdujDbP4Fg1pN5AqQmxTm2iuNE5Qp8Qq94BbbHiJP4Gjv599g0tmaFbod5WBzgjdUmrZY2wKoEQ7QDRWYaTxVvRlzAApEkK6
expires: Sun, 26 Feb 2023 16:25:17 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Feb 2023 14:26:59 GMT
etag: "715374dc8841ea7f0a69e3ccdfa7a164"
x-goog-generation: 1676471219208225
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 53758
x-goog-hash: crc32c=bwgnxw==, md5=cVN03IhB6n8KaePM36ehZA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 863
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xi8%2BmmaB0%2BHL%2F5iLZyIZQXqgpZcrZhmlFDCahTLSjvmq%2Bsdz7NmvqPvzojCbGSFhCFQsbweuaAPTAw8RFlZhkgEDVVCW1t13%2B6Q7PRChJSkQbzYWYrILWe9%2FdWIX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e766a885b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8577a0e13bee69eadfc348680621b132
13fc8ea13f25a30214d20519e240fe8fd85ceac6
3528f55ea7979bb7e44444228d023ea7686bf3eafdf421d264f4356399e5fb17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4383
Cache-Control: max-age=131007
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:14 GMT
Etag: "63face26-117"
Expires: Tue, 28 Feb 2023 04:25:41 GMT
Last-Modified: Sun, 26 Feb 2023 03:12:38 GMT
Server: ECS (amb/6BB9)
X-Cache: HIT
Content-Length: 279
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221677427034002%22
35.241.9.150200 OK 22 kB URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221677427034002%22
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (21681), with no line terminators
Hash b92f5ae98740bd7c0d5a24d91329217a
ac5d7876e45b5a65f81262aec67367a7171939ac
15ae289de59f805e3a4a968ae0e6f221071bd5f8b7afa377d09655fc74ba441f
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221677427034002%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21681
via: 1.1 google
date: Sun, 26 Feb 2023 16:02:06 GMT
last-modified: Sun, 26 Feb 2023 15:57:14 GMT
content-type: application/json
age: 8
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8577a0e13bee69eadfc348680621b132
13fc8ea13f25a30214d20519e240fe8fd85ceac6
3528f55ea7979bb7e44444228d023ea7686bf3eafdf421d264f4356399e5fb17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 795
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:14 GMT
Etag: "63f97cac-116"
Last-Modified: Sun, 26 Feb 2023 15:48:59 GMT
Server: ECS (amb/6BBD)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
23.33.119.27200 OK 345 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash a44991ac4cc9f430e8012f166dceabeb
4c7c17f76ff8493e3d5bf2cc2f9b89c9648c3d10
0397123538f70c1e47129f1eb03d06539cc588aeb79fbe0a1a71a5b0c09ee8ce
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "0397123538F70C1E47129F1EB03D06539CC588AEB79FBE0A1A71A5B0C09EE8CE"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2973
Expires: Sun, 26 Feb 2023 16:51:47 GMT
Date: Sun, 26 Feb 2023 16:02:14 GMT
Connection: keep-alive
263cdn.com/upload/mei6.jpg
104.21.235.73200 OK 30 kB URL HTTP/2 263cdn.com/upload/mei6.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 43b749c8c2ac61d5e0e81ffdc263777d
abf05cea680f98e9142df21497755ac0a5d613a6
f58c58993f0460874cab4aca01fca423c9d54c54fb34cba181054855d3113013
GET /upload/mei6.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 29743
x-guploader-uploadid: ADPycdsAm7jb2BO5KpkdOBfQ4wXSyJ-KosviTZsue5eKObU4-ehYdjZS0qJWlfoc2J4sgdseyspgOQ1FN_DNclt4jrlPIoes4uNL
expires: Sun, 26 Feb 2023 15:21:23 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "43b749c8c2ac61d5e0e81ffdc263777d"
x-goog-generation: 1655330215403651
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29743
x-goog-hash: crc32c=5Xebtw==, md5=Q7dJyMKsYdXg6B/9wmN3fQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uaPlz5ysk1cAYt%2FQbrAgmZiz4nKM0R0%2FyqaYWIX9zk6sr8DytUbQmHiKhu743lMOWZo2JFcNgYNxt2xg6FBTx9kwtmWkPVWWN8knl9eLZHBFCl9sTrPpVNmDILt1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7671c7e88b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/mei4.jpg
104.21.235.73200 OK 24 kB URL HTTP/2 263cdn.com/upload/mei4.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 9b5c88405fe5fcb7fcfb08935ba78c2d
a17bcabe2c076b0120bfba50a0e09bbb02fffdfd
fd791083cadfbf693b47b772ec8d38948347a82a459ca47a34754520f646e1f1
GET /upload/mei4.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 23525
x-guploader-uploadid: ADPycdtkHgdD8w1DOw6JxKMwWooPXgCwqhZuLEXdOprSgQb1C_li2CxZKERSIpG5aQk67hLd6sTJQj32HYTUjuwPc0C9Mg
x-goog-generation: 1655330215236091
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 23525
x-goog-hash: crc32c=/qMyow==, md5=m1yIQF/l/Lf8+wiTW6eMLQ==
x-goog-storage-class: STANDARD
expires: Sun, 26 Feb 2023 16:12:08 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "9b5c88405fe5fcb7fcfb08935ba78c2d"
cf-cache-status: HIT
age: 370
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i8dQAle6WbqN2z53yPsHaKU1QDZJavQaVIF6CJIT2xO55fPhc6EX3bCwnWf44ty7tbbm3W0vXmpS8NnybbTuk8R5hnLpZdEAgq2UxzzL7DyK0nko4lIt708xWABZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7671c8088b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
185.66.200.220200 OK 706 B URL HTTP/2 uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
IP 185.66.200.220:0
ASN #201702 skHosting.eu s.r.o.
Hash 1bb43d87c1294d155b8189f025f08412
24c87c596f31a133fda9a485d600ad95f224039c
4f6e906b9278299eb4cc59c8dffe083e77cdcd046a86d00d951f371cdc886c1a
GET /bnr.php?section=General&pub=593174&format=300x50&ga=g HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: application/javascript
expires: Sun, 26 Feb 2023 16:02:13 GMT
last-modified: Sun, 26 Feb 2023 16:02:13 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
263cdn.com/upload/mei2.jpg
104.21.235.73200 OK 30 kB URL HTTP/2 263cdn.com/upload/mei2.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 12812695421bdd74a5b9146c5261f8c9
91d1bfa53735e4175caefdff483e8b7c4fb1953a
de74884842bd385f1986b839d1046fabb7d7df775302e98284efa0434222d8b1
GET /upload/mei2.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 29998
x-guploader-uploadid: ADPycduYJS7XtazWWAvp3QNTxO8wCx2x-qxD3Tj0GRchvLjAbMzHpV5kL0n67L5wP_kLek4BUpos4QuQp1YI_uiTHP0yLhABY-bQ
expires: Sun, 26 Feb 2023 15:21:23 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "12812695421bdd74a5b9146c5261f8c9"
x-goog-generation: 1655330215104792
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29998
x-goog-hash: crc32c=EvFqRg==, md5=EoEmlUIb3XSluRRsUmH4yQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1846
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tK%2Bx2j3lExxrAc54tgRfpWzGiQi%2BhRThTfyfxeDnEXCXyweCvWPS0QKWwue6LLo56BW3LjbW1HRMDiMXd4pCGB%2BzPCu2lD9Bgzgg6v4xFVd8eGqok8tdRfTjRkUE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7671c7f88b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/ninsf.jpg
104.21.235.73200 OK 13 kB URL HTTP/2 263cdn.com/upload/ninsf.jpg
IP 104.21.235.73:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-14T16:33:38+08:00], progressive, precision 8, 150x150, components 3\012- data
Hash c3a3162630e86d8067db07d6f56f34dd
d811fb4a8dad08d15f9e3cc0127db83c9b44e3fb
6d1b4ce402ec9a99eacaa76873ece37b0e460640ac7ce26e3944fa4a4b986067
GET /upload/ninsf.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 13287
x-guploader-uploadid: ADPycdu8CntlJLxMzFzDialoW3JhTaTsHdFuuikP1OZtqO2qmqF7UXeluS2tNWHnyIXE7Ed3woXnunuEL0-nfiodxXOx
expires: Sun, 26 Feb 2023 15:21:23 GMT
cache-control: public, max-age=14400
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Wed, 15 Jun 2022 21:58:20 GMT
etag: "c3a3162630e86d8067db07d6f56f34dd"
x-goog-generation: 1655330300792853
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13287
x-goog-hash: crc32c=f25FZQ==, md5=w6MWJjDobYBn2wfW9W803Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 370
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8KgLJfkOlgkBCedNCgZz8M4B0838Ll4VWuN4lDaTtpq4q9bmp%2BkYiumLNMpMp2qTAdoPQ3pWAWRV%2Bt33cL%2BVXcOGC9nXbHJEkWgoJ0iOk2qqCjYnWRFhRxRIggwb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79f9e7672c8988b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/mei9.jpg
104.21.235.73200 OK 15 kB URL HTTP/2 263cdn.com/upload/mei9.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 94f8b6198118554cb49cc26fb8cc51b5
639f45c3ce4387e3050c462259c17a9583905075
37655a69a38a039152c7128e20fb128847cf9e9f770daac5fe7bab036d8d9dba
GET /upload/mei9.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 15081
x-guploader-uploadid: ADPycdt-Ou7HPFCjgwcWYj1AVt0dy53WUE9CFQguELpehD7uJuV09HFw0d4GFtUhuFuafXYvSZE35fhcXPHciClLzsdDCh-awKrZ
expires: Sun, 26 Feb 2023 16:12:08 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "94f8b6198118554cb49cc26fb8cc51b5"
x-goog-generation: 1655330215678992
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 15081
x-goog-hash: crc32c=xRrK9g==, md5=lPi2GYEYVUy0nMJvuMxRtQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 370
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3jpisPlK5n3Z%2FageSlyzSMrWuvo5mgPQFcQ4DHeCec1zYnrPRFarl9R6jBD0kDS%2FFg1FS7XlRZnELmHFV71r1DX3Gn4NDBAn%2F86vaD%2FQ6pvoj8vzUOKciFaw66fi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7671c8188b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/mei7.jpg
104.21.235.73200 OK 7.4 kB URL HTTP/2 263cdn.com/upload/mei7.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 200x200, components 3\012- data
Hash b1337ae27241925a79a9d7ecf9600336
74663f4317fbfe5eaa33d3735c156784dbc0f886
a613003fc3c4ddb1ccf54cdadacb4677403e2853fb864c72dfbd050fdacc424b
GET /upload/mei7.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 7405
x-guploader-uploadid: ADPycdvYE9cX50N_rSkgTYP_dJpxwabm-mckpoPiZRfuJGiHyC0g9DCnxNGGDE-XxPJTLH23dSNLuejuMe-imsOB1dI-64pwMYBP
vary: X-Goog-Allowed-Resources, Accept-Encoding
x-goog-generation: 1655330215401703
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7405
x-goog-hash: crc32c=9DZusQ==, md5=sTN64nJBklp5qdfs+WADNg==
x-goog-storage-class: STANDARD
expires: Sun, 26 Feb 2023 16:12:08 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "b1337ae27241925a79a9d7ecf9600336"
cf-cache-status: HIT
age: 371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rQ3HDOOa15Th%2F4x%2FGxLJsNKVtfBYZmBYxBGSNnLPunSF06JFOtiX9%2BxEmDa49aAzw1w2THVt50zfGTJfFkkaAJPEZJWl10hbpZrrBdYbgE852093B%2Fm3wKV6jQwT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79f9e7672ca688b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8577a0e13bee69eadfc348680621b132
13fc8ea13f25a30214d20519e240fe8fd85ceac6
3528f55ea7979bb7e44444228d023ea7686bf3eafdf421d264f4356399e5fb17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4383
Cache-Control: max-age=131007
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:14 GMT
Etag: "63face26-117"
Expires: Tue, 28 Feb 2023 04:25:41 GMT
Last-Modified: Sun, 26 Feb 2023 03:12:38 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 279
263cdn.com/upload/mei1.jpg
104.21.235.73200 OK 29 kB URL HTTP/2 263cdn.com/upload/mei1.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 97e613a555406dafdcdfb6a1f4fa31c0
ebddd985596a1dc61e661d6aa40057aa1e6c0d5b
35b4de3f2d6e3d8053669d7769f42097b521102d88f00396e0ee0f58b0d8308e
GET /upload/mei1.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 29231
x-guploader-uploadid: ADPycdvZbKH9owQE4hzy3TdrL4_h-wUGRNV4nqoBpqbuedcaYQZyIB40PXvho7U4lLTZQ99TV59yZRh_CDk_J6C1jUYf7T_3bVDi
expires: Sun, 26 Feb 2023 15:21:23 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "97e613a555406dafdcdfb6a1f4fa31c0"
x-goog-generation: 1655330214988570
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29231
x-goog-hash: crc32c=OqLDbA==, md5=l+YTpVVAba/c37ah9PoxwA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DiD9AWI%2BGPdIIuuEnrfR8wHusuwPiK4Dklc28fLhAIOjJUcDbierd78gNqfA6A2v7CmMHnxDB4jLWxK2Y8yc6kXIzkoTNG9IllOOSElaR%2BGaFINYarp51RZwBaRl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7671c7c88b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/mei5.jpg
104.21.235.73200 OK 35 kB URL HTTP/2 263cdn.com/upload/mei5.jpg
IP 104.21.235.73:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x298, components 3\012- data
Hash c6dcc38aa37b21ea37def7e8d5f163a8
7196c0a81ec4d44b24d9c1ab1d6f7a537c27aee4
414939ca7bf6954df8f2905e62e3dfef00969ddc9d899bdb72bda0ce473b491e
GET /upload/mei5.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: image/jpeg
content-length: 35405
x-guploader-uploadid: ADPycdunPU4RpdhOI1PyGTvjX2m7-vDGXl7FrNRpCQbo48andoDVmeqK5SL_3LqnfJWQa_GIxQwHw9iFQ89nvAPaCtPT
expires: Sun, 26 Feb 2023 16:12:08 GMT
cache-control: public, max-age=14400
vary: X-Goog-Allowed-Resources, Accept-Encoding
last-modified: Wed, 15 Jun 2022 21:56:55 GMT
etag: "c6dcc38aa37b21ea37def7e8d5f163a8"
x-goog-generation: 1655330215324493
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 35405
x-goog-hash: crc32c=fQuUpg==, md5=xtzDiqN7Ieo33vfo1fFjqA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 371
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pl258D3cJAMZ0Q2wDhTQUaO07t6k6dGQ39mi9LAR8SOrwYnkkoDKPz3vexqj9wF%2B6iwMk69noXQQTzNPILId9M3v4qJW%2Fs%2FsNrglwfmTmAjAX%2BhRu5lD0Y1v%2Fa7G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79f9e7678d6788b9-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8577a0e13bee69eadfc348680621b132
13fc8ea13f25a30214d20519e240fe8fd85ceac6
3528f55ea7979bb7e44444228d023ea7686bf3eafdf421d264f4356399e5fb17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:14 GMT
Server: ECS (amb/6B98)
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 8577a0e13bee69eadfc348680621b132
13fc8ea13f25a30214d20519e240fe8fd85ceac6
3528f55ea7979bb7e44444228d023ea7686bf3eafdf421d264f4356399e5fb17
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 26 Feb 2023 16:02:14 GMT
Etag: "63face26-117"
Server: ECS (amb/6B96)
Content-Length: 279
region1.google-analytics.com/g/collect?v=2&tid=G-LW7434MYMN>m=45je32m0&_p=844238783&cid=1547773761.1677427430&ul=en-us&sr=1280x1024&_s=1&sid=1677427429&sct=1&seg=0&dl=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041&dr=http%3A%2F%2Fvanityshepherd.cn%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.34.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LW7434MYMN>m=45je32m0&_p=844238783&cid=1547773761.1677427430&ul=en-us&sr=1280x1024&_s=1&sid=1677427429&sct=1&seg=0&dl=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041&dr=http%3A%2F%2Fvanityshepherd.cn%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.34.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-LW7434MYMN>m=45je32m0&_p=844238783&cid=1547773761.1677427430&ul=en-us&sr=1280x1024&_s=1&sid=1677427429&sct=1&seg=0&dl=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041&dr=http%3A%2F%2Fvanityshepherd.cn%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://hrpmmr.cn
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://hrpmmr.cn
date: Sun, 26 Feb 2023 16:02:14 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5d5cf3f527452c87e71b812f75d18aff
e5c41bc319d5831248d3b855ceedf0f9fcede64b
f6a19fa64c95712fdbcf654cc999a244f79fb0dc38b66745a08afad747f9e69c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6A19FA64C95712FDBCF654CC999A244F79FB0DC38B66745A08AFAD747F9E69C"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4595
Expires: Sun, 26 Feb 2023 17:18:50 GMT
Date: Sun, 26 Feb 2023 16:02:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5d5cf3f527452c87e71b812f75d18aff
e5c41bc319d5831248d3b855ceedf0f9fcede64b
f6a19fa64c95712fdbcf654cc999a244f79fb0dc38b66745a08afad747f9e69c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6A19FA64C95712FDBCF654CC999A244F79FB0DC38B66745A08AFAD747F9E69C"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4595
Expires: Sun, 26 Feb 2023 17:18:50 GMT
Date: Sun, 26 Feb 2023 16:02:15 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 5d5cf3f527452c87e71b812f75d18aff
e5c41bc319d5831248d3b855ceedf0f9fcede64b
f6a19fa64c95712fdbcf654cc999a244f79fb0dc38b66745a08afad747f9e69c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6A19FA64C95712FDBCF654CC999A244F79FB0DC38B66745A08AFAD747F9E69C"
Last-Modified: Sat, 25 Feb 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4595
Expires: Sun, 26 Feb 2023 17:18:50 GMT
Date: Sun, 26 Feb 2023 16:02:15 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F97a100f5-572c-40d6-8b55-faec200f25c8.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F97a100f5-572c-40d6-8b55-faec200f25c8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c25f9df9d87b9608ccf4f6fdfca5cfcc
449d8e8ed8fef5b707c097c9c5be34cee081a2c8
a8f8b1e6800092e64e3f43fe73a6ed8dcaed508f28a0fd07ceb54e5e345a424c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F97a100f5-572c-40d6-8b55-faec200f25c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5874
x-amzn-requestid: 957565fc-c05c-42f5-9f41-bb61e61513df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A6iywGvLIAMFvLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fa7e77-18faffe055ae704c18454ba3;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 21:32:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: p6r2zWlplug8G9bciyS_kHBYFUpEgukU8XzXNaGsFXcRvg25UgKASA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 22:02:33 GMT
age: 64782
etag: "449d8e8ed8fef5b707c097c9c5be34cee081a2c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F016462a1-fadc-4180-93f8-995cab0e1395.jpeg
34.120.237.76200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F016462a1-fadc-4180-93f8-995cab0e1395.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 32d08a3dc7c1e88313f487d74babdfe5
12f4693c36cb8980a5c740b735b7cf64542734e4
ae717a6760a0a6c179b950643eb3590c0ab5ec6cf159061246c6e8fc38a7ae89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F016462a1-fadc-4180-93f8-995cab0e1395.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8170
x-amzn-requestid: bd3ecc5c-1efc-4589-8789-48693fbfa6d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A6i2sGKkIAMFXtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fa7e90-7acdeb5b05f8bcf726309125;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: OIer9IgcIIbMg6EdrYFpojiEtN5oxPBijKFbX4UzURWTKha09i8NcQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 1d0860167e2100a6d1cd9c0213c2b8e8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 21:53:01 GMT
age: 65354
etag: "12f4693c36cb8980a5c740b735b7cf64542734e4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9dec12-5dfe-426d-81c1-b448af7d92a4.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9dec12-5dfe-426d-81c1-b448af7d92a4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d0cba5c9e3e07db2f8dbdcb15ae7d352
d4cb67ae7d5eebe92b5149b56123b792c62bf916
440fa87101c072f931a38f2cfa08e39de26627333eca9a5fcf126d19cb636248
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f9dec12-5dfe-426d-81c1-b448af7d92a4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10922
x-amzn-requestid: 7570e40d-8924-4bec-bbfa-ec21196d61fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A6k-VGr4oAMFfYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fa81f5-778dfbbb6c0aeadb56585d14;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 21:47:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: GQb4lWWejrVf_EftwWNniDxI8UAEd_rgPvmsbqXMMJ9ZPNjt4ThX0A==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 0906d4887f6625f4a4467d8d4fd268d2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 22:15:07 GMT
age: 64028
etag: "d4cb67ae7d5eebe92b5149b56123b792c62bf916"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F475b1534-7068-4e8f-b3cf-2b8383c868c7.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F475b1534-7068-4e8f-b3cf-2b8383c868c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a071a3ba84b6fa6254044ab8378a2a0
5d9d0c12c4b9bcdac503d9089c158ea1281644fb
557c482e3f008a13dc0821d2dddd59d6d352672f9afab2d2c42b15d4ab256b08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F475b1534-7068-4e8f-b3cf-2b8383c868c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10195
x-amzn-requestid: a9b85d09-7704-4d07-bcc0-4e8b2db6f94e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A6jiaE_aoAMFjJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fa7fa8-6caf97ad35b0949f7cda0c10;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 21:37:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: tUzVVz2Otd77Q8FGmm7SwXxMgqQBSzpWNmfXu2Ug8kkvedqfaKx3_Q==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 22:03:16 GMT
age: 64739
etag: "5d9d0c12c4b9bcdac503d9089c158ea1281644fb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
34.120.237.76200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a5f3d376fe6a3a78a5d1fe136f962fb
3e9b03cc296e954d63526a4e7e75beea3130fc3b
c8cf4f1c0352102764247e4dc5a2076921e0eaa18bfd110e5b0b97a55c706690
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb97e8f2e-6da0-4f8b-b12c-1af676e3e4da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9093
x-amzn-requestid: 3fd9f8c8-cf10-4222-a2cc-5f18ff7b2e9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Az9D3HqmoAMFeBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f7dbb2-352315613cc0c2bc7eb28e05;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 21:33:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: bGDTF9U77Y1pmqtYk-yDa2GsiRraTcwCOBV-yAzDPT2PvS89NeCtZg==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 21:35:01 GMT
age: 66434
etag: "3e9b03cc296e954d63526a4e7e75beea3130fc3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f98177b-c275-4a6b-b962-9ab32af49803.png
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f98177b-c275-4a6b-b962-9ab32af49803.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fc698b1dd0ccb5bc3621d9d45ec217bb
48e953f7189e8b37a933f3fb6be24c67d308484b
130160ed336a6e4927417e094ec79639bbea7538313f780175f8a5b5e9095009
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f98177b-c275-4a6b-b962-9ab32af49803.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12088
x-amzn-requestid: 056c9afd-4245-4aef-8797-74ded6964bc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A6k9sFMloAMFveQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fa81f0-3aa24f1313f08f236ff37a15;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 21:47:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: JBdW8aVlVX4Jj7ZNVwqMBirmlG6bBfZyut_ITqLsPqK_l989XHBdsw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 21:56:41 GMT
age: 65134
etag: "48e953f7189e8b37a933f3fb6be24c67d308484b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash de84eac72dc5ebd0641939534c17ba18
e7e18469e2cca9fad0d728c8c143393993cbb6d6
a27a41a0f00f94ab4e45552846be53e2776e1346a230058340a1685327fc3600
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 02 Mar 2023 15:18:06 GMT
ETag: "e7e18469e2cca9fad0d728c8c143393993cbb6d6"
Last-Modified: Sun, 26 Feb 2023 15:18:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 99
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79f9e76eddb01c0a-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash de84eac72dc5ebd0641939534c17ba18
e7e18469e2cca9fad0d728c8c143393993cbb6d6
a27a41a0f00f94ab4e45552846be53e2776e1346a230058340a1685327fc3600
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 26 Feb 2023 16:02:15 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 02 Mar 2023 15:18:06 GMT
ETag: "e7e18469e2cca9fad0d728c8c143393993cbb6d6"
Last-Modified: Sun, 26 Feb 2023 15:18:07 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 99
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79f9e76ee842b50c-OSL
hm.baidu.com/hm.js?ba99808308e7272d58c43367a11d1204
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?ba99808308e7272d58c43367a11d1204
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (629)
Hash 2a17865c99d95e986941be07df70bb1a
3f2930afe04fc9a60658528d74c634f517b6b935
6eb561b2f44e277316ba9e64b9b14eb144c769fa9555f178f314191634a58c7a
GET /hm.js?ba99808308e7272d58c43367a11d1204 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11267
Content-Type: application/javascript
Date: Sun, 26 Feb 2023 16:02:16 GMT
Etag: 48b4806b146710007944cd1b25745818
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=3BBF05C52E6FA355; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?8b68846a3ac1709b0ec7199084ee5ea8
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?8b68846a3ac1709b0ec7199084ee5ea8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (620)
Hash 970f4ce5dd31277447a271a0b2d03229
f2917ca059b31117acc9e42f5c52246326f9a8fe
71f76fa24991e656d3e69b5f5f85607b5c17aeb0957bbd26a7aa4826d47cf496
GET /hm.js?8b68846a3ac1709b0ec7199084ee5ea8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Sun, 26 Feb 2023 16:02:16 GMT
Etag: 8d849c81e52caeb745dd744c0233aa8d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=2E6A250BF603AC5E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?b521817f22507716e364b3fe28644f8b
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?b521817f22507716e364b3fe28644f8b
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (657)
Hash 93a06a99fd40c783a60464f989dc673e
61aad43e9282f6c44f79059a6e126c65c8d9bc33
e8366feeed640502b35bfa6aa4a70c0d306a272c9623318bd6452104e32665c3
GET /hm.js?b521817f22507716e364b3fe28644f8b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11295
Content-Type: application/javascript
Date: Sun, 26 Feb 2023 16:02:16 GMT
Etag: 31749e150b9bd9c2f96df8b6768e019e
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8816138957EA8ECB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?bd098af67cb27c1b7ff4fdb60e92b1d7
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?bd098af67cb27c1b7ff4fdb60e92b1d7
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (668)
Hash 2f3dacc4142a02f7203fe0b12d3210f2
48a87131901e7a856ffad300bc34e932592f4a65
e615676238cf2bd5088ebbb1a1278232fec40bd25b3182728338912375887e15
GET /hm.js?bd098af67cb27c1b7ff4fdb60e92b1d7 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11306
Content-Type: application/javascript
Date: Sun, 26 Feb 2023 16:02:16 GMT
Etag: 8d01f871e4392c6610b63881dedec6db
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=34DB4620A7ACEFA3; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=710532909&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=710532909&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=710532909&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 26 Feb 2023 16:02:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=9A6B67E845EC8490; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=670792935&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=670792935&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=670792935&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 26 Feb 2023 16:02:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A29BB7B8861BC670; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1969407174&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1969407174&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1969407174&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 26 Feb 2023 16:02:16 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=7C4D1B007449BB18; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1238458385&si=bd098af67cb27c1b7ff4fdb60e92b1d7&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1238458385&si=bd098af67cb27c1b7ff4fdb60e92b1d7&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1238458385&si=bd098af67cb27c1b7ff4fdb60e92b1d7&su=http%3A%2F%2Fvanityshepherd.cn%2F&v=1.3.0&lv=1&sn=59107&r=0&ww=1280&u=https%3A%2F%2Fhrpmmr.cn%2FerEJMBNK%2Fbiedronka2023%2F%3F_t%3D1677427429041%231677427430138 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Sun, 26 Feb 2023 16:02:17 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=D3348039BBE7D4FF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faef8945d-edda-49e1-bd58-cc34c3e9fd07.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faef8945d-edda-49e1-bd58-cc34c3e9fd07.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 920ab43a70c8bffa31ec291817a7556e
6159aae32737e8702cd852034ee43cfb70cfaa8f
3923fb68f2964cfe113dbc446e13847102de24ab5e35b715959c9a6c9626ed18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faef8945d-edda-49e1-bd58-cc34c3e9fd07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12321
x-amzn-requestid: bb835ed8-6aac-446a-aa1e-5a320df62e2b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A6jkaFmUIAMFm8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fa7fb5-5b55fca4411e656a4aac583e;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 21:37:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PwfeFrp6hiXhx4-pD5-D-nAjBKnlov2AHQynuZEH4s-aG0hY1C69Tg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 50faaaa196a6b0875217ef7827f97d7c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Feb 2023 22:17:17 GMT
age: 63905
etag: "6159aae32737e8702cd852034ee43cfb70cfaa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
172.67.152.134200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP 172.67.152.134:0
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/css
x-guploader-uploadid: ADPycduCHwg6n53VPzNb_-57qJzhoPJbEBdMgpsWgTX19t4NIh3Tdte6MCXenDGQTAuiJrpSRG3G9WDZErClLNvZVXhXccOSWw
expires: Sun, 26 Feb 2023 16:58:05 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2xeZUuWc5WSnwVTj6qwmpAJMumPPXlytwMeFxnbABiI6FDIFc0lfwwyZgqauWPoICEkDGvslK32AVcPS5ZYAKNCfpZmU8O6eb46XeUVZPT72Tg6ik5qSKVQrSsrPO7oFyKA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7642ec4b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
172.67.152.134200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
IP 172.67.152.134:0
GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycds_5oPtcr3KFpC_u7Lnvdlqz8VeCGxAgHcXFP3zMljDMh6Q0ifyAwrLV7e0dbEbUBwQbF9kY0g0GrHWdqicRh8
expires: Sun, 26 Feb 2023 14:58:01 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Db6%2FOg95nwL5wdK%2F7r07qNNoCa67mTn6ZEm4vQeOXTL%2BinqXVPIDU6ANXn6FlDEf79dWZhPleX6yZDRTGO2pjM85CksgNS5hQPSvKVRZaPLguz4Rm5FMkPlrT8APryxoxAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7643eccb4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
172.67.152.134200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
IP 172.67.152.134:0
GET /npm/lazyload@2.0.0-rc.2/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdsQwI6S5jC2ZwwNbaEnMvjelWJ3GXYdnwkp6yGGRsWcMv2CGKN45430-s2v57JOsXldQJq3rMwQOTmm_DkHtW4
x-goog-generation: 1647502963816044
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4798
x-goog-hash: crc32c=lted8w==, md5=3G3pgTxxS6mXM8pPtdOh+g==
x-goog-storage-class: STANDARD
expires: Sun, 26 Feb 2023 15:58:02 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:42:43 GMT
etag: W/"dc6de9813c714ba99733ca4fb5d3a1fa"
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ilE7iZc%2F1P%2FJyrG1GY4lDWcG9gMQvffH1DrFVZnTKm10sIu59LD%2BUg2bVtozRe6JB66DaVJ13ZDA5Jm%2BplZwUeG7GJgD4ZSkhollabyJswk8ZUVQAvKvon7Ko1vMhfh5llk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7644edcb4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=167742733340199&xtt=3992659
185.66.200.220200 OK 0 B URL HTTP/2 uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=167742733340199&xtt=3992659
IP 185.66.200.220:0
ASN #201702 skHosting.eu s.r.o.
GET /bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=167742733340199&xtt=3992659 HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: text/html; charset=UTF-8
expires: Sun, 26 Feb 2023 16:02:14 GMT
last-modified: Sun, 26 Feb 2023 16:02:14 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
hrpmmr.cn/erEJMBNK/biedronka2023/?_t=1677427429041
104.21.47.123200 OK 0 B URL HTTP/2 hrpmmr.cn/erEJMBNK/biedronka2023/?_t=1677427429041
IP 104.21.47.123:0
Analyzer Verdict Alert fortinet Malware
GET /erEJMBNK/biedronka2023/?_t=1677427429041 HTTP/1.1
Host: hrpmmr.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://vanityshepherd.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: pType=gc; expires=Sun, 26-Feb-2023 16:14:13 GMT; Max-Age=720; path=/; domain=hrpmmr.cn
biedronka2023-tthh1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.hrpmmr.cn
biedronka2023-tthh2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.hrpmmr.cn
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dp3C%2F6V8Ab%2F2EgStpH0YTlig60Z3hdBaMMug2qcxFn%2BfGn%2B6bLVl6YZD3wikJNLr7OwIEKXFgPf8BxVFjDNOx%2BNlz89YH85xwN3pJxYSUQlyi9EBLIV8lgU3Lx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79f9e762394c0b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
172.67.152.134200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
IP 172.67.152.134:0
GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdujKqP4OmsICcw4by2ej4M3gF2bmp67KcND5Yd7ZkChGu92L3U7j930k4J7s5KmD98KzStiLKDZt_7_8jjTVv4
expires: Sun, 26 Feb 2023 13:58:00 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bTty4EAOiyTJhjyGFbXaxb5bZGvFRf%2BYlslkuQTn0x%2FkAduh13tZDtoepxmLBc4st1%2Fi77ZOl5y1Bvuwtn9uxt7tMHtjptaETON6Rb8we71oeqyaAhGYgn3NZnKocNPvaUs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7644edab4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bonepa.com/4fe48aebd6/4f59451604/?placementName=Pop&is_first=true&randomA=0_7808&maxw=0
185.66.201.42200 OK 0 B URL HTTP/2 bonepa.com/4fe48aebd6/4f59451604/?placementName=Pop&is_first=true&randomA=0_7808&maxw=0
IP 185.66.201.42:0
ASN #201702 skHosting.eu s.r.o.
GET /4fe48aebd6/4f59451604/?placementName=Pop&is_first=true&randomA=0_7808&maxw=0 HTTP/1.1
Host: bonepa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Feb 2023 16:02:17 GMT
content-type: text/html; charset=utf-8
set-cookie: shown1=0; expires=Mon, 27-Feb-2023 16:02:17 GMT; Max-Age=86400; secure; SameSite=None
used_ad2633134=1; expires=Mon, 27-Feb-2023 04:59:59 GMT; Max-Age=46662; path=/; secure; SameSite=None
total_impressions=1; expires=Mon, 27-Feb-2023 04:59:59 GMT; Max-Age=46662; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
bonepa.com/js/responsive.js
185.66.201.42200 OK 0 B URL HTTP/2 bonepa.com/js/responsive.js
IP 185.66.201.42:0
ASN #201702 skHosting.eu s.r.o.
Analyzer Verdict Alert fortinet Phishing
GET /js/responsive.js HTTP/1.1
Host: bonepa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 26 Feb 2023 16:02:14 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:52:39 GMT
etag: W/"63627627-e32"
content-encoding: br
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
172.67.152.134200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP 172.67.152.134:0
GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hrpmmr.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 26 Feb 2023 16:02:13 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Sun, 26 Feb 2023 16:52:00 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 152
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wxlPlBDlKVmv%2F8IEFAh1ATXPLJ15ziEjkTqeb1yRd5NUVwiROtdWyul71vstOdsAdTkwWCi1t5k2dMM8t3RHUPSM365MeuIJDVmI3zsWs%2FyhtvkpWl6SYUZw%2Fx%2FR6yJGXyg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79f9e7644ed8b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2