m.bms6jb.cyou/ead3Bmd7WndEdAlFAV8FfCxlK2dma1MPcil2BEsoSjhYEQxHRFMnQDAyDhdDdTdlDTAiNHksABchO049WkwJTUY7&p=xzvbms1663672252618
188.114.96.1200 OK 478 B URL HTTP/1.1 m.bms6jb.cyou/ead3Bmd7WndEdAlFAV8FfCxlK2dma1MPcil2BEsoSjhYEQxHRFMnQDAyDhdDdTdlDTAiNHksABchO049WkwJTUY7&p=xzvbms1663672252618
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 9fba13ff9c123353a57f1348be21cfd8
57b87bc12d66ca5bdf5592502865d6f16782b33e
cdd4b99ea5931bfd1c45af7b31a9e14f204f3999c2aca033920503f5982456a7
GET /ead3Bmd7WndEdAlFAV8FfCxlK2dma1MPcil2BEsoSjhYEQxHRFMnQDAyDhdDdTdlDTAiNHksABchO049WkwJTUY7&p=xzvbms1663672252618 HTTP/1.1
Host: m.bms6jb.cyou
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 13:11:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST,GET,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,X_Requested_With,X-PINGOTHER,Content-Type
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d41JapH%2FzKH3L3G%2FERj3LqmFLhWt5NjVpfL2LUeABNX76QQEMnKNQ4F35Y55miLScZC1BhAAxdyzBVYAo31ZcihiRk3405aCstDyC%2F58K5C23PEenxIgowPshBC5Wabb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74dacf046bac1c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 12:13:07 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qMmqajuYkoVlojb7hAKtlCnr9bU34aGgoefVh6unNULkcWQo2bsTFA==
Age: 3517
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 861cfa99de956423d917ed0ddbea4b9c
ad65dbc394b48b04a45c205f56af296c8d008db4
5c706b2718b1698995f4feb91223779aef4bf6dc967c31f9ef9a93873197d5f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5815
Expires: Tue, 20 Sep 2022 14:48:39 GMT
Date: Tue, 20 Sep 2022 13:11:44 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 1d8cf7c8865ed1078c19a98771ad34ca.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7iIcLhIX7OcqNhdjErcyxFgD9lraHP23QpxEGFjs4k-H_UM4tRinbw==
age: 30991
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
m.bms6jb.cyou/favicon.ico
188.114.96.1200 OK 80 B URL HTTP/1.1 m.bms6jb.cyou/favicon.ico
IP 188.114.96.1:0
File type ASCII text, with no line terminators
Hash 476ecd319ee68b0885b615aa8bfa6906
1d71f71b7e583a59e3d8aca0a80b1bf097723e4b
240177e6ac959ef0ddad4ce56d43b894c7b0ffb7f6c3061ce7cf7759dbf8da30
GET /favicon.ico HTTP/1.1
Host: m.bms6jb.cyou
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://m.bms6jb.cyou/ead3Bmd7WndEdAlFAV8FfCxlK2dma1MPcil2BEsoSjhYEQxHRFMnQDAyDhdDdTdlDTAiNHksABchO049WkwJTUY7&p=xzvbms1663672252618
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 13:11:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST,GET,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,X_Requested_With,X-PINGOTHER,Content-Type
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 20 Sep 2022 13:11:44 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jP7rU294UqocbtLBhhhQ5j46gaL58%2BuLkSur1TzXkeVl%2BLQ71%2ButZF66tpj%2Bc41%2BMo6t1SziFvubm5EV1mdWCLtZG5lIcY9lMtWWf0ir7LcqiHF2wTP3hv4enekfv%2BW3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74dacf06dea91c0e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 118aeca503d00bd4aa2313cd3e431a12
3a344111c77d845471f862b51a47559ff41a2b48
fe093b0970b06be21dda58f8c220efbfc333f88cc956becdaf8156b2f7aca071
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "FE093B0970B06BE21DDA58F8C220EFBFC333F88CC956BECDAF8156B2F7ACA071"
Last-Modified: Tue, 20 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 20 Sep 2022 19:11:44 GMT
Date: Tue, 20 Sep 2022 13:11:44 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 13:03:22 GMT
Expires: Tue, 20 Sep 2022 13:06:41 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: GgaOWuYruuXp1m2D6pxBniAczYe-OHnY1_RJbP67ttgN1UaGPWxfsw==
Age: 502
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 118aeca503d00bd4aa2313cd3e431a12
3a344111c77d845471f862b51a47559ff41a2b48
fe093b0970b06be21dda58f8c220efbfc333f88cc956becdaf8156b2f7aca071
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "FE093B0970B06BE21DDA58F8C220EFBFC333F88CC956BECDAF8156B2F7ACA071"
Last-Modified: Tue, 20 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 20 Sep 2022 19:11:44 GMT
Date: Tue, 20 Sep 2022 13:11:44 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash edf07cd621f733b0eb50c632387ebf4f
61a082d26501c2c8d481b1676d0de2e585269613
e5c4324e4c55824b86f48bf0b9a1d317a82e7d3c19bdea7a91d78ce98d68a980
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4381
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 13:11:44 GMT
Last-Modified: Tue, 20 Sep 2022 11:58:43 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
151.101.85.229200 OK 21 kB URL HTTP/2 cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
IP 151.101.85.229:0
File type ASCII text, with very long lines (65317)
Hash b5ae87c0e4dd241b533e67053b0b719d
6b7b568694a95d81a94dea9ef7a85d1317d448dc
5bae5997fbca925ac6e52be8163ca897e751fcc9331552e0f77a22dd35b64521
GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 20 Sep 2022 13:11:44 GMT
age: 3671584
x-served-by: cache-fra19147-FRA, cache-bma1665-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20556
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
151.101.85.229200 OK 2.2 kB URL HTTP/2 cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
IP 151.101.85.229:0
File type ASCII text, with very long lines (16263)
Hash bd3ea59ca12635e32402ec20cb196249
b1bfdaba4a00c2932245ff9eabea38016f9c9069
b99f8f79de257275fdbf6a8e0eb4652b0d69429552234b1f444c08ae85000341
GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 20 Sep 2022 13:11:44 GMT
age: 15100011
x-served-by: cache-fra19146-FRA, cache-bma1665-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2162
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a2b2bc6448d05a22ba8e74af121a64f3
36edd78be776df89ad54191df77f81b6782ac542
ebd6e74a22c3d26d24f368c5ebd3f5f386fd78d720931d826c8b2296cd51805f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 1.0 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
File type gzip compressed data, from Unix\012- data
Hash ff7aee5f06650c55e96910bd1ce4f7af
18ae5a15dd9fa44d4e5b5c8d45a1ac1f78679418
4e0191415e7823ab8634738a2106f6fd6ffb87e911d4752191cea88d0cc5d264
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E236DD7748836BAD3E41627AD8FABC3238B286847EDDC9F865A853668728AE49"
Last-Modified: Sun, 18 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8894
Expires: Tue, 20 Sep 2022 15:39:59 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
142.250.74.161200 OK 14 kB URL HTTP/2 1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
IP 142.250.74.161:0
File type PNG image data, 350 x 251, 8-bit colormap, non-interlaced\012- data
Hash ff055162c5d233506eece3fb69a47e74
49812e303ae6674819b6a7a6e0721d555ef64df4
7e46c8bcf219a0d6f0f3d5c5b027ed613678a0c54d637172d6495f428ff80150
GET /-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_inbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13695
x-xss-protection: 0
date: Tue, 20 Sep 2022 12:35:36 GMT
expires: Mon, 22 Nov 2021 12:23:38 GMT
cache-control: public, max-age=86400, no-transform
age: 2169
etag: "v630"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdnbun.com/upload/kruidvat-m.jpg
172.67.159.172200 OK 18 kB URL HTTP/2 cdnbun.com/upload/kruidvat-m.jpg
IP 172.67.159.172:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 206x60, components 3\012- data
Hash 86b8f0d753627f7f5fa05a045f74ccf3
61c484373ede98a3a9cddc188f3a19f52f9ab382
52bc5722fe383f28e7741ed98542a85b5aff8c4e7ec7f1473ff9c0dcedc303b8
GET /upload/kruidvat-m.jpg HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 17930
x-guploader-uploadid: ADPycdssZ-PHZJaMmz9RQ0s-ZLyTWT1Pwz4vydC_g8xwospmX3gDxxWuRrOo40Sfd6NaUI1vgxMOfbxtpbrACDhw5HSGa01j_JON
expires: Tue, 20 Sep 2022 12:50:41 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:34 GMT
etag: "86b8f0d753627f7f5fa05a045f74ccf3"
x-goog-generation: 1663149634215759
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 17930
x-goog-hash: crc32c=61HQsg==, md5=hrjw11Nif39foFoEX3TM8w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FJoLkRR7DJumfY8YMtlRjNSpHGOG34hCBBC0Nj8PX3aoXsIFUepvEe7i5g6raPuddqbVbZMYyzSpQgEhmnx6Taeo1bD%2BwkKcPEtaXgLOqySVJr5sBpHeVGdbPpeL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abec1b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/kruidvat-show.jpg
172.67.159.172200 OK 53 kB URL HTTP/2 cdnbun.com/upload/kruidvat-show.jpg
IP 172.67.159.172:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x345, components 3\012- data
Hash 0e3e5c194ac3df4a7cb8ac8fb826d590
5c09df7cb848e4440c95db92665b706821fe6e9a
9e1d1bee532f094608d756ebeabfb06de4a6e936840db5843b43c2e8246e8212
GET /upload/kruidvat-show.jpg HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 53430
x-guploader-uploadid: ADPycdvUuMO3xIEfiVS4cFstaSge8JIb1ks1knwIBVcCXEeOj_3H2wzA1fDkSqvZYP97gDjQYDDn074h_ubD9Uc_v2oLoT-yNbNq
x-goog-generation: 1663149636199509
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 53430
x-goog-hash: crc32c=CUdoMA==, md5=Dj5cGUrD30p8uKyPuCbVkA==
x-goog-storage-class: STANDARD
expires: Tue, 20 Sep 2022 12:50:41 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:36 GMT
etag: "0e3e5c194ac3df4a7cb8ac8fb826d590"
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l0L%2FzjGB4mEPTiZXAXU%2BUfZODnrFcHgwpAWg0WG2uwKT1wXAYXv38S0xYse97ubyh0x4l17%2FMQSLrAwn7oyTMeEdaKPUVJX6HWbx6HvqvKSyZ8ZbyDvhyyS%2Fy98A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abec6b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
142.250.74.161200 OK 181 kB URL HTTP/2 1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
IP 142.250.74.161:0
File type PNG image data, 497 x 308, 8-bit/color RGBA, non-interlaced\012- data
Size 181 kB (180954 bytes)
Hash fd835c1f326d3e7da0d9839550f66723
5004618bc15011d7d0f569f60f900d076b164b3d
b2286c3ed452ee4eeb15d2044a90cfc456d4789b2fdbe42bb9e023c9da18e4a8
GET /-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_outbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 180954
x-xss-protection: 0
date: Tue, 20 Sep 2022 12:35:36 GMT
expires: Wed, 17 Nov 2021 05:57:49 GMT
cache-control: public, max-age=86400, no-transform
age: 2169
etag: "v632"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdnbun.com/upload/kruidvat-left.png
172.67.159.172200 OK 986 B URL HTTP/2 cdnbun.com/upload/kruidvat-left.png
IP 172.67.159.172:0
File type PNG image data, 21 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 181a4f9f751a8a3883769b16c8914e01
a8ad90ed6c6f8e3fa5d5b42e8d806727cda93fe9
07c11af64888cf88b7c49772cf390d4530d34d7a07a1cd7dcc726aad598a50af
GET /upload/kruidvat-left.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/png
content-length: 986
x-guploader-uploadid: ADPycdtrnjxcOyfrODsrQQHoz3hYs3XtN_YHh4kK5FO13WyfYhTekoEqE-sCLU-WnQdfPAA746PnzHdkmpm3LVk5ub0cG0OtVEWJ
expires: Tue, 20 Sep 2022 12:14:22 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:34 GMT
etag: "181a4f9f751a8a3883769b16c8914e01"
x-goog-generation: 1663149634203374
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 986
x-goog-hash: crc32c=XeWglQ==, md5=GBpPn3UaijiDdpsWyJFOAQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2t%2Byz4cCzfW%2BjJq9xmu9pVnOry1M9crHgXzykuAxV038ni0Q6m1vPQa%2BXAY1o4dFK%2Fk8R2AnxwIBZeE2KUWN31UNZjEFJU8sav45TSK7G8MPSjtvkHjlc3iju8xJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abeccb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
172.67.199.208200 OK 8.1 kB URL HTTP/2 cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP 172.67.199.208:0
File type ASCII text, with very long lines (21060), with CRLF line terminators
Hash a3a3fa1ae67946642980ca63c0bd8b3f
8ab09489dc8ca2805a6526b408c7d9f7018569f3
9f6abf901ff4ac8bcaf1a97b9f226f44306d7e693d058087dd9064082998ce5a
GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Tue, 20 Sep 2022 13:14:40 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sVqZ30SSZwPtxun3XpM5VhM2ofL%2BECGGHY2iDQcC1lTD%2F2qynceSgu%2F8GdtBpyI0fDHCbdqtbBMH3ZbBMIBVaE0dPPiWChqJxzN3IcpAqv984jaqxmpOUpFio9mNQ7n9aro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf09d8e2b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/kruidvat-box3.png
172.67.159.172200 OK 31 kB URL HTTP/2 cdnbun.com/upload/kruidvat-box3.png
IP 172.67.159.172:0
File type PNG image data, 300 x 214, 8-bit/color RGBA, non-interlaced\012- data
Hash 75d1121191ce9d398e4b785d327a8835
a5ac3fc09c0fdc61a741596aaa9e17a809a2a56c
933edd77e50e90a7d300d67676e78e869716b0ca37709db220a1b926980333b4
GET /upload/kruidvat-box3.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/png
content-length: 30786
x-guploader-uploadid: ADPycdtH8foIqIYFK9gh2iwtZY17KYJ_7oIx7sF4AGM9G_7tfXJHtgJP6-2SLDbNvv0X-VlbyxIuIiyS4IYAvnrQFOxNuJHBQUFy
expires: Tue, 20 Sep 2022 12:49:08 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:33 GMT
etag: "75d1121191ce9d398e4b785d327a8835"
x-goog-generation: 1663149633182853
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 30786
x-goog-hash: crc32c=DOlKrA==, md5=ddESEZHOnTmOS3hdMnqINQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LgIa7qlPxj8bsW8T%2F1tcPmmLICN2njCdK8Wzd4igz0YD5wKscRklElSMCD9zz%2F%2FUBtjjZClazUPXlJZJOrY8ZoAXKUXt9cAX%2BYA%2Fe%2FBxOft%2BeiyM0Jfoj%2BiCSdZl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abec5b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP 104.18.21.226:0
Hash 669f9014535499b83c287f0d9ec4d959
fcfdaff66da4ee9bbe532f998cf58b822db7ef66
8baedd0ef9c61bd664fa5e7714865a87c3d0bee28941715fd9b148b51a02bc3f
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 13:11:45 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "5145C5A3712A5D023A94C43C46A2868DFBF17071"
Expires: Wed, 21 Sep 2022 00:00:00 GMT
Last-Modified: Tue, 20 Sep 2022 12:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1689
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74dacf0abe3c0b61-OSL
cdnbun.com/upload/kruidvat-right.png
172.67.159.172200 OK 1.3 kB URL HTTP/2 cdnbun.com/upload/kruidvat-right.png
IP 172.67.159.172:0
File type PNG image data, 54 x 386, 8-bit/color RGBA, non-interlaced\012- data
Hash ce19e0b4f99f679d0994b25930c6e459
f2fd43fcdfdfc009479e886fbad53736b3d93e28
ca5b8cd9a8dcab13b3319b86f47a5b37d363feb5c245e56bfa0e13aa263193f6
GET /upload/kruidvat-right.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/png
content-length: 1264
x-guploader-uploadid: ADPycduzFWp0oWHS-DvKPVwIdWCDtL8zKgJm_JyXGIlVOC1kTsP35ad8-_TfralYGXImgh_hWDCY5rBnQOJ81TeU9BS3YCIftyOB
expires: Tue, 20 Sep 2022 12:50:41 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:35 GMT
etag: "ce19e0b4f99f679d0994b25930c6e459"
x-goog-generation: 1663149635215123
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1264
x-goog-hash: crc32c=BN8dHw==, md5=zhngtPmfZ50JlLJZMMbkWQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GDHHIKzZk7W%2Ftf5fQ40sGsLhbauIh2RSwc1QpYu1hdwBC%2FxblBvMlZOz3bSe7arBp7Qe8QLD3iPNKAueNlFvbafHT%2FpB6LRf8xJd8IizhzoNU4e4w9qEGcA1BFpc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abecbb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/kruidvat-box1.png
172.67.159.172200 OK 29 kB URL HTTP/2 cdnbun.com/upload/kruidvat-box1.png
IP 172.67.159.172:0
File type PNG image data, 300 x 214, 8-bit/color RGBA, non-interlaced\012- data
Hash 9eecc347d3a352c9c381ab3cb59d6344
6f01d4a13c905e5ba608e0f7b7d9792a1476a411
3951fb448a70d4d307517e1d15f1165638c066161e8c96de08797cd8ba0e8ec0
GET /upload/kruidvat-box1.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/png
content-length: 29188
x-guploader-uploadid: ADPycdsMxWTHecpiklRMB-gdsn1QBkJAsDXaFvik27xfIduMDf8YIMmiUm6XMsvd_7GPQJoLAgXuDmykBPKqsuDQow86UZ-hVBKS
expires: Tue, 20 Sep 2022 12:14:22 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:33 GMT
etag: "9eecc347d3a352c9c381ab3cb59d6344"
x-goog-generation: 1663149633138940
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29188
x-goog-hash: crc32c=aghneg==, md5=nuzDR9OjUsnDgas8tZ1jRA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zTrn3xOcfYbnGwe2KDP6WNacqZGlq0%2BVkCqM%2Fshse1rTPvwQl%2FdmQ%2FaWwsj8N4mtwZcT7jmhRhkKEjjHlQp1AgNC3XfSi7SDvp%2FJGgld7clhHR1qFDo4vy0QbTQR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abec4b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/kruidvat-box2.png
172.67.159.172200 OK 3.2 kB URL HTTP/2 cdnbun.com/upload/kruidvat-box2.png
IP 172.67.159.172:0
File type PNG image data, 300 x 214, 8-bit/color RGBA, non-interlaced\012- data
Hash 238dc6e686c899a5338f665ea4aca071
86d495870e10393491c9ff148e6e142026a0bcb9
d30352018675e426f5646079ecdee62f579099db3c681ed18652be47643aec91
GET /upload/kruidvat-box2.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/png
content-length: 3184
x-guploader-uploadid: ADPycdvz2TSI0aeg9A_X6ziwYSD3CHq_3H6HhvftUneT-W0g5qAqt-tJ45pcsGwA5t46xocC7j_XldJE2-qrAWDwKk765Bsu6GFI
expires: Tue, 20 Sep 2022 11:50:39 GMT
cache-control: public, max-age=14400
last-modified: Wed, 14 Sep 2022 10:00:33 GMT
etag: "238dc6e686c899a5338f665ea4aca071"
x-goog-generation: 1663149633223831
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3184
x-goog-hash: crc32c=hL9zqA==, md5=I43G5obImaUzj2ZepKygcQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3337
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fzULRMksCWvwW%2BQ0cpOV5wkGzb28YSo%2FU3Dp0SiLtsCqLPX3h9rFJcCgEFkdcca4CMVjFKjSfAIuZof7wWWX4FTFKCDQjcWqAWWr57B4FBq6Ort%2BtlA7a8AWRv9O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0abecdb50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 72616538e1da8ca84743fc89b9984c90
32e0f6760ec82e78a34e5dabe21d10ab11eebc85
17d3b41312f53566c1104937afa78925e48761968bb9f81f0fa9f4e52b62b118
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "17D3B41312F53566C1104937AFA78925E48761968BB9F81F0FA9F4E52B62B118"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5691
Expires: Tue, 20 Sep 2022 14:46:36 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 72616538e1da8ca84743fc89b9984c90
32e0f6760ec82e78a34e5dabe21d10ab11eebc85
17d3b41312f53566c1104937afa78925e48761968bb9f81f0fa9f4e52b62b118
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "17D3B41312F53566C1104937AFA78925E48761968BB9F81F0FA9F4E52B62B118"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5786
Expires: Tue, 20 Sep 2022 14:48:11 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 72616538e1da8ca84743fc89b9984c90
32e0f6760ec82e78a34e5dabe21d10ab11eebc85
17d3b41312f53566c1104937afa78925e48761968bb9f81f0fa9f4e52b62b118
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "17D3B41312F53566C1104937AFA78925E48761968BB9F81F0FA9F4E52B62B118"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5786
Expires: Tue, 20 Sep 2022 14:48:11 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=G-YP3DQB03D8
142.250.74.72200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-YP3DQB03D8
IP 142.250.74.72:0
File type ASCII text, with very long lines (17807)
Hash e6599afa7fe83dcd590b942c58fa5f08
c69e9361b38233ccc473f6218a57762ceb9e7e3b
da67211ba46e20842ecb862ea836c38e11e5fc341de47bb1f8575f24614fbb85
GET /gtag/js?id=G-YP3DQB03D8 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 20 Sep 2022 13:11:45 GMT
expires: Tue, 20 Sep 2022 13:11:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74609
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6d83cdd0f7e34fcad81455e3de04a365
e8a80755d44926beaba84545c3b00492005d6aa6
e91de6ab4ffd4c17bc096bfdd9018b5f565bdd7124a91693d4b0b29ce13988f6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E91DE6AB4FFD4C17BC096BFDD9018B5F565BDD7124A91693D4B0B29CE13988F6"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10525
Expires: Tue, 20 Sep 2022 16:07:10 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bcd1780365d720a989476aa4c840ab5f
de9013b2190b723bd02752a50b02d55220000048
c363ed502ea0d672c67653e3d4fcf7f4211c761b140419a3521d982d8bd276f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C363ED502EA0D672C67653E3D4FCF7F4211C761B140419A3521D982D8BD276F5"
Last-Modified: Tue, 20 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17928
Expires: Tue, 20 Sep 2022 18:10:33 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
263cdn.com/upload/yhde1.jpg
172.64.168.17200 OK 13 kB URL HTTP/2 263cdn.com/upload/yhde1.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash 8bb7f41971b23f34648e6b4797df26f3
3a2732b4bd2c9e45291f66a9872ef2d780fe831b
df4dd6d2b21fd5d5bedc1259cedab7ace2eeec381c18ca487f47fb26af6792b6
GET /upload/yhde1.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 12610
x-guploader-uploadid: ADPycdtfh5DxpmIF1ZBFMdDeNUHaAcmJwZZnl8TpGufA0Lx38-eukhWrRNLsr5__EH3aiNqL13_ZnYiBtvD0zjiaeD2Cvg
expires: Tue, 20 Sep 2022 13:26:15 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:49 GMT
etag: "8bb7f41971b23f34648e6b4797df26f3"
x-goog-generation: 1657560169688143
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 12610
x-goog-hash: crc32c=/laZCQ==, md5=i7f0GXGyPzRkjmtHl98m8w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2349
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VxHV2S3%2BZ2WPJf5PlMxdkhH1sjg1UXuAj5QJ%2Bohcd63z9PYJ28bGo7tHHnYcXUPOOcUR2SsCYpwfqZSUz4HdU78S34hfiSeq%2F2SPskbRu0TrvICyMEkekY%2FZjTus"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b3bff75db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/yhde2.jpg
172.64.168.17200 OK 7.5 kB URL HTTP/2 263cdn.com/upload/yhde2.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash 1e4cd34e22133192edbfdce16e8ba3a0
0b975b36fee9e81118378e4d7f70860edfe80bd3
8f71eadc0e6e9d3c4e20bdab6122f130199f099c47933a8f9c31856b5c5a0842
GET /upload/yhde2.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 7500
x-guploader-uploadid: ADPycdvXJA2JymEnbnIrNCBRWfSdUIbx5ZpgaHNYrAmqSAEu2EJuOpzSzuaFRF72xSuPb5BMLeC9nUJG0Y2OXwgMKyVRog
expires: Tue, 20 Sep 2022 10:54:43 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:49 GMT
etag: "1e4cd34e22133192edbfdce16e8ba3a0"
x-goog-generation: 1657560169681386
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7500
x-goog-hash: crc32c=UJX5hQ==, md5=HkzTTiITMZLtv9zhboujoA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3160
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R88hRfpkGMDmvnoB5XGh0RtxbY6dWIKLkIEtmEvoqoI84VNC6RLLCO1HgptXHYao%2Bt9MvUSd762O6clWsQNvppLZJl4mreXiE%2BdWXqcj%2FYFcztUoY0wZ5muLLefG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b3bfd75db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
m.watermonotonous.top/SZkgrGNX/kruidvat-m/?_t=1663679504126xzvbms1663672252618
104.21.5.194200 OK 24 kB URL HTTP/2 m.watermonotonous.top/SZkgrGNX/kruidvat-m/?_t=1663679504126xzvbms1663672252618
IP 104.21.5.194:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (475), with CRLF line terminators
Hash bd32460ebc473c5f92dbe1d452a334a6
7469954f39df099f8f70f798eb5c5c6aac7e4f67
ba415055ee398033dace62ed31697aaada20236c95e1e8f2b656d3ac3939d425
GET /SZkgrGNX/kruidvat-m/?_t=1663679504126xzvbms1663672252618 HTTP/1.1
Host: m.watermonotonous.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://m.bms6jb.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: pType=mo; expires=Tue, 20-Sep-2022 13:23:44 GMT; Max-Age=720; path=/; domain=m.watermonotonous.top
kruidvat-m-tthh1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.m.watermonotonous.top
kruidvat-m-tthh2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.m.watermonotonous.top
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zNpf3pKEW6SIg5z2VRfC9uZC3b3rfaPY5Dfd2uuRXSIOz8PQBIgW8J492Z0Hi1nzSwq2p5pZyTud7stKgzZu%2BeLmecHwkVzAAEs%2B%2FYOI3VFafKRJoyUZ91Q9kv%2FO%2BRJifQOAOccVUTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74dacf081a310b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/yhde7.jpg
172.64.168.17200 OK 7.2 kB URL HTTP/2 263cdn.com/upload/yhde7.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash e6973ef8b9321ae09803ede73ca9047d
7b93053d922fa89065796614f7183c7baefcb558
7593afdd1a987ff5a18338787f1e75f403739752cf357c4d4f3b32205d9606ac
GET /upload/yhde7.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 7197
x-guploader-uploadid: ADPycdus7Kc4sKChII0BY1iUPjmFEANxkpPzE04pv5Nq__GnTS69Fx58wcfHW23_NNibZmKQ6ivYL_VyW1I8Y7dH-YO1uQ
expires: Tue, 20 Sep 2022 13:05:24 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:51 GMT
etag: "e6973ef8b9321ae09803ede73ca9047d"
x-goog-generation: 1657560171874943
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7197
x-goog-hash: crc32c=LD3HAg==, md5=5pc++LkyGuCYA+3nPKkEfQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2421
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sIFmeuukbB3DRppsM%2FTdQcO%2F%2BFax3ZGynaHnO6Z8MWeoD5b%2F4WyV3uTBdkg1R8Ntnr7bgSwn7wwaMy9sBCkFSouXV9rRS55S0ss7EOPiubuPujaAxz3oexl8wqNJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b3c0175db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/yhde4.jpg
172.64.168.17200 OK 8.5 kB URL HTTP/2 263cdn.com/upload/yhde4.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash 97c0fcc47524398cecf7d89e8854a01c
bef604fbc4381f689b97ae2216acf1ea260f09e1
bb56e2ea161221ac5e4c671d3d124cf5b1e50f64a412960baf51523679f37444
GET /upload/yhde4.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 8521
x-guploader-uploadid: ADPycdt_ozSjN2fKESi70osKTi-xq17s39b1KvmqNz3lSLY3gqfENQAIAVIaSnMyExLv7NICF_ANlViyvScq_yeG_JGsUA
expires: Tue, 20 Sep 2022 13:27:58 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:50 GMT
etag: "97c0fcc47524398cecf7d89e8854a01c"
x-goog-generation: 1657560170770744
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8521
x-goog-hash: crc32c=NqkxVw==, md5=l8D8xHUkOYzs99ieiFSgHA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2627
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9dFnX2vAd%2Bq%2Fogs8NLJ2X%2B4DpgDxXFPY%2Brx%2B1Oa6jDYwqull8K37BXezi2SpCLbOif0Fsedy9SaU0oN9Vi%2FNuVL64KLO0Lm0VAiG6cYHYkpdmCZHbkgZpwOGzoBa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b4c2475db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/yhde9.jpg
172.64.168.17200 OK 9.2 kB URL HTTP/2 263cdn.com/upload/yhde9.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash 011b2ea22f52406af58b64d1665f8452
180974bd7ba0be0bea57119080b3071f9e3b19d9
0681be4c83ebd047dbea1e6df073cf020d407d75fabe8ffcc40bb57ef9a19358
GET /upload/yhde9.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 9205
x-guploader-uploadid: ADPycdvs0YK_rB9cQAHfmCT10X7f703AoIsM5_nQgNFawqca9TnO20W2aLKHwElUxq13Ol0neBD-Joho_9RA7ksxgpb7ww
expires: Tue, 20 Sep 2022 11:28:09 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:52 GMT
etag: "011b2ea22f52406af58b64d1665f8452"
x-goog-generation: 1657560172678807
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9205
x-goog-hash: crc32c=9Zk+WA==, md5=ARsuoi9SQGr1i2TRZl+EUg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2892
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=95lE9VaLurzBzOXSLYZxTW%2BSq7JIb5p%2Bfo0xqUqCxWXr9CLIhNhioDOrTWp2Hle2qo%2B4nSvDpFrEjTKy5ivVmY4coVwWdoq1I6QLgrlSXxY14tIFItX6B1IfjK%2BD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b4c2775db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/yhde3.jpg
172.64.168.17200 OK 8.4 kB URL HTTP/2 263cdn.com/upload/yhde3.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash d8f2b1db826a85b3d6a77f65c2eb8aa9
f2a5f76ea88f4f374ea2ed63a2d56262746f11b7
ec87a4f107fab84a11b07c51a0c16da260136be7e9312267e9ac53ee1faac9cb
GET /upload/yhde3.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 8391
x-guploader-uploadid: ADPycduWGHoLIReJ2xiY1GVnOQ8Sn9-KO7a6VsLLFXT22xI0vdlIYJE6iIGVGBgqPrwjPpjaqkI118qosrIiLUda8XtWAQ
expires: Tue, 20 Sep 2022 12:45:34 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:50 GMT
etag: "d8f2b1db826a85b3d6a77f65c2eb8aa9"
x-goog-generation: 1657560170668162
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8391
x-goog-hash: crc32c=ow+ZSQ==, md5=2PKx24JqhbPWp39lwuuKqQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2811
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FcL1b2WG5GQ5Rox1a4lRk7n83WatVAAYybZHagVkM1tIDXuXZYur%2FsOEJBfGVt6xZDVv6xWtPX8q26M6HVn1kBJ%2BaaJn29Iv4gd%2BmWezCUTof6Km7W%2Fs92JTDzkk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b3c0275db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
172.67.199.208200 OK 26 kB URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP 172.67.199.208:0
File type ASCII text, with very long lines (65321), with CRLF line terminators
Hash c1332a18382efadd354273c042463de9
b1ca4ecb6a11a2dcb77b6b7212c2ce8e0286f02d
aef9ed6b808101275ba8fe0e0ba76d2292bfba4dcdf537a336b141a995f44fec
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/css
x-guploader-uploadid: ADPycduCHwg6n53VPzNb_-57qJzhoPJbEBdMgpsWgTX19t4NIh3Tdte6MCXenDGQTAuiJrpSRG3G9WDZErClLNvZVXhXccOSWw
expires: Tue, 20 Sep 2022 13:03:20 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8b0Til8KR728bY%2BiK5Rge%2BI31iV0TNkk24Tp1eSR0fYvbm%2FiWKAULepAkmS3CJTotNUa9YioYtd%2BckYQGL0rZVDWc21WwKieFRDiXZD55ZGZcK9iahgXtfdTusfk3um7QUw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf09d8ddb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/yhde5.jpg
172.64.168.17200 OK 8.0 kB URL HTTP/2 263cdn.com/upload/yhde5.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash bf26d0b78d013f526a5f8eb153f9fd56
5cb71ae75ad4a45e482570a02cf919bbc65fa135
c0e0b2ed3e4352d31c1672785a0df72fa809063ac9383643ebb78f0e1486535f
GET /upload/yhde5.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 7984
x-guploader-uploadid: ADPycdsO76VvlM8T5G7yyGeeeZE0FFx81WJOyJ3Q1uQXLaJ_40Ur--VU-EQGpPXvFsjofO0raK2LbtOe1o4E8QMQZMwAwA
expires: Tue, 20 Sep 2022 12:28:23 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:50 GMT
etag: "bf26d0b78d013f526a5f8eb153f9fd56"
x-goog-generation: 1657560170814014
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7984
x-goog-hash: crc32c=2hDYJw==, md5=vybQt40BP1JqX46xU/n9Vg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3060
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q%2BgIJ%2F16C7P6taLZ98B6xL0CqJ2JKTCwpI8URVDTPH2RwHmyFBagh9kw1GGdlqqqB0N0UvFVW2FlCwXgFLT8E4bP%2FUOLc8Iz6ttl499XAwWYyw%2BeO6B94hwnIJPE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0b4c2a75db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2327668eff231535c400696e434fc92e
2ba154b2145ab0a30f743f35ae6c95f3adbf4064
e236dd7748836bad3e41627ad8fabc3238b286847eddc9f865a853668728ae49
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E236DD7748836BAD3E41627AD8FABC3238B286847EDDC9F865A853668728AE49"
Last-Modified: Sun, 18 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8894
Expires: Tue, 20 Sep 2022 15:39:59 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 72616538e1da8ca84743fc89b9984c90
32e0f6760ec82e78a34e5dabe21d10ab11eebc85
17d3b41312f53566c1104937afa78925e48761968bb9f81f0fa9f4e52b62b118
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "17D3B41312F53566C1104937AFA78925E48761968BB9F81F0FA9F4E52B62B118"
Last-Modified: Sun, 18 Sep 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8527
Expires: Tue, 20 Sep 2022 15:33:52 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 26fcf8aea27805b4a6a29e3e2a4ba19b
f920fd6c5a79a4adb2f456edcee678757ff1602c
7aa63d03f514e4f51190e85f167f747563f980e0e6fdee6cce9393321dff1038
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 20 Sep 2022 13:11:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1f18380310e8880ece39a1d47dfab55a
69c625fb74f59117a6c5631ed4c9ef7b114a0bf5
993146d0c4c21bd35d01b192b20c614aed782e61b6fe6deb74eff611ff39295e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "993146D0C4C21BD35D01B192B20C614AED782E61B6FE6DEB74EFF611FF39295E"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13899
Expires: Tue, 20 Sep 2022 17:03:24 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
push.services.mozilla.com/
44.240.207.158101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.240.207.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mZBCqFpuCIb1t2f4qXHbLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: V7yD/P5OYV105GzkwxK6iNapbOY=
263cdn.com/upload/yhde6.jpg
172.64.168.17200 OK 9.0 kB URL HTTP/2 263cdn.com/upload/yhde6.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash ee5371e6976fe9bb8b6d46278279f89d
c246da7df163264acac382d4a83ba162b08637a8
ad1533c7cdb68e5cb8b5123a6775d6d5e67836e7187b46e27d5009a70a251ad4
GET /upload/yhde6.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 8953
x-guploader-uploadid: ADPycdv6aTAfGE_NNJ9LFMmqbTa7I8ZlS9xuzrxDxFnnDrRAPB3FeIvsSoqVxdk6Y3JIm-lo7Hn4uloAWkqaHAckwDe3LQ
expires: Tue, 20 Sep 2022 13:27:38 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:51 GMT
etag: "ee5371e6976fe9bb8b6d46278279f89d"
x-goog-generation: 1657560171630757
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8953
x-goog-hash: crc32c=YDJ99Q==, md5=7lNx5pdv6buLbUYngnn4nQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2647
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FXqak6%2Bp5Ui4ugFQsEVxDnn4XJvSSBdrsjh789Gx0%2BxhrPyQ%2FxlIgYCWh%2B%2Flsy%2Fr0ChpYa%2FvKy510Jz%2FCZTzwE2OOoOtWiUHBQbYm2PJIPxBb2RXFCmQDJDNYzGP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0bacbd75db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1f18380310e8880ece39a1d47dfab55a
69c625fb74f59117a6c5631ed4c9ef7b114a0bf5
993146d0c4c21bd35d01b192b20c614aed782e61b6fe6deb74eff611ff39295e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "993146D0C4C21BD35D01B192B20C614AED782E61B6FE6DEB74EFF611FF39295E"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13899
Expires: Tue, 20 Sep 2022 17:03:24 GMT
Date: Tue, 20 Sep 2022 13:11:45 GMT
Connection: keep-alive
263cdn.com/upload/yhde.jpg
172.64.168.17200 OK 12 kB URL HTTP/2 263cdn.com/upload/yhde.jpg
IP 172.64.168.17:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Hash c7401cbdc82cca5689669a88a41608fb
366e93242c88d9fdd3d58f5f3b46a1db75ed8d47
94508fbf165fff7477c232e0a1069f2aa87316b71b0499b1d687021c24142ae0
GET /upload/yhde.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: image/jpeg
content-length: 11716
x-guploader-uploadid: ADPycdtrCXUu3d-5kC44p7A_3XhywiwvgDNsU_Q1PPvqjzgPe0-OYLPaHoUmfmxxPatrrmj8ze8_uDbLlZO_RiFdhRXQ7g
expires: Tue, 20 Sep 2022 13:22:40 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:49 GMT
etag: "c7401cbdc82cca5689669a88a41608fb"
x-goog-generation: 1657560169763046
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11716
x-goog-hash: crc32c=Vi3taA==, md5=x0AcvcgsylaJZpqIpBYI+w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2940
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8h387je7jcArqpFJhFPTZBnEvqit02OfdPydHi24mws18mjRJKdskBs9rcopblU%2Fvo4PteshtI7DChTOgY9xBo6smgHHTeZKBON6RRIoK9wkRt10k%2B4Bto8NyUjG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0bdd3275db-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-YP3DQB03D8>m=2oe9j0&_p=248860772&cid=534983406.1663679505&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663679505&sct=1&seg=0&dl=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618&dr=http%3A%2F%2Fm.bms6jb.cyou%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-YP3DQB03D8>m=2oe9j0&_p=248860772&cid=534983406.1663679505&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663679505&sct=1&seg=0&dl=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618&dr=http%3A%2F%2Fm.bms6jb.cyou%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-YP3DQB03D8>m=2oe9j0&_p=248860772&cid=534983406.1663679505&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663679505&sct=1&seg=0&dl=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618&dr=http%3A%2F%2Fm.bms6jb.cyou%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://m.watermonotonous.top
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://m.watermonotonous.top
date: Tue, 20 Sep 2022 13:11:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash ffc2e7b462f1ac62464c2cdf89984c63
fa165d8f45ad72939b94be798cd6e9df7d2f3e6c
edc5e842296d0e70a194d953f60bd6ded551aaaa111f62c34d48ff13e30962d5
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 13:11:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 24 Sep 2022 10:26:55 GMT
ETag: "fa165d8f45ad72939b94be798cd6e9df7d2f3e6c"
Last-Modified: Tue, 20 Sep 2022 10:26:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1438
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74dacf13f84f0b61-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash ffc2e7b462f1ac62464c2cdf89984c63
fa165d8f45ad72939b94be798cd6e9df7d2f3e6c
edc5e842296d0e70a194d953f60bd6ded551aaaa111f62c34d48ff13e30962d5
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 13:11:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 24 Sep 2022 10:26:55 GMT
ETag: "fa165d8f45ad72939b94be798cd6e9df7d2f3e6c"
Last-Modified: Tue, 20 Sep 2022 10:26:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1438
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74dacf13fd4eb4e8-OSL
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash ffc2e7b462f1ac62464c2cdf89984c63
fa165d8f45ad72939b94be798cd6e9df7d2f3e6c
edc5e842296d0e70a194d953f60bd6ded551aaaa111f62c34d48ff13e30962d5
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 20 Sep 2022 13:11:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 24 Sep 2022 10:26:55 GMT
ETag: "fa165d8f45ad72939b94be798cd6e9df7d2f3e6c"
Last-Modified: Tue, 20 Sep 2022 10:26:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1438
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74dacf13f949b521-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10764
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 13:11:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10764
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 13:11:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10764
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 13:11:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10764
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 13:11:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash fe5ffc0bb967bf39c053d24cdfae521a
87bc50876b1600714e2c29608bf4af00fbfbd23e
ceaf52d90eaf692a8da9f6c353d09011e26d8e2b971ec4c17fcbcab8676c70c3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CEAF52D90EAF692A8DA9F6C353D09011E26D8E2B971EC4C17FCBCAB8676C70C3"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10764
Expires: Tue, 20 Sep 2022 16:11:10 GMT
Date: Tue, 20 Sep 2022 13:11:46 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2ed7323b395e757f7766ea0045efdaca
8b91bc3069a3217bc719c27959d578b353b5d9dc
8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7sCevVX1nGXxZxnrXSURjUcap1a7vCZwrMMIXfzcBPR1srMxJHLGUg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:07:05 GMT
age: 54281
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F799803b1-7e6e-42da-84f6-3e45140e6ae6.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F799803b1-7e6e-42da-84f6-3e45140e6ae6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 49ffb7cd4c40b37f5b61c1fd86ee36ec
4188174bf6e595335f784d2bf9c90db57294b2fc
5af29dbb676f5a38288e73e9ca4feada901ccfb06385110ca0a46a4970532d32
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F799803b1-7e6e-42da-84f6-3e45140e6ae6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7358
x-amzn-requestid: 88cc5413-2f66-4dc6-b20d-57dd16e77e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugqUHZIoAMFd3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e175-7357c2251f4434bc4686f9ed;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tqQuwCb5au2yf-m5wbZyUdOh7VEnYzxCk19p2IlH0vHCFx9Lkhu6lw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:00:04 GMT
age: 54702
etag: "4188174bf6e595335f784d2bf9c90db57294b2fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d3e70b2859ca89b353682d03f6b46b93
ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 02:46:17 GMT
age: 37529
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a7d863845e96c5927e812f325c08c16
b8484fb5443344b03e52dd56b1d6c5682eb6221a
fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zDPKSOJ7SJImKcluUMhGvVMHv4t2oKLD2AJfGKAFSfedsdSA4VgZ_g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:56 GMT
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
content-type: image/jpeg
age: 54530
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30fbdfee7ec4513a5ff3dfcb7282f816
a852edb64a7220532aa619ab2a440c3a7e11b97a
4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: y3urrVdjZEds_DKf3yL2XfaOy-5UPBwU-YVWe5eKYsDpl3JPmqffsw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:23:30 GMT
age: 53296
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca0c1a7f205ad07f1cce80b26448873
0e14f5062e40ce94346494ff947bfcf74b5e88c1
ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:50:04 GMT
age: 55302
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?fb388022206e4826574e55f98a856c2e
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?fb388022206e4826574e55f98a856c2e
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (673)
Hash 2fb9fe8a1b9508f66546ab6fef1a1231
8cf5096202e14e6290bfb88327438a3b9a219263
a4fc4f7f19312706e2470f30c0eac031ea3b3a50b3860c07356b1d3532f0a627
GET /hm.js?fb388022206e4826574e55f98a856c2e HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11386
Content-Type: application/javascript
Date: Tue, 20 Sep 2022 13:11:47 GMT
Etag: 1309ac4525fccfb5f58a22ddb34b6992
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=4A6104F81D524A3E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?e580d24a0af01241d534439cfcc0c10c
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?e580d24a0af01241d534439cfcc0c10c
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (631)
Hash 7a297c719b10276dc05448e0cd4cf95f
50a4783966ebda111519e07c0d3b024abc7c43d1
8c79879904ba5a4989a9fab848d5c34dfc50ffb19f20c1a45679cb8e6a3f1a0b
GET /hm.js?e580d24a0af01241d534439cfcc0c10c HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11344
Content-Type: application/javascript
Date: Tue, 20 Sep 2022 13:11:47 GMT
Etag: 0701b6674bbed412906ca0fd63478685
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=8EF5226E9FEA2CCD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?c7f1b3f152598f901bc0aad793b18b59
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?c7f1b3f152598f901bc0aad793b18b59
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (628)
Hash 84ef289ffb4971e957fe82b555c72b83
354dc00d37ed623123bf7945fbb484db9ed419d6
4622a957aa93c2569e6b31bb23db9c3de159087582f5c1a665c4137415292e97
GET /hm.js?c7f1b3f152598f901bc0aad793b18b59 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11341
Content-Type: application/javascript
Date: Tue, 20 Sep 2022 13:11:47 GMT
Etag: b1bdc6f53574cd4878ab05bf634dba0c
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=C4114A74E85F7A69; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?b521817f22507716e364b3fe28644f8b
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?b521817f22507716e364b3fe28644f8b
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (665)
Hash fbc642b5998071407ce055a4c898ede7
1a4e277e09ef5e34d32cb886a30d1221a4663f8e
eb75cc5d64f813c10cd6cc136114d6083c5275375989788d77c5e6e2ad2cfe3e
GET /hm.js?b521817f22507716e364b3fe28644f8b HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11378
Content-Type: application/javascript
Date: Tue, 20 Sep 2022 13:11:47 GMT
Etag: 26b964d144b5962679175ab3349d4f46
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A6A8C4D1C73406EA; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1014517844&si=fb388022206e4826574e55f98a856c2e&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1014517844&si=fb388022206e4826574e55f98a856c2e&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1014517844&si=fb388022206e4826574e55f98a856c2e&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 20 Sep 2022 13:11:48 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=A6FA6316FF124E95; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=938034796&si=e580d24a0af01241d534439cfcc0c10c&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=938034796&si=e580d24a0af01241d534439cfcc0c10c&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=938034796&si=e580d24a0af01241d534439cfcc0c10c&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 20 Sep 2022 13:11:48 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=3219471592700DAD; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=2087232929&si=c7f1b3f152598f901bc0aad793b18b59&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=2087232929&si=c7f1b3f152598f901bc0aad793b18b59&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=2087232929&si=c7f1b3f152598f901bc0aad793b18b59&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 20 Sep 2022 13:11:48 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=AE9A601864E2D162; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1805699025&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1805699025&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1805699025&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fm.bms6jb.cyou%2F&v=1.2.97&lv=1&sn=7998&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fm.watermonotonous.top%2FSZkgrGNX%2Fkruidvat-m%2F%3F_t%3D1663679504126xzvbms1663672252618%231663679505755 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 20 Sep 2022 13:11:48 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=4BC6C61DF2C82B99; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
185.66.200.220200 OK 0 B URL HTTP/2 uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
IP 185.66.200.220:0
ASN #201702 skHosting.eu s.r.o.
GET /bnr.php?section=General&pub=593174&format=300x50&ga=g HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: application/javascript
expires: Tue, 20 Sep 2022 13:11:45 GMT
last-modified: Tue, 20 Sep 2022 13:11:45 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166367950579019&xtt=1413269
185.66.200.220200 OK 0 B URL HTTP/2 uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166367950579019&xtt=1413269
IP 185.66.200.220:0
ASN #201702 skHosting.eu s.r.o.
GET /bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166367950579019&xtt=1413269 HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: text/html; charset=UTF-8
expires: Tue, 20 Sep 2022 13:11:45 GMT
last-modified: Tue, 20 Sep 2022 13:11:45 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
172.67.199.208200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
IP 172.67.199.208:0
GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycds_5oPtcr3KFpC_u7Lnvdlqz8VeCGxAgHcXFP3zMljDMh6Q0ifyAwrLV7e0dbEbUBwQbF9kY0g0GrHWdqicRh8
expires: Tue, 20 Sep 2022 12:56:54 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cIMtoZHo0MQU6zTJwcsA0QKHTycIR0j1lpQe1cZfBcKFdsXHYg7eu4JDF3LbrbQ0UpQ3WgRUXibJ96lPI9soUDA0YJxb5e7%2BTvcflp%2FBiImz3RMIm92tGg%2BWLfXteuUn7Es%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0a0949b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
qoaaa.com//4fe48aebd6/4f59451604/?placementName=Pop&randomA=0_4630&maxw=0
185.66.201.42200 OK 0 B URL HTTP/2 qoaaa.com//4fe48aebd6/4f59451604/?placementName=Pop&randomA=0_4630&maxw=0
IP 185.66.201.42:0
ASN #201702 skHosting.eu s.r.o.
GET //4fe48aebd6/4f59451604/?placementName=Pop&randomA=0_4630&maxw=0 HTTP/1.1
Host: qoaaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 13:11:48 GMT
content-type: text/html; charset=UTF-8
set-cookie: shown1=0; expires=Wed, 21-Sep-2022 13:11:48 GMT; Max-Age=86400; secure; SameSite=None
used_ad2633299=1; expires=Wed, 21-Sep-2022 03:59:59 GMT; Max-Age=53291; path=/; secure; SameSite=None
total_impressions=1; expires=Wed, 21-Sep-2022 03:59:59 GMT; Max-Age=53291; secure; SameSite=None
used_c_51856=1; expires=Wed, 21-Sep-2022 13:11:48 GMT; Max-Age=86400; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
qoaaa.com/js/responsive.js
185.66.201.42200 OK 0 B URL HTTP/2 qoaaa.com/js/responsive.js
IP 185.66.201.42:0
ASN #201702 skHosting.eu s.r.o.
Analyzer Verdict Alert fortinet Phishing
GET /js/responsive.js HTTP/1.1
Host: qoaaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 20 Sep 2022 13:11:45 GMT
content-type: application/javascript
last-modified: Tue, 21 Dec 2021 14:23:16 GMT
etag: W/"61c1e354-b1d"
content-encoding: br
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
172.67.199.208200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
IP 172.67.199.208:0
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdv0chj5F1Awc6K7Usaiie2qXL87Fxg5kp7mYqQH9s8HWV5Nuv0HuTqJ2hz1F5xUG9MGapUfK4P-pfLXRasYr-w
expires: Tue, 20 Sep 2022 13:16:12 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yi37Mh2mHn5ev2JszN2Atkz5LiRO5aYvgtkRFxIILJfzV3YtnyF2kshKn%2BynxUipXV9CnbtOfifb4kg8MagLVoE7yJqu4ctj%2FMah%2FV6apXLMhGbbkD7IcI2dnB%2B%2Bq9ySA50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf09e926b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
172.67.199.208200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
IP 172.67.199.208:0
GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdujKqP4OmsICcw4by2ej4M3gF2bmp67KcND5Yd7ZkChGu92L3U7j930k4J7s5KmD98KzStiLKDZt_7_8jjTVv4
expires: Tue, 20 Sep 2022 13:41:55 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FD%2Byw8q8oneRbHwbCQJ1TBdrmNCR1hjwvzenCvVxI%2BSd5HmZbNaKgJ1V1erhIpHfF73VRafxB%2Bsl3i0EMHRMWWi9LPI9w8mnZgHlOSxWttk1yKXA9cSSrzo94WxBWjHPy%2B0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf09f930b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
172.67.199.208200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
IP 172.67.199.208:0
GET /npm/lazyload@2.0.0-rc.2/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.watermonotonous.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 20 Sep 2022 13:11:44 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdsQwI6S5jC2ZwwNbaEnMvjelWJ3GXYdnwkp6yGGRsWcMv2CGKN45430-s2v57JOsXldQJq3rMwQOTmm_DkHtW4
x-goog-generation: 1647502963816044
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4798
x-goog-hash: crc32c=lted8w==, md5=3G3pgTxxS6mXM8pPtdOh+g==
x-goog-storage-class: STANDARD
expires: Tue, 20 Sep 2022 13:15:16 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:42:43 GMT
etag: W/"dc6de9813c714ba99733ca4fb5d3a1fa"
cf-cache-status: HIT
age: 1135
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yjq6C%2B70gOm6omKcOErzVS%2BjcKg1MI0lEdPpX1985BTRRSUPtJF9H78fuTI18Oa5ff%2Bl7sr3IQBEvRKCtNpwEOM%2BsbtwLuRhoIRaIVJfasCneZhWn6uFGmZqvhSQwbIKesg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74dacf0a195bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2