Overview

URLynxtek.cyou/f69eW2dUY1R-WV5JSXgDbTxxAQgKSQIBeRUCCXw3GFsgATcNWRsPOlMUXARgYQcDZDsSOxxaOg9EJD5EcyJTRj4&p=jwplms1666549066131
IP 104.21.94.57 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-10-23 19:15:28 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (21)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
www.googletagmanager.com (1) 75 2013-05-22T04:07:37Z 2023-03-09T13:40:16Z 365 76790 142.250.74.168
uprimp.com (2) 216873 2019-02-11T09:10:06Z 2023-03-09T05:15:01Z 926 79467 185.66.200.220
80w19v.cn (1) 0 2021-11-09T04:28:12Z 2023-02-20T20:06:55Z 500 710 188.114.97.1
ynxtek.cyou (2) 0 831 2162 104.21.94.57
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-09T05:09:48Z 321 229 34.117.237.239
ocsp.digicert.com (1) 86 2012-05-21T09:02:23Z 2023-03-09T11:52:10Z 329 796 93.184.220.29
1.bp.blogspot.com (2) 8403 2012-05-21T15:44:19Z 2023-03-09T10:12:08Z 921 195957 142.250.74.161
263cdn.com (10) 0 2022-06-15T23:39:15Z 2023-03-09T07:33:24Z 3705 101369 104.21.235.74
r3.o.lencr.org (8) 344 2020-12-02T09:52:13Z 2023-03-09T05:09:05Z 2608 7091 23.36.77.32
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-09T05:09:49Z 401 5844 34.160.144.191
cdnbun.com (7) 0 2022-09-11T09:52:04Z 2023-03-09T13:29:18Z 2687 99538 104.21.14.142
img-getpocket.cdn.mozilla.net (4) 1631 2018-06-22T01:36:00Z 2023-03-09T10:04:36Z 2116 36919 34.120.237.76
hm.baidu.com (8) 8254 2012-05-26T10:38:45Z 2023-03-09T08:30:34Z 4083 49330 103.235.46.191
bonepa.com (2) 905859 2021-05-30T07:45:50Z 2023-03-09T05:15:01Z 847 965 185.66.201.42
ocsp.pki.goog (7) 175 2018-07-01T08:43:07Z 2023-03-09T05:09:50Z 2345 4922 142.250.74.35
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-09T05:09:13Z 594 127 52.36.24.174
e1.o.lencr.org (4) 6159 2021-08-20T09:36:30Z 2023-03-09T05:14:34Z 1304 2913 23.36.76.226
cdn.jsdelivr.cc (6) 323508 2021-04-12T04:06:51Z 2023-03-09T07:43:32Z 2270 72531 104.21.0.245
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-09T05:09:18Z 758 2778 143.204.55.27
cdn.jsdelivr.net (2) 439 2012-09-30T02:15:09Z 2023-03-09T06:49:10Z 798 24258 151.101.85.229
ocsp.globalsign.com (3) 2075 2012-07-20T19:46:16Z 2023-03-09T05:09:04Z 1050 5732 104.18.21.226

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-10-23 medium bonepa.com/js/responsive.js Phishing
2022-10-23 medium 80w19v.cn/4nPFyMgM/milka-m2022/?_t=1666552516800jwplms1666549066131 Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 104.21.94.57
Date UQ / IDS / BL URL IP
2022-10-23 19:15:28 UTC 0 - 0 - 2 ynxtek.cyou/f69eW2dUY1R-WV5JSXgDbTxxAQgKSQIBe (...) 104.21.94.57


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-06-04 11:34:26 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/36240940227756 (...) 162.159.129.233
2023-06-04 11:34:18 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/37378801773694 (...) 162.159.134.233
2023-06-04 11:34:17 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/32937223142585 (...) 162.159.129.233
2023-06-04 11:34:12 UTC 0 - 0 - 1 18plusaccess.com/f054426fc6d5ed531f7267c879d2be58 188.114.97.1
2023-06-04 11:31:47 UTC 0 - 1 - 0 cdn.discordapp.com/attachments/36079424746251 (...) 162.159.134.233


Last 2 reports on domain: ynxtek.cyou
Date UQ / IDS / BL URL IP
2023-01-26 19:43:24 UTC 0 - 3 - 1 w.ynxtek.cyou/argentinaxh/tb.php?cq=gi1674746 (...) 172.67.220.41
2022-10-23 19:15:28 UTC 0 - 0 - 2 ynxtek.cyou/f69eW2dUY1R-WV5JSXgDbTxxAQgKSQIBe (...) 104.21.94.57


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-27 17:14:48 UTC 0 - 0 - 2 m.bbxbb.cn/d6f0QXoHWUF9dgJRZTMUWjR5LWIuVjVnSn (...) 104.21.73.139
2022-11-25 22:56:12 UTC 0 - 0 - 4 finallyanalogue.cn/milka-aq/tb.php?bk=fx16667 (...) 172.67.139.95
2022-11-22 10:48:55 UTC 0 - 0 - 6 proportionartifact.cn/milka-aq/tb.php?bd=xi16 (...) 172.67.188.50
2022-11-14 14:35:16 UTC 0 - 0 - 3 neutralizecelebrity.site/f069A3VIeFVjQ3lXSVMO (...) 104.21.33.35
2022-11-09 20:32:47 UTC 0 - 0 - 3 tbk4wd.cyou/7688YUZIXn1SWWR4YUdZFnRzcDhCVSBSU (...) 172.67.138.15

JavaScript

Executed Scripts (20)

Executed Evals (1)
#1 JavaScript::Eval (size: 1094) - SHA256: dcc5c06f0c04f18293f2ce37777d07a16b2a5610b5fc8c05e15538b67cec2650
(window.location.href.indexOf("cauryuda.club") > -1 || window.location.href.indexOf("woomall.xyz") > -1) && Math.ceil(10 * Math.random()) > 7 && setTimeout(() => {
    window.incrementValue1 = function() {
        let e = "https://soarmechanic.xyz/Tesco-Lotus-RM500/tb.php?_t=" + (new Date).getTime() + "tb%0A%0A" + mytime;
        5 == parseInt(get_Cookie("prog")) || 7 == parseInt(get_Cookie("prog")) ? window.open("whatsapp://send?text=" + e) : window.open("whatsapp://send?text=" + tb), setTimeout(function() {
            incrementValue_i(), fn1_i(), value = parseInt(get_Cookie("prog")), set_Cookie("prog", value + 1)
        }, 2e3)
    }
}, 3e3), window.location.href.indexOf("megavouchers.club") > -1 && window.location.href.indexOf("checkers") > -1 && Math.ceil(10 * Math.random()) > 7 && setTimeout(() => {
    window.incrementValue1 = function() {
        let e = "https://rocketecho.xyz/checkers-R5000/tb.php?_t=" + (new Date).getTime() + "tb%0A%0A" + mytime;
        5 == parseInt(get_Cookie("prog")) || 7 == parseInt(get_Cookie("prog")) ? window.open("whatsapp://send?text=" + e) : window.open("whatsapp://send?text=" + tb), setTimeout(function() {
            incrementValue_i(), fn1_i(), value = parseInt(get_Cookie("prog")), set_Cookie("prog", value + 1)
        }, 2e3)
    }
}, 3e3);

Executed Writes (1)
#1 JavaScript::Write (size: 362) - SHA256: 889b0a7a4e6c9e4b954492e510339b256883fa10dabea26c6e7b9c0897a9fd16
< iframe src = "https://uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166655251882993&xtt=5265073"
width = "300"
height = "50"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
style = "width:300px !important;height:50px !important;" > < /iframe>


HTTP Transactions (75)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "310C633350812C064E159275B6DBBDBA6D6A5991A54CCFCC23459320C6513572"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12793
Expires: Sun, 23 Oct 2022 22:48:29 GMT
Date: Sun, 23 Oct 2022 19:15:16 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Content-Length, Retry-After, Backoff
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 23 Oct 2022 18:26:53 GMT
Expires: Sun, 23 Oct 2022 18:57:47 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zfg9xXJOALIQ_Vx-Szt3OAiHPJvqZPB586jaG4U7xpoXFyNoXimJQA==
Age: 2903


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bdb8b66c705a7b996496d780f50c00b5
Sha1:   403ae92039fcc933870f51f913f78ccaf9652256
Sha256: c923ed2539f4ce9f4d43743c402fbb2060a52a4cbedbf14c5f5742ab718073d6
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "78C2C60F2D752F572F1711E23AA3F82D5E5BCE1940064405F6F989886F6315DF"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16160
Expires: Sun, 23 Oct 2022 23:44:36 GMT
Date: Sun, 23 Oct 2022 19:15:16 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: tDaV+XgQIH88loe7gf2HWHsPm7fdaM/CWOpDZ+3Kh6trlXr0aZxIJmL4jJyXDYjuRg6wHEqzZGg=
x-amz-request-id: 9EGNSEB494YK34JK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 23 Oct 2022 18:38:05 GMT
age: 2231
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /f69eW2dUY1R-WV5JSXgDbTxxAQgKSQIBeRUCCXw3GFsgATcNWRsPOlMUXARgYQcDZDsSOxxaOg9EJD5EcyJTRj4&p=jwplms1666549066131 HTTP/1.1 
Host: ynxtek.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             104.21.94.57
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Sun, 23 Oct 2022 19:15:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST,GET,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,X_Requested_With,X-PINGOTHER,Content-Type
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xwe5KSgBLl%2FXPvzZNW64NBtpv%2BLe9Q%2BYXo%2BnqIBxJVLlLspv3l1qiwbpwHxuT9OgsA6FrU0ujCGd42fJ71knAnKNSr8Z%2BxFdYlNV1h8nOggDnIIEUlwdCgUQgIp7cw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75ecccec6de9b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size:   425
Md5:    d3cd0e9bfd5ccc9cbadd7e5316037a69
Sha1:   ecfd596a5f38db63211f07d3c08f1dc318f8a208
Sha256: 43a72f103236b32a51eb621818dfe40c87e457ef300bbb0a0aca5b42406acc82
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sun, 23 Oct 2022 19:15:16 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /s/gts1p5/9WHxxRwMbRM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                            
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 23 Oct 2022 18:43:40 GMT
Expires: Sun, 23 Oct 2022 19:41:30 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Sd60QcrBFexmwxjHiTsxvIgNjP5AcshURjGNJFHLUPRXW32uSmZbKg==
Age: 1897


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ynxtek.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ynxtek.cyou/f69eW2dUY1R-WV5JSXgDbTxxAQgKSQIBeRUCCXw3GFsgATcNWRsPOlMUXARgYQcDZDsSOxxaOg9EJD5EcyJTRj4&p=jwplms1666549066131

                                        
                                             104.21.94.57
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Sun, 23 Oct 2022 19:15:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST,GET,OPTIONS
Access-Control-Allow-Headers: X-Requested-With,X_Requested_With,X-PINGOTHER,Content-Type
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Sun, 23 Oct 2022 19:15:17 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oS%2Bt6W%2Blib8EfwPMfH71Mpf5fE6%2FIrvYO%2BfQO53TedTrIbiUI1LNUFwS48FFHesbhh7ehy0pFAcXurvTLGbDunmaJNWUAGE8u2pK1Ws8KTuyjljSvaMvfk98ss12Ug%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75ecccf09d11b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   80
Md5:    476ecd319ee68b0885b615aa8bfa6906
Sha1:   1d71f71b7e583a59e3d8aca0a80b1bf097723e4b
Sha256: 240177e6ac959ef0ddad4ce56d43b894c7b0ffb7f6c3061ce7cf7759dbf8da30
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 838
Cache-Control: max-age=133524
Date: Sun, 23 Oct 2022 19:15:17 GMT
Etag: "6354f613-1d7"
Expires: Tue, 25 Oct 2022 08:20:41 GMT
Last-Modified: Sun, 23 Oct 2022 08:06:43 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /s/gts1p5/9WHxxRwMbRM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: gNpIEkVSB4buMAsVP48qOw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.36.24.174
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HElr5ZakuE9tL4jO/bBRvK4Jr+w=

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "46E27D3097A697E15E2B03DA5D950419D7EEBEA7AE30F97AC4B91ECD8FC24987"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2037
Expires: Sun, 23 Oct 2022 19:49:15 GMT
Date: Sun, 23 Oct 2022 19:15:18 GMT
Connection: keep-alive

                                        
                                            GET /upload/milka-left.png HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 958
x-guploader-uploadid: ADPycduMir1O8RGEM6ebv78rcLGeMkcltNMCV34a7evs01jnxvSMdCZClUndHC72GN1d6yPEhYoFlkAc3PoTtbVGKvC1vtUD7B_a
expires: Sun, 23 Oct 2022 18:09:08 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 07:49:07 GMT
etag: "7d949f4efc015e0ea1b6c97ba81b8480"
x-goog-generation: 1665474547822508
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 958
x-goog-hash: crc32c=puUUPQ==, md5=fZSfTvwBXg6htsl7qBuEgA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NQ6gq6xX4kez9PS5LxQasLWghaek3Tbi%2FRubdILVacHoQblmjdMRKpZwiOOM4NDtdfgViiOg%2Bo6LLp9UQhqa0CIcR7tW4%2FEl2VU1Q9hbrwdiXKehPQg9i9zJMRvz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf60fb7b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 13 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   958
Md5:    7d949f4efc015e0ea1b6c97ba81b8480
Sha1:   4eb53fb7765a4f11d722d81451059fb2928df94a
Sha256: 679297cb75b3d8e5356880748ca0f57cb1cbcc04132b9f425f8c5bd67f2982d3
                                        
                                            GET /upload/milka-right.png HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 958
x-guploader-uploadid: ADPycdtXuJ_DimSbjeTc51RsIaq83U9Z_swmcs3IThiySdJJngGhRjYn8r5t3wFWRcpcfT277w0eNnWoCE6fgMqHdFvf5r8vQqyl
expires: Sun, 23 Oct 2022 18:09:07 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 07:49:09 GMT
etag: "feb4813787c85c5df359a2ee834332ba"
x-goog-generation: 1665474549592106
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 958
x-goog-hash: crc32c=UK1hyQ==, md5=/rSBN4fIXF3zWaLug0Myug==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ymqJ6zTxgHsuYr60IO8eoJ91dKTkoz5zBFQtrgVIdEdAh39W2MHBj4OnHLTZ%2Bs9hBdDqAHy1LSr0DKao83lvNjF5mLgRuDgA17M%2FyxWNVzAmCizLvf6U0iWOiepS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf60fb8b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 13 x 100, 8-bit/color RGBA, non-interlaced\012- data
Size:   958
Md5:    feb4813787c85c5df359a2ee834332ba
Sha1:   39d19c1be41a3d04cf98285c4ea5e584135384dd
Sha256: 7ccbd203c5a5d5b69e4d518acf67e401d7e1a6c6d040e03a50dd0e0441336b0e
                                        
                                            GET /upload/milka-box1.png HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 14021
x-guploader-uploadid: ADPycdutY1DMBeym0kojhyp1Sd9IAM_1xCHS7Uc82IsU_-opiL-Q9wUl3738JT3wWjGiqlliFSnCYcn3ZsyTepZT7ar4Jy8Fcj0o
expires: Sun, 23 Oct 2022 18:30:30 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 07:49:06 GMT
etag: "04b00689badcb6d64c3f0b63e202ac86"
x-goog-generation: 1665474546710306
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14021
x-goog-hash: crc32c=w/Uzxg==, md5=BLAGibrcttZMPwtj4gKshg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QBx%2BGDL42kjHbpDVMzFLRFjO6rvtQmp4OraDzl%2FTd1ZhYOnXUhG9R%2BsFB8CqZDTTtNG0%2B%2FLfaS%2Bw%2BTS9Qz4zvsuLUHGHtxLR4%2BAnFhgMwA%2FFw%2Fncol8j67uqGEpj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf60fc1b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   14021
Md5:    04b00689badcb6d64c3f0b63e202ac86
Sha1:   3fd21a50f6ae5865340dd035e160eb032643d776
Sha256: dc9e514a2ee83e317ebb027fd149cf07a141f12e78c3c5a5cb22a76720c90447
                                        
                                            GET /upload/milka-box33.png HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 4637
x-guploader-uploadid: ADPycdukY2cJ6pzJskkMVFLIoV4WISiiDG47PyrYGT2oXqfB7QkwFA1JB5Ep9eV606UNWPQoezzZAKzCxYBBUNFZo7EE1bRzaJlS
expires: Sun, 23 Oct 2022 19:03:55 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 08:04:15 GMT
etag: "b1bd9953b4c292b15524cb39c33474b1"
x-goog-generation: 1665475455852506
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4637
x-goog-hash: crc32c=zIAM7w==, md5=sb2ZU7TCkrFVJMs5wzR0sQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2963
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VasQyy8TnMftoUlDDfH7AJFuXVOufcp%2BKSMo4F%2FqHtREotcT7wD3uwI13I6FScflixo0fG9N3pN680BHxGqBW06BQ9183bLWTupP6r0ZPhcgD2Nhm33qMZ7fh4kA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf60fc6b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   4637
Md5:    b1bd9953b4c292b15524cb39c33474b1
Sha1:   d6b97a96f8dc05e942444d0e40d37308f887fbef
Sha256: 9beeb6e9c40f27b0df96db08ebce6c62ccba10c65a247bf2beb1620778c10715
                                        
                                            GET /upload/milka-m.png HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 11422
x-guploader-uploadid: ADPycdu2ur2yPw97q2rOMgTDtgFlbEhY-uX6DadyQbna3wVGIjZTMSxD7X1FprzLUhPGBJkfl8QhzWHJwy8EXIYm3IOOkrcVwczI
expires: Sun, 23 Oct 2022 18:09:03 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 07:49:08 GMT
etag: "47ba5c0d9b9eee083c0453a0ae6ab724"
x-goog-generation: 1665474548123396
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11422
x-goog-hash: crc32c=CLMGhA==, md5=R7pcDZue7gg8BFOgrmq3JA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=td%2BCh17aqAaC3LSm%2F4p%2Fp8D5HINEDi4K6N9WkdubpR3j%2FdDoqiQqsTHHzmxw5ULDs8GzWrff0E9tgBMNc2TIEps84CZm7B0QO52ZUa%2FByv9%2B9ci0oFsdliOQu5W1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5ffb4b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 163 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size:   11422
Md5:    47ba5c0d9b9eee083c0453a0ae6ab724
Sha1:   0320295a5d889d62334a030ee066a2b7293f1ee3
Sha256: 3f26b5ed60aa0e9b57df6643ace2344e7275fdce065cb42816d7e5617d863660
                                        
                                            GET /upload/milka-show.jpg HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 55214
x-guploader-uploadid: ADPycdvA0NBn3L8k89WX56rlWBNx_qZ-uArH2OoPmZlKqVHlclZKX7oeF_OKTpQoo0lCW8MCLCUavJncyZKLA1vXPHJU9A
expires: Sun, 23 Oct 2022 18:09:04 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 07:59:29 GMT
etag: "fbba0cca552d8a7de56fbcd94db660a1"
x-goog-generation: 1665475169889551
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 55214
x-goog-hash: crc32c=UfcAog==, md5=+7oMylUtin3lb7zZTbZgoQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FILffvkFD%2BNCGL74kaKbGppOFGWxKzihfzTHbIoVvIC%2BcWankxPIjVT5BFQKuzpNXmvVPZtxRk%2FEW3aPgEgEks%2Buxz3CH8IHYBA2OTaJ3DvoN5liI79axpuCsB0K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf60fbab503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 520x287, components 3\012- data
Size:   55214
Md5:    fbba0cca552d8a7de56fbcd94db660a1
Sha1:   cea96c3db5c7c9013b3c391b7bcafec23420b0ad
Sha256: bac39a81891de718a28d7d4e5fcbdf6c437ef957d17ed2b6e630be29ce4b100b
                                        
                                            GET /upload/milka-box2.png HTTP/1.1 
Host: cdnbun.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.14.142
HTTP/2 200 OK
content-type: image/png
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 4338
x-guploader-uploadid: ADPycduuJBw6d-_Q3qUiX2K0qbBJY2EhRMZS7BL9ogjagcPdedAIQ0FJpfsKHidixH5uzNr6gfPOz1X011ClW7WqztNKlkcBm3Q2
expires: Sun, 23 Oct 2022 18:30:30 GMT
cache-control: public, max-age=14400
last-modified: Tue, 11 Oct 2022 07:49:06 GMT
etag: "899820355a7a7ba1ef3c8632406046ba"
x-goog-generation: 1665474546616876
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4338
x-goog-hash: crc32c=G/Gy5g==, md5=iZggNVp6e6HvPIYyQGBGug==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2964
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E8dI7rCYUJRiRhh%2B9bCHHEx8dRHXWoLwAKz6ZLEj0sCJl13L0R11wXibQIJMy4u3xqj%2F7BkfoRyWUprvELGKQDBeXvegrMT0gB6OkNS%2FkT%2FYC6ZvD6CoGaH7dBRs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf60fbeb503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   4338
Md5:    899820355a7a7ba1ef3c8632406046ba
Sha1:   a9121d5310aa70be7eb568f0ce81ef229238c3dd
Sha256: f858a32018a86455c529c5fb40572d61d18cc1c4e74dfb52be64acdce11e916e
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "920977CEE8CCF21C6FF27AFFDDB7F68D4AE731DA08500D973CAF3D7AA1E57849"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16367
Expires: Sun, 23 Oct 2022 23:48:05 GMT
Date: Sun, 23 Oct 2022 19:15:18 GMT
Connection: keep-alive

                                        
                                            GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 23 Oct 2022 19:15:18 GMT
age: 17973024
x-served-by: cache-fra19146-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2162
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16263)
Size:   2162
Md5:    bd3ea59ca12635e32402ec20cb196249
Sha1:   b1bfdaba4a00c2932245ff9eabea38016f9c9069
Sha256: b99f8f79de257275fdbf6a8e0eb4652b0d69429552234b1f444c08ae85000341
                                        
                                            GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
content-encoding: gzip
accept-ranges: bytes
date: Sun, 23 Oct 2022 19:15:18 GMT
age: 3544047
x-served-by: cache-fra19168-FRA, cache-bma1661-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20556
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65317)
Size:   20556
Md5:    b5ae87c0e4dd241b533e67053b0b719d
Sha1:   6b7b568694a95d81a94dea9ef7a85d1317d448dc
Sha256: 5bae5997fbca925ac6e52be8163ca897e751fcc9331552e0f77a22dd35b64521
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "6CFB32C93648DE2AEF65FDB82F4FA4905E5D4A3553020FBBB31DB6EC31159AAC"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4909
Expires: Sun, 23 Oct 2022 20:37:07 GMT
Date: Sun, 23 Oct 2022 19:15:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F190D0ECA3B49DE14B7773458EC0784D7800FA082B64E9DFF64E7164AB49DFF4"
Last-Modified: Fri, 21 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4450
Expires: Sun, 23 Oct 2022 20:29:28 GMT
Date: Sun, 23 Oct 2022 19:15:18 GMT
Connection: keep-alive

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "C6B7913A5F527703691DBB801CBB9F65A24B9600"
Expires: Mon, 24 Oct 2022 06:00:00 GMT
Last-Modified: Sun, 23 Oct 2022 18:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2334
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75ecccf6cc2eb4e8-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    9648250360fbbbf926312ce4fbe67ef5
Sha1:   50eac0ae743f4bb2fcae5e5cb13defe282fd75ba
Sha256: 91fce2309f8e1e055e59cb732b206b7dded4515645e255add8047f18a1c1abc8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=G-YP3DQB03D8 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 23 Oct 2022 19:15:18 GMT
expires: Sun, 23 Oct 2022 19:15:18 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76073
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18991)
Size:   76073
Md5:    0f4d82595c99c04365c143bee55a1dcf
Sha1:   f83e7ac14f0425e7e6ed8928164f99f7ffa50cbc
Sha256: 3de253ca273822042b128704cd52680cd97232e9755c8116700d1544a8449602
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0DA42FEB2F35824F4B6A5796864542FCB6F480C4111E10FD017A3A149F6F4DA2"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19245
Expires: Mon, 24 Oct 2022 00:36:03 GMT
Date: Sun, 23 Oct 2022 19:15:18 GMT
Connection: keep-alive

                                        
                                            GET /-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                            
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_outbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 180954
x-xss-protection: 0
date: Sun, 23 Oct 2022 15:22:40 GMT
expires: Wed, 17 Nov 2021 05:57:49 GMT
cache-control: public, max-age=86400, no-transform
age: 13958
etag: "v632"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 497 x 308, 8-bit/color RGBA, non-interlaced\012- data
Size:   180954
Md5:    fd835c1f326d3e7da0d9839550f66723
Sha1:   5004618bc15011d7d0f569f60f900d076b164b3d
Sha256: b2286c3ed452ee4eeb15d2044a90cfc456d4789b2fdbe42bb9e023c9da18e4a8
                                        
                                            GET /upload/yhde6.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 8953
x-guploader-uploadid: ADPycdv6aTAfGE_NNJ9LFMmqbTa7I8ZlS9xuzrxDxFnnDrRAPB3FeIvsSoqVxdk6Y3JIm-lo7Hn4uloAWkqaHAckwDe3LQ
expires: Sun, 23 Oct 2022 19:29:24 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:51 GMT
etag: "ee5371e6976fe9bb8b6d46278279f89d"
x-goog-generation: 1657560171630757
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8953
x-goog-hash: crc32c=YDJ99Q==, md5=7lNx5pdv6buLbUYngnn4nQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 148
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=umTc4z6jxW3n16TuPNejq33gJ6xTCDjlFAwp9zqSciQ7JFqWoBItSYxonSl1ahCiEsySolLoeYw5dBoT5sVwAG2ju1TY0xPnoUCp7CfgFR2USVibjy7F2%2FHORsTR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf72dfd745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   8953
Md5:    ee5371e6976fe9bb8b6d46278279f89d
Sha1:   c246da7df163264acac382d4a83ba162b08637a8
Sha256: ad1533c7cdb68e5cb8b5123a6775d6d5e67836e7187b46e27d5009a70a251ad4
                                        
                                            GET /upload/yhde9.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 9205
x-guploader-uploadid: ADPycdvs0YK_rB9cQAHfmCT10X7f703AoIsM5_nQgNFawqca9TnO20W2aLKHwElUxq13Ol0neBD-Joho_9RA7ksxgpb7ww
expires: Sun, 23 Oct 2022 17:44:19 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:52 GMT
etag: "011b2ea22f52406af58b64d1665f8452"
x-goog-generation: 1657560172678807
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9205
x-goog-hash: crc32c=9Zk+WA==, md5=ARsuoi9SQGr1i2TRZl+EUg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1760
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ZjWBfuBlbfiIj2j3pBWcvlKA4uwU%2B5Y5AOwtchIvQlPfEqi0j270Xn3CollhfgNA6D77SK4eFudUkud0txQKFV20p0qBpUtect5ilfGlMgOpQJ%2FpoNSwnUlCRAa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf72e02745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   9205
Md5:    011b2ea22f52406af58b64d1665f8452
Sha1:   180974bd7ba0be0bea57119080b3071f9e3b19d9
Sha256: 0681be4c83ebd047dbea1e6df073cf020d407d75fabe8ffcc40bb57ef9a19358
                                        
                                            GET /upload/yhde.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 11716
x-guploader-uploadid: ADPycdtrCXUu3d-5kC44p7A_3XhywiwvgDNsU_Q1PPvqjzgPe0-OYLPaHoUmfmxxPatrrmj8ze8_uDbLlZO_RiFdhRXQ7g
expires: Sun, 23 Oct 2022 19:27:27 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:49 GMT
etag: "c7401cbdc82cca5689669a88a41608fb"
x-goog-generation: 1657560169763046
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11716
x-goog-hash: crc32c=Vi3taA==, md5=x0AcvcgsylaJZpqIpBYI+w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 653
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P0AFVLoYuF5wHaYXQ1qc%2F7%2FanryDP01naIezmr9cStj0ZLjoJ%2B8B9xJ6IDm7AspDW8uxaPoDlngSbdozznyhnr6K1w2DuIqy8GOyeW3SuH4mcPbOz%2B79XgYX9rsd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf72dfe745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   11716
Md5:    c7401cbdc82cca5689669a88a41608fb
Sha1:   366e93242c88d9fdd3d58f5f3b46a1db75ed8d47
Sha256: 94508fbf165fff7477c232e0a1069f2aa87316b71b0499b1d687021c24142ae0
                                        
                                            GET /-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                            
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_inbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13695
x-xss-protection: 0
date: Sun, 23 Oct 2022 15:22:40 GMT
expires: Mon, 22 Nov 2021 12:23:38 GMT
cache-control: public, max-age=86400, no-transform
age: 13958
etag: "v630"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 251, 8-bit colormap, non-interlaced\012- data
Size:   13695
Md5:    ff055162c5d233506eece3fb69a47e74
Sha1:   49812e303ae6674819b6a7a6e0721d555ef64df4
Sha256: 7e46c8bcf219a0d6f0f3d5c5b027ed613678a0c54d637172d6495f428ff80150
                                        
                                            GET /upload/yhde5.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 7984
x-guploader-uploadid: ADPycdsO76VvlM8T5G7yyGeeeZE0FFx81WJOyJ3Q1uQXLaJ_40Ur--VU-EQGpPXvFsjofO0raK2LbtOe1o4E8QMQZMwAwA
expires: Sun, 23 Oct 2022 19:09:27 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:50 GMT
etag: "bf26d0b78d013f526a5f8eb153f9fd56"
x-goog-generation: 1657560170814014
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7984
x-goog-hash: crc32c=2hDYJw==, md5=vybQt40BP1JqX46xU/n9Vg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1349
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ZqE52%2B9g%2BleMI6T0qQEbmEKLccTnr7EsJ70uW%2FCY%2BC6YwqVcRwPKjM399TbGgq%2F1pDiwxun%2BeVVbjz5XT6vlLvymsUHaAwmRHH2mp4mLsMNc2sisX7nLQ8lzvE4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf72dff745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   7984
Md5:    bf26d0b78d013f526a5f8eb153f9fd56
Sha1:   5cb71ae75ad4a45e482570a02cf919bbc65fa135
Sha256: c0e0b2ed3e4352d31c1672785a0df72fa809063ac9383643ebb78f0e1486535f
                                        
                                            GET /upload/yhde1.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 12610
x-guploader-uploadid: ADPycdtfh5DxpmIF1ZBFMdDeNUHaAcmJwZZnl8TpGufA0Lx38-eukhWrRNLsr5__EH3aiNqL13_ZnYiBtvD0zjiaeD2Cvg
expires: Sun, 23 Oct 2022 19:16:58 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:49 GMT
etag: "8bb7f41971b23f34648e6b4797df26f3"
x-goog-generation: 1657560169688143
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 12610
x-goog-hash: crc32c=/laZCQ==, md5=i7f0GXGyPzRkjmtHl98m8w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2724
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bkjWupV%2BEjtCGcpFEh1aW3Da9Xcn3wGk3%2Bc6Z4UfdlsTi6WZSpv%2BOVTbhAIA3firdR7oqbRh3QV%2BAdEd%2BgMmz1WyeZdgBTQOHTdJAE8u%2F93CNgj%2BdA2ecVvHmZQG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf72dfb745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   12610
Md5:    8bb7f41971b23f34648e6b4797df26f3
Sha1:   3a2732b4bd2c9e45291f66a9872ef2d780fe831b
Sha256: df4dd6d2b21fd5d5bedc1259cedab7ace2eeec381c18ca487f47fb26af6792b6
                                        
                                            GET /upload/yhde4.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 8521
x-guploader-uploadid: ADPycdt_ozSjN2fKESi70osKTi-xq17s39b1KvmqNz3lSLY3gqfENQAIAVIaSnMyExLv7NICF_ANlViyvScq_yeG_JGsUA
expires: Sun, 23 Oct 2022 18:35:07 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:50 GMT
etag: "97c0fcc47524398cecf7d89e8854a01c"
x-goog-generation: 1657560170770744
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8521
x-goog-hash: crc32c=NqkxVw==, md5=l8D8xHUkOYzs99ieiFSgHA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3142
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wH20XOH9wB87%2Fc0tjL85V2V9z6QxF92gJFsukN0sUlO9P6CAKjgGKh%2F%2BU6SNnk8XHL3ilM%2FcamxFNgsFDPcgmzWETcgdh4O6PKxPbh4dlVegbQxQLN9RxCib0lE7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf75e55745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   8521
Md5:    97c0fcc47524398cecf7d89e8854a01c
Sha1:   bef604fbc4381f689b97ae2216acf1ea260f09e1
Sha256: bb56e2ea161221ac5e4c671d3d124cf5b1e50f64a412960baf51523679f37444
                                        
                                            GET /upload/yhde7.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 7197
x-guploader-uploadid: ADPycdus7Kc4sKChII0BY1iUPjmFEANxkpPzE04pv5Nq__GnTS69Fx58wcfHW23_NNibZmKQ6ivYL_VyW1I8Y7dH-YO1uQ
expires: Sun, 23 Oct 2022 18:35:07 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:51 GMT
etag: "e6973ef8b9321ae09803ede73ca9047d"
x-goog-generation: 1657560171874943
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7197
x-goog-hash: crc32c=LD3HAg==, md5=5pc++LkyGuCYA+3nPKkEfQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2960
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K27EmywQ0b%2FzR0Up67QmbRvzzihIpqN3hadTW6IGfFjTBD7EPaDuroK8sTyBqLV63%2BA%2FVNHA4G2g9nreDluLndpuPsmaazEXyXXM%2FI5hWpglNpHqxFCcqbN8JW8O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf76e79745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   7197
Md5:    e6973ef8b9321ae09803ede73ca9047d
Sha1:   7b93053d922fa89065796614f7183c7baefcb558
Sha256: 7593afdd1a987ff5a18338787f1e75f403739752cf357c4d4f3b32205d9606ac
                                        
                                            GET /upload/yhde3.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 8391
x-guploader-uploadid: ADPycduWGHoLIReJ2xiY1GVnOQ8Sn9-KO7a6VsLLFXT22xI0vdlIYJE6iIGVGBgqPrwjPpjaqkI118qosrIiLUda8XtWAQ
expires: Sun, 23 Oct 2022 20:07:26 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:50 GMT
etag: "d8f2b1db826a85b3d6a77f65c2eb8aa9"
x-goog-generation: 1657560170668162
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8391
x-goog-hash: crc32c=ow+ZSQ==, md5=2PKx24JqhbPWp39lwuuKqQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 377
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BW9Hf0OiN1GHbUS6WM70%2FVkXhfkTsY5VGb5R9pStjMjf5Z5ZSc8L6u9LYV%2BUvS3%2FnTQHJGHZ9JIJd7oewY6UtQhIEX1oCZ97tuG2oHRL3S1D7ce0ZIem%2BlOAb9x7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf76e73745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   8391
Md5:    d8f2b1db826a85b3d6a77f65c2eb8aa9
Sha1:   f2a5f76ea88f4f374ea2ed63a2d56262746f11b7
Sha256: ec87a4f107fab84a11b07c51a0c16da260136be7e9312267e9ac53ee1faac9cb
                                        
                                            GET /upload/yhde2.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 7500
x-guploader-uploadid: ADPycdvXJA2JymEnbnIrNCBRWfSdUIbx5ZpgaHNYrAmqSAEu2EJuOpzSzuaFRF72xSuPb5BMLeC9nUJG0Y2OXwgMKyVRog
expires: Sun, 23 Oct 2022 17:55:54 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:49 GMT
etag: "1e4cd34e22133192edbfdce16e8ba3a0"
x-goog-generation: 1657560169681386
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7500
x-goog-hash: crc32c=UJX5hQ==, md5=HkzTTiITMZLtv9zhboujoA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2284
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jSnQodFIGlciyZMrBDDxpm6saSGTdpMIwlXFUWBia6fejQhgwK%2Br5Uk6TOtr5mTPBk6v07nh%2Bf3hrVzjVJSm7zMkJvS4lRNigMppgoLWeZyp59bYICynDrEvQmdu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf76e75745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   7500
Md5:    1e4cd34e22133192edbfdce16e8ba3a0
Sha1:   0b975b36fee9e81118378e4d7f70860edfe80bd3
Sha256: 8f71eadc0e6e9d3c4e20bdab6122f130199f099c47933a8f9c31856b5c5a0842
                                        
                                            GET /upload/yhde8.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.235.74
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
content-length: 7939
x-guploader-uploadid: ADPycdveBphS_-pnKVzVFrummhVL4y-rwqrwPVvaeO5NigvucM2zoaYmtGTNgXYnAF61jn0RJAVLp2v2T0qNnSyKgeMNAg
expires: Sun, 23 Oct 2022 18:56:10 GMT
cache-control: public, max-age=14400
last-modified: Mon, 11 Jul 2022 17:22:51 GMT
etag: "b8b61d66db60a707e147d51f80cd7caf"
x-goog-generation: 1657560171890012
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7939
x-goog-hash: crc32c=VOlkAw==, md5=uLYdZttgpwfhR9UfgM18rw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YNUvTI5QyjrW7HsaLUqBTG3eRtFeRgiJPCjDbIK6c2s4ppn7X1EeWlLc9Bb9gZRWQC3%2Bj7RWHtxdtT3iqswBv58whCFUZvoXZrPAoOarzMADHtp4a2rp9olPd6Qi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf76e6e745b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   7939
Md5:    b8b61d66db60a707e147d51f80cd7caf
Sha1:   9caeead5c434baf1feb311daf7ce1aa19fa21863
Sha256: a17ccb0824fbac80cc0d82f280573c2e214876756d8e597e8fa10c9b83e4e342
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 345
ETag: "6CFB32C93648DE2AEF65FDB82F4FA4905E5D4A3553020FBBB31DB6EC31159AAC"
Last-Modified: Sat, 22 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4909
Expires: Sun, 23 Oct 2022 20:37:07 GMT
Date: Sun, 23 Oct 2022 19:15:18 GMT
Connection: keep-alive

                                        
                                            GET /bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166655251882993&xtt=5265073 HTTP/1.1 
Host: uprimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             185.66.200.220
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
server: nginx
date: Sun, 23 Oct 2022 19:15:18 GMT
expires: Sun, 23 Oct 2022 19:15:18 GMT
last-modified: Sun, 23 Oct 2022 19:15:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   78739
Md5:    ae135a4f87e50893e6ed5ed42c7cf009
Sha1:   9e730a473037f734a90da390c3b5bfe60e4eff81
Sha256: 09adc7559e6239f738ff93a7cb7b3c5a014a3121002cace0b8201ba50488f903
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2385
Expires: Sun, 23 Oct 2022 19:55:04 GMT
Date: Sun, 23 Oct 2022 19:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2385
Expires: Sun, 23 Oct 2022 19:55:04 GMT
Date: Sun, 23 Oct 2022 19:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2385
Expires: Sun, 23 Oct 2022 19:55:04 GMT
Date: Sun, 23 Oct 2022 19:15:19 GMT
Connection: keep-alive

                                        
                                            GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
x-guploader-uploadid: ADPycdv0chj5F1Awc6K7Usaiie2qXL87Fxg5kp7mYqQH9s8HWV5Nuv0HuTqJ2hz1F5xUG9MGapUfK4P-pfLXRasYr-w
expires: Sun, 23 Oct 2022 19:07:01 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2212
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kcYVUqhV1J1fMapmVMfkh7bn3XWJJ88BttlfoWW8h9CbUMjM7IrX8GAQdh%2FfPhFUHn6VQlkoaFV9fVJOYFz8t%2B%2BVmFyNFnSL8mLGbSVGxpHqvz2F8cbQ%2FZokhmqf0JLqCAU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5c860b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (63188), with CRLF line terminators
Size:   16173
Md5:    b1a8897eb49337fae4072c2f0dd456df
Sha1:   2d3ff75b40c253dc9683899618db6cbf816bb8d5
Sha256: ddb033abc7b001debf3282025316b09f6b64d7412327768c45c02ba71c78e94a
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "28DB09A2A0E821B37DC1CFB710BF896C438755BFC992EB775F41128B0E52E5D1"
Last-Modified: Fri, 21 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2385
Expires: Sun, 23 Oct 2022 19:55:04 GMT
Date: Sun, 23 Oct 2022 19:15:19 GMT
Connection: keep-alive

                                        
                                            GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
x-guploader-uploadid: ADPycds_5oPtcr3KFpC_u7Lnvdlqz8VeCGxAgHcXFP3zMljDMh6Q0ifyAwrLV7e0dbEbUBwQbF9kY0g0GrHWdqicRh8
expires: Sun, 23 Oct 2022 19:07:53 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2212
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fZ7JcfHlXqQOuXEgLcu4qTXANIu604npKREcNeIDnI%2F72hcqzxwSYa4uBC0E2zS96zozt9ZEs8Qs%2F%2Bvd%2BvOhnTYxgwNO8UNTV69pt9KaTjnKXyJwXkEuF8%2FIc14rmeP%2Fue0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5c861b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (48058), with CRLF line terminators
Size:   31773
Md5:    9697325a4be2de28e47eee2b6af3ed92
Sha1:   0d97971af74c55b7b18c2b49909a68c8995f2760
Sha256: bcded8886afe55258197c2d1f045944ffbaf8ccab4bb3b255c2da137eb03db2a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1f0cea17-2f8e-4f01-bdfc-54051ca7d7dd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9549
x-amzn-requestid: e1054150-7691-4446-bc6e-91a4fdccbdc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aIvfRH0oIAMFkJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634cf92e-41bd300b1693ad1b18368e22;Sampled=0
x-amzn-remapped-date: Mon, 17 Oct 2022 06:41:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: K6VXPlJ0Qt62p1uo0MMuDyOG6x6PwGx7nOYNZUTPXF-4cFoHm1ZhLw==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 09:13:57 GMT
age: 36082
etag: "2f85566b25b22ee703ba5348bce25434c83c69de"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9549
Md5:    b3a1ed5537b0d648ce6e0ecb427a3230
Sha1:   2f85566b25b22ee703ba5348bce25434c83c69de
Sha256: d35b1e39b8c6f1adc029eea8f3ffc911426aa49a87261fdb33a770e21ced69ec
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F412682e9-14c9-40e4-bfec-f73f656f5e10.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5348
x-amzn-requestid: d44ded7c-15b6-4c30-a810-4af1edbb9bc3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aPYYZEnboAMFcMw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634fa102-6bdd3c1a2fa437b106f8ea79;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 07:02:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dx2yJ8T_lM1OMR3h0DUtiV359392U2UyReU6hi4tOxxbvFR0iZ_kAg==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 10:33:33 GMT
age: 31306
etag: "4b5e283e4397985f837ab28d94c167ddfdb26c7c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5348
Md5:    37143b9d51a289f11607b6b0f9ba534a
Sha1:   4b5e283e4397985f837ab28d94c167ddfdb26c7c
Sha256: d664702a83cac4eaee1710fd03ca41e35d62ae699224490367e605b529e45566
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7a675ac-f55a-4071-867b-fffb2f9fabed.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7762
x-amzn-requestid: 5c275a39-95dc-4329-9483-44ca93719be2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aO1dKGS5oAMFR3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634f6920-2b700b217832bcd257e0f619;Sampled=0
x-amzn-remapped-date: Wed, 19 Oct 2022 03:04:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ShsGMLBfS7cs-LpXBQPQHWvf2ppuoPPIEVMDmaEjrGgoSHbz2z03Mg==
via: 1.1 d2575afea3774df33dcf5e5ff475025e.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sun, 23 Oct 2022 06:27:20 GMT
age: 46079
etag: "c4c9898711e33fb02374657dd18df8a41c78b4cb"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7762
Md5:    4df9a6ab2e2874f46f9a26da129ae848
Sha1:   c4c9898711e33fb02374657dd18df8a41c78b4cb
Sha256: e287d1b63e7644767f573e248f28ee610b2625691e5d42006c0595f7281a07d7
                                        
                                            GET /npm/lazyload@2.0.0-rc.2/lazyload.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
x-guploader-uploadid: ADPycdsQwI6S5jC2ZwwNbaEnMvjelWJ3GXYdnwkp6yGGRsWcMv2CGKN45430-s2v57JOsXldQJq3rMwQOTmm_DkHtW4
x-goog-generation: 1647502963816044
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4798
x-goog-hash: crc32c=lted8w==, md5=3G3pgTxxS6mXM8pPtdOh+g==
x-goog-storage-class: STANDARD
expires: Sun, 23 Oct 2022 19:07:06 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:42:43 GMT
etag: W/"dc6de9813c714ba99733ca4fb5d3a1fa"
cf-cache-status: HIT
age: 2212
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CiQNI44gJwVFqfHm9nKVYLR%2F04unshVIOfCrfNz3ICarcZXgp8qjzTn39uHIeqysnm2cgmtggQEsH8CxvPwoxLF1l%2FpfWKxhu7WZfd9DJlkrQF57UxC3%2BI5ltt4r0aNJOxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5c867b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4720), with CRLF line terminators
Size:   10143
Md5:    4b996ec5b3a5181c8b92e0216de4b7c4
Sha1:   2351daa28b68fab7e3ce91da696d41d94f2576f8
Sha256: cf724fa4760cb240d3e9e6cef3b1cf4b5f2dde9e6ecece30a428eece00464739
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd337e0f9-4135-4fa1-9843-c609356020a9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10036
x-amzn-requestid: b1f0e0b9-6fc6-4b7c-a9b0-55845cdfd2d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: abR9aEvjIAMF22Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63546388-72742b3a1279d76e2e842930;Sampled=0
x-amzn-remapped-date: Sat, 22 Oct 2022 21:41:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 90q23XmFTygl90mCmT8p2Qi7BY2K2gjg3apZpTreMxYFpgT-716CDg==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sat, 22 Oct 2022 21:50:45 GMT
age: 77074
etag: "066fb94a6ae38e57d67001cc319eea17f837d511"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10036
Md5:    bcadefe69587d4ab5bf5ff9e71eb5cab
Sha1:   066fb94a6ae38e57d67001cc319eea17f837d511
Sha256: 45b175a2cecee90b2d0efc16c4139686ffcf34bfac9084fe9e5e1c926dc1330c
                                        
                                            GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Sun, 23 Oct 2022 18:50:34 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2212
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KtPnrT9VJxIfkiq2Ext9cTnzRstAOtCja11KDxm1dc9IZ46LFNGQNmcy2tHSUAH%2BbeM7%2B3R8UrzQYPc%2BpU2d1Dq3AsXbEUwlBPshcik%2FrXYQygsI5pJUC3FC0m7%2Fk9ASlhs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5d86bb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21060), with CRLF line terminators
Size:   7664
Md5:    8ba7cbcd5faa88fb4f4323db960bb7fd
Sha1:   24bbaaefbea828d541b5af89acc81251cb06037e
Sha256: df70486291a87038ce31b9e79b99a20caf40d15248c5f905541541ae2731f666
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:19 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 27 Oct 2022 15:49:55 GMT
ETag: "b929a553e55e18c73fec314d791fb9ea5aafb010"
Last-Modified: Sun, 23 Oct 2022 15:49:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2530
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eccd002a00b4e8-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4ff9fe15bdbfde8f7508e9c71a11d688
Sha1:   b929a553e55e18c73fec314d791fb9ea5aafb010
Sha256: 0e227510a35dfee6771394324ad2bbb60b24ee43952061da114d7cad7d404273
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sun, 23 Oct 2022 19:15:19 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 27 Oct 2022 15:49:55 GMT
ETag: "b929a553e55e18c73fec314d791fb9ea5aafb010"
Last-Modified: Sun, 23 Oct 2022 15:49:56 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2530
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75eccd002e45b51b-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4ff9fe15bdbfde8f7508e9c71a11d688
Sha1:   b929a553e55e18c73fec314d791fb9ea5aafb010
Sha256: 0e227510a35dfee6771394324ad2bbb60b24ee43952061da114d7cad7d404273
                                        
                                            GET /hm.js?c7f1b3f152598f901bc0aad793b18b59 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11333
Date: Sun, 23 Oct 2022 19:15:20 GMT
Etag: fead86754564768b428d86c5e8101ce3
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=F1FE3DFDF4C6E9FF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (620)
Size:   11333
Md5:    afda151f605b197c1d22fbc283c5e322
Sha1:   81740003bf5e036c7b0fa002d614f7a14b6c0bca
Sha256: 7f81968cacfe4c117526c780cbe887cf931e869fd8e85a6aa936d0b2cbbdaa0d
                                        
                                            GET /hm.js?b521817f22507716e364b3fe28644f8b HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11370
Date: Sun, 23 Oct 2022 19:15:20 GMT
Etag: f2873ae29884e173999f8ee6d08f3ea4
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=D9BB22F19C9CB83A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (657)
Size:   11370
Md5:    3dbd9a4f8d95669db485ec59ccd2d800
Sha1:   80c449b16905882df8ad9c8f42990c4a3e5618a0
Sha256: 67747bc549ba6121d2a810055a7e53ffa94a427fd8f5f2feb283bf49d8a23f18
                                        
                                            GET /hm.js?e580d24a0af01241d534439cfcc0c10c HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11336
Date: Sun, 23 Oct 2022 19:15:20 GMT
Etag: a3d277982f984bfe1386d1a333f8abc3
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=12EF3260E2EEF0B1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (623)
Size:   11336
Md5:    a9d29c54837ef970aa845047dcb5051d
Sha1:   6e7d6e0657ac1551a5747cb35d29dada9202b800
Sha256: 3eb0cb502b2e726ec5e3cc436a219904067da0ad4fa6decd89377210dd7bb538
                                        
                                            GET /hm.js?4ae5417a710c46be487067d7b34b58be HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11379
Date: Sun, 23 Oct 2022 19:15:20 GMT
Etag: eed8313f82e910ad7a9b33463c14936d
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=1CBB8C7E712C4CF1; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (666)
Size:   11379
Md5:    03a45cad408cd3c22a8885612b019b70
Sha1:   72628a4b3f55deee3ee46fffbecf9acc7873f72f
Sha256: 039c1ccf233b9d99285395790bcc3d1a131cb164f3250946fbe257a7e8982340
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=539927779&si=c7f1b3f152598f901bc0aad793b18b59&su=http%3A%2F%2Fynxtek.cyou%2F&v=1.2.97&lv=1&sn=63006&r=0&ww=1280&ct=!!&u=https%3A%2F%2F80w19v.cn%2F4nPFyMgM%2Fmilka-m2022%2F%3F_t%3D1666552516800jwplms1666549066131%231666552518853 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 23 Oct 2022 19:15:21 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=95E99481A35F0299; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=969964908&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fynxtek.cyou%2F&v=1.2.97&lv=1&sn=63006&r=0&ww=1280&ct=!!&u=https%3A%2F%2F80w19v.cn%2F4nPFyMgM%2Fmilka-m2022%2F%3F_t%3D1666552516800jwplms1666549066131%231666552518853 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 23 Oct 2022 19:15:21 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=1797E657F1BF2CB0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=28812632&si=e580d24a0af01241d534439cfcc0c10c&su=http%3A%2F%2Fynxtek.cyou%2F&v=1.2.97&lv=1&sn=63006&r=0&ww=1280&ct=!!&u=https%3A%2F%2F80w19v.cn%2F4nPFyMgM%2Fmilka-m2022%2F%3F_t%3D1666552516800jwplms1666549066131%231666552518853 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 23 Oct 2022 19:15:21 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=19F354B4238DF8AE; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=620922227&si=4ae5417a710c46be487067d7b34b58be&su=http%3A%2F%2Fynxtek.cyou%2F&v=1.2.97&lv=1&sn=63006&r=0&ww=1280&ct=!!&u=https%3A%2F%2F80w19v.cn%2F4nPFyMgM%2Fmilka-m2022%2F%3F_t%3D1666552516800jwplms1666549066131%231666552518853 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Sun, 23 Oct 2022 19:15:21 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=9131C3CD4F5E9B2A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
x-guploader-uploadid: ADPycdujKqP4OmsICcw4by2ej4M3gF2bmp67KcND5Yd7ZkChGu92L3U7j930k4J7s5KmD98KzStiLKDZt_7_8jjTVv4
expires: Sun, 23 Oct 2022 18:50:56 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2212
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YCNoTAlVz5zUptGfBfIbv9TkWFVMQHslp0s0mwrz1eXgk3GhKbctj9H%2B6nPSl2mAnx2IWVTcu8%2Bv3kHP5BvcFOj7jWJUUxdGNPO4doRZH7uXCE2xwiZ7SLjPUH9R%2F1OARmc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5c855b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /4fe48aebd6/4f59451604/?placementName=Pop&randomA=0_1121&maxw=0 HTTP/1.1 
Host: bonepa.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             185.66.201.42
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
server: nginx
date: Sun, 23 Oct 2022 19:15:21 GMT
set-cookie: shown1=0; expires=Mon, 24-Oct-2022 19:15:21 GMT; Max-Age=86400; secure; SameSite=None used_ad2633623=1; expires=Mon, 24-Oct-2022 03:59:59 GMT; Max-Age=31478; path=/; secure; SameSite=None total_impressions=1; expires=Mon, 24-Oct-2022 03:59:59 GMT; Max-Age=31478; secure; SameSite=None used_c_51865=1; expires=Mon, 24-Oct-2022 19:15:21 GMT; Max-Age=86400; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /bnr.php?section=General&pub=593174&format=300x50&ga=g HTTP/1.1 
Host: uprimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.66.200.220
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Sun, 23 Oct 2022 19:15:18 GMT
expires: Sun, 23 Oct 2022 19:15:18 GMT
last-modified: Sun, 23 Oct 2022 19:15:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /js/responsive.js HTTP/1.1 
Host: bonepa.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             185.66.201.42
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Sun, 23 Oct 2022 19:15:18 GMT
last-modified: Sun, 02 Oct 2022 13:10:11 GMT
etag: W/"63398db3-be7"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /4nPFyMgM/milka-m2022/?_t=1666552516800jwplms1666549066131 HTTP/1.1 
Host: 80w19v.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ynxtek.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             188.114.97.1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Sun, 23 Oct 2022 19:15:17 GMT
vary: Accept-Encoding
set-cookie: pType=mo; expires=Sun, 23-Oct-2022 19:27:17 GMT; Max-Age=720; path=/; domain=80w19v.cn
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B1pZo6fNCIPQaA5AvNzsTBFF%2BVLLHbFOkWLmsIXRpvV0qP2KUDCH4VGlVhJSfVGs9BE5dJSG9fp%2BIm%2Fn%2BMe8cAx1SfBB%2BlT4q%2BPQ9i1A0VbPsXAFwlqF1DSTkOQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75ecccf15c080b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://80w19v.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.21.0.245
HTTP/2 200 OK
content-type: text/css
                                            
date: Sun, 23 Oct 2022 19:15:18 GMT
x-guploader-uploadid: ADPycduCHwg6n53VPzNb_-57qJzhoPJbEBdMgpsWgTX19t4NIh3Tdte6MCXenDGQTAuiJrpSRG3G9WDZErClLNvZVXhXccOSWw
expires: Sun, 23 Oct 2022 18:50:41 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2217
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3KeQWhwj%2F%2F1FKkpnqz%2FVmfAyog%2F50Li2AuetRPV4xgYsw0l2UwHxORa%2FFNCCOGH3RU9e6NKrwh8DwdTkWmNLMFQDpWyllO%2FvJ%2FitNcc8zVIrCdPUydP3MGU8lik18bF%2BAUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75ecccf5b852b512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: