librarianafloat.cn/usps/tb.php?pk=gx1664498854266
104.21.75.89
200 OK
558
URL
HTTP/1.1
librarianafloat.cn/usps/tb.php?pk=gx1664498854266
IP
104.21.75.89:0
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (558), with CRLF line terminators
Hash
1d64a2f8771d604a8561a6907b0a9374
5dc805e01cccecbd67322a9538b26f36d3607357
8806561a1de4b06f0085c55feec0e2bd043f6826ce14db37de20f56656c921be
Analyzer
Verdict
Alert
fortinet
Phishing
GET /usps/tb.php?pk=gx1664498854266 HTTP/1.1
Host: librarianafloat.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 22:16:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dxvb7DmXzdS%2BxWh6gaoob5byXMSYqbLUy3dO%2FAEIvMD7SQpMBMqsx6qEpXYUtTsdo%2Bh9IegjFvL%2BU8ZTZRG%2Fb8J22cz0%2FZyxjgHWmM8vsf3%2FJ%2BHuKv2LTgv8gICf93sE0JPLGFE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7538904b0b04b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
13.224.103.49
200 OK
939
URL
HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
13.224.103.49:0
Magic
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 01 Oct 2022 21:59:10 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 110750d14d1d900cd5c76d0ac872f5dc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ZRH50-C1
X-Amz-Cf-Id: v2ehLfqdgfYe1AikhIPt8NKfOcViRe7C2wdkx7dsLY_Rz02kG1uEdQ==
Age: 1046
r3.o.lencr.org/
23.36.76.226
200 OK
503
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.
Hash
24cdc937930ac2ef9c8f46ba1deabcc5
397417929951bf20f235d5f91510163ac213dc71
eb128aec099dbf1919ee5d965221e904ad3a2162583683cec44518640b505447
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB128AEC099DBF1919EE5D965221E904AD3A2162583683CEC44518640B505447"
Last-Modified: Sat, 01 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2893
Expires: Sat, 01 Oct 2022 23:04:49 GMT
Date: Sat, 01 Oct 2022 22:16:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
13.224.103.45
200 OK
5348
URL
HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
13.224.103.45:0
Magic
PEM certificate\012- , ASCII text
Hash
6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 01 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 792f70324a941726ce7e749514e6fc3c.cloudfront.net (CloudFront)
x-amz-cf-pop: ZRH50-C1
x-amz-cf-id: xdqflv2LSTabu81FlcN4_3etAx0jx1649oKx7hMVfJjY9A_a67ah-A==
age: 60489
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239
200 OK
12
URL
HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
Magic
JSON data\012- , ASCII text, with no line terminators
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 01 Oct 2022 22:16:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
librarianafloat.cn/favicon.ico
104.21.75.89
200 OK
455
URL
HTTP/1.1
librarianafloat.cn/favicon.ico
IP
104.21.75.89:0
Magic
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash
3c5d244b8b6b192c76a2c4331450c235
7e53f5ad871fcd67705eaf77f1ca9ff247143e1e
e0f26b6349453a86cd1f0f87cfd80559ef7edb6d88ff0af9ced7d7e413c548e3
GET /favicon.ico HTTP/1.1
Host: librarianafloat.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://librarianafloat.cn/usps/tb.php?pk=gx1664498854266
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 22:16:36 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2016 03:54:11 GMT
ETag: W/"5861e5e3-1b0"
Cache-Control: max-age=14400
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=683NmEPpg42Br%2F7Y86ZkeHhhccpWS0b%2BEpmQzLb0rU0GWjXT4MXcnnthfBtfMlzqVdxp6FFihvWn00CqqrWhEiaMF3sATFa3v7lkoqtxHlDWZ2F3ZalzVYMsopfi2CwoHdb%2Br8s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7538904dcdc7b4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
librarianafloat.cn/j/og2.js?_t=1664662593184
104.21.75.89
200 OK
942
URL
HTTP/1.1
librarianafloat.cn/j/og2.js?_t=1664662593184
IP
104.21.75.89:0
Magic
ASCII text, with CRLF line terminators
Hash
bad1af26351d2e87c035596233940ab0
9ac0e34dcbfd29ca3070c506c200777a8016b161
bc734ed6fc97cbcbaa0ed5236ce8aa46754596a9a79eef96684242d231d0644e
Analyzer
Verdict
Alert
fortinet
Phishing
GET /j/og2.js?_t=1664662593184 HTTP/1.1
Host: librarianafloat.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://librarianafloat.cn/usps/tb.php?pk=gx1664498854266
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 22:16:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 11 Jun 2022 06:57:07 GMT
Vary: Accept-Encoding
ETag: W/"62a43cc3-850"
Expires: Sun, 02 Oct 2022 10:16:36 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mjwXqUN02922ZfB6jxiPlNHuBs%2B%2BOznGedDAkT7WjUlm%2BkOyC5ixHJiMlhUVyND0sdnqz7uGN9TT6Q2ON%2BH%2BSexKNoOEzEOIVSsfIYV4FG8%2BI2vq3ySrucXaklh%2FuyddR3F%2BeiQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7538904e6e3cb4f4-OSL
alt-svc: h2=":443"; ma=60
librarianafloat.cn/j/og2.php?_t=1664662593250
104.21.75.89
200 OK
92
URL
HTTP/1.1
librarianafloat.cn/j/og2.php?_t=1664662593250
IP
104.21.75.89:0
Magic
JSON data\012- , ASCII text, with no line terminators
Hash
9aefd5ca784296fa998d710c69b609d3
fe06c6623227dd0b894dfa89cc692be7705baef1
3f45bcc3d919d5358a4f4c6904d99e460b67848eea8b489d6ba47abdca36ae04
Analyzer
Verdict
Alert
fortinet
Phishing
POST /j/og2.php?_t=1664662593250 HTTP/1.1
Host: librarianafloat.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 44
Origin: http://librarianafloat.cn
Connection: keep-alive
Referer: http://librarianafloat.cn/usps/tb.php?pk=gx1664498854266
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 22:16:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BUSxIv226z%2BDKpP%2B4lz9832K4biwMYNT%2BkqRMz0JN3uPLKsJVJS6E4OBKhpp7QsSZwzRf1ZZHuU%2FyTAVXYlXxZZjVjz5QTpV7%2BbQSx%2BE3IBDv58S9V1lT9sl9XgzLlfQ4384bf8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7538904ebe9cb4f4-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/s/gts1p5/J9SXWUI3FKg
142.250.74.3
200 OK
471
URL
HTTP/1.1
ocsp.pki.goog/s/gts1p5/J9SXWUI3FKg
IP
142.250.74.3:0
Hash
d82d5b8c443b97f272ba7d18c8f92ff8
1fab3d447d740ef70306c801aecd6ded1b5a962e
5fbd943b6bb879a421d72b64b6d3200f50f50702fa54389869ccb52941d815df
POST /s/gts1p5/J9SXWUI3FKg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/J9SXWUI3FKg
142.250.74.3
200 OK
471
URL
HTTP/1.1
ocsp.pki.goog/s/gts1p5/J9SXWUI3FKg
IP
142.250.74.3:0
Hash
d82d5b8c443b97f272ba7d18c8f92ff8
1fab3d447d740ef70306c801aecd6ded1b5a962e
5fbd943b6bb879a421d72b64b6d3200f50f50702fa54389869ccb52941d815df
POST /s/gts1p5/J9SXWUI3FKg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
13.224.103.49
200 OK
329
URL
HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
13.224.103.49:0
Magic
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Sat, 01 Oct 2022 21:29:33 GMT
Expires: Sat, 01 Oct 2022 22:25:22 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 871dedfc10f4428aa2412b6f788b791a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ZRH50-C1
X-Amz-Cf-Id: oUkBZxjyQScOeeq0kPFbfgtD469hDJiUKw88R7EZKFpAAj_eVk9ZFw==
Age: 2824
cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
151.101.85.229
200 OK
2162
URL
HTTP/2
cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
IP
151.101.85.229:0
Magic
ASCII text, with very long lines (16263)
Hash
bd3ea59ca12635e32402ec20cb196249
b1bfdaba4a00c2932245ff9eabea38016f9c9069
b99f8f79de257275fdbf6a8e0eb4652b0d69429552234b1f444c08ae85000341
GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 01 Oct 2022 22:16:37 GMT
age: 16083103
x-served-by: cache-fra19146-FRA, cache-bma1644-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2162
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3
200 OK
471
IP
142.250.74.3:0
Hash
a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226
200 OK
503
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.
Hash
5122e4e90dbec75b210b4ecb32441966
0ee24da64bfdf35ed16af732ac75128d617b4bd0
d1b1c22a750abac917f9036a9db2ddf59b7cc1fc63a819853b5ddc348805c4df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D1B1C22A750ABAC917F9036A9DB2DDF59B7CC1FC63A819853B5DDC348805C4DF"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21061
Expires: Sun, 02 Oct 2022 04:07:38 GMT
Date: Sat, 01 Oct 2022 22:16:37 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226
200 OK
345
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.
Hash
61075d74ce58e2de19aeeca2b961c492
f1c5ca0aa96bfea70fde50c2cd5b0dae39ed233e
6af1a8aff17328532542dbe0d8f10187830ee18d222a3514a5b996715930c24e
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "6AF1A8AFF17328532542DBE0D8F10187830EE18D222A3514A5B996715930C24E"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9038
Expires: Sun, 02 Oct 2022 00:47:15 GMT
Date: Sat, 01 Oct 2022 22:16:37 GMT
Connection: keep-alive
cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
151.101.85.229
200 OK
20556
URL
HTTP/2
cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
IP
151.101.85.229:0
Magic
ASCII text, with very long lines (65317)
Hash
b5ae87c0e4dd241b533e67053b0b719d
6b7b568694a95d81a94dea9ef7a85d1317d448dc
5bae5997fbca925ac6e52be8163ca897e751fcc9331552e0f77a22dd35b64521
GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
content-encoding: gzip
accept-ranges: bytes
date: Sat, 01 Oct 2022 22:16:37 GMT
age: 1654126
x-served-by: cache-fra19168-FRA, cache-bma1644-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20556
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3
200 OK
471
IP
142.250.74.3:0
Hash
a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.76.226
200 OK
503
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.
Hash
6eaace45276e036dcd6e50caea5d6242
72192fc2cf54e8326321fc7155dbb0ce85215bc7
294cc5524f6ba6dd2af8117431323b6dd2af8bad084fef2f9c77e6291e440e53
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "294CC5524F6BA6DD2AF8117431323B6DD2AF8BAD084FEF2F9C77E6291E440E53"
Last-Modified: Thu, 29 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17248
Expires: Sun, 02 Oct 2022 03:04:05 GMT
Date: Sat, 01 Oct 2022 22:16:37 GMT
Connection: keep-alive
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
104.21.0.245
200 OK
8135
URL
HTTP/2
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP
104.21.0.245:0
Magic
ASCII text, with very long lines (21060), with CRLF line terminators
Hash
1485575df8835d8b280da043f433fc8f
008eef56a827b9bd817b2a164e75d4957cd59ff8
54d9e1446dad5dc4e5984a0e7294c8b26322094cf5a6280084aa02dcf0c5aab2
GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Sat, 01 Oct 2022 22:12:10 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5qPpomHscLZlNpuooT4m0lbhoex25oOgQ8Ob8cAb0j5o0EEGFVWuMgw5LfuWYCvzkpYrsYFZPafqBDb56VxOhw%2BXSKL53W%2FuJ7Gg95d1JE%2FXC8KJI56UEpYctzaH6J19l8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389050af2ab500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
142.250.74.168
200 OK
74940
URL
HTTP/2
www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
IP
142.250.74.168:0
Magic
ASCII text, with very long lines (18966)
Hash
ccce1a2099a04d4df2c1d5e46bd9cbab
6557df347b0fa36e31180f7331047057561939d1
7f37f2fc6686211757d2828ccd3bc2144abc285ff14196971a96f551ebb2945c
GET /gtag/js?id=G-0C230YDF7G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 01 Oct 2022 22:16:37 GMT
expires: Sat, 01 Oct 2022 22:16:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74940
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
142.250.74.168
200 OK
74958
URL
HTTP/2
www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
IP
142.250.74.168:0
Magic
ASCII text, with very long lines (18966)
Hash
a1ebaa9a10d6b2cf412fb6f0f2535e3f
0da73a76f80f247c993fce875f0bc500a5ef239e
295778d76b01fcd3bbed8db9147558e172776cd1cd4793d755a59bbfc2e56576
GET /gtag/js?id=G-LW7434MYMN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 01 Oct 2022 22:16:37 GMT
expires: Sat, 01 Oct 2022 22:16:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74958
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
263cdn.com/upload/Joseph%20Kanchi.jpg
104.21.235.73
200 OK
17788
URL
HTTP/2
263cdn.com/upload/Joseph%20Kanchi.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash
74bde6939f074bbe9cb047c59d756ffe
030b4e6729dcbb973b72f1a67c09099fe0dd2f2b
a298f992db50a2c50f29b0f4fe8fe58f5ddb09de13fbf57fcf36d3ec631de62a
GET /upload/Joseph%20Kanchi.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 17788
x-guploader-uploadid: ADPycdvDhK65WmF4WQmHKtIOSBenu8nWErTq9ik75SoZSXYR6ETvZV3BCUoJncLHNVkUa9anLY9Ow-2zLQkR3yzQsvtL0g
expires: Sat, 01 Oct 2022 21:32:45 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:39 GMT
etag: "74bde6939f074bbe9cb047c59d756ffe"
x-goog-generation: 1655329599108979
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 17788
x-goog-hash: crc32c=W0Dksg==, md5=dL3mk58HS76csEfFnXVv/g==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2527
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bk86DIhFExFbyFTX%2FHTMB4mPapPM49Qh4eJpXCHXfJwzD5Tv939Gu7l%2BeV2ARjUt%2BELoYOwvyhx3mbUFk5%2FK4EdvanKYEomWUzuLdZnTwpY18c5PiwGxxNfK6kTk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8d77407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/Zuri.jpg
104.21.235.73
200 OK
29705
URL
HTTP/2
263cdn.com/upload/Zuri.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash
81cac847e1b4add31315a7b64943e9b3
ee6e0ea64ca57d70f2e81432b79692a35f8110bd
fa36a530fb40523ca5656d8bad2637e239d04547b7472a4442a7adb4c9730ed9
GET /upload/Zuri.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 29705
x-guploader-uploadid: ADPycdsTB6c2wPmuoC0qjWw0agiXLfEK68s4DWua-m7EhOBtVYVuo0ClHFonecnVSWXyIFAWM1-NerGf1njaJCGxdsjAYH9m2DUI
expires: Sat, 01 Oct 2022 21:24:47 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:48:05 GMT
etag: "81cac847e1b4add31315a7b64943e9b3"
x-goog-generation: 1655329685586817
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29705
x-goog-hash: crc32c=TLKIDQ==, md5=gcrIR+G0rdMTFae2SUPpsw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1692
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nBNGt5TMtz6sa9RAgSYnfR10TWN1VY8fr3IV1ZWzwZDiwlWKBb%2FiQbCI0AVsWzvQkzUhLmMedtHPP518cAvypxECHAwkZVAIi4wfNLOMP2g9huMEMzWQTHnH5yqq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8d17407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3
200 OK
471
IP
142.250.74.3:0
Hash
24501d03aea1956ea72b57f8995de1bf
52664635fe59a95e14e3d0650dfc9adc325e12b9
331295e539c0b1182de294b4c42911a8d95507c8f0006731fc6e99200c76881d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
263cdn.com/upload/usps.zz.jpg
104.21.235.73
200 OK
5030
URL
HTTP/2
263cdn.com/upload/usps.zz.jpg
IP
104.21.235.73:0
Magic
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 206x120, components 3\012- data
Hash
21127efc42b96cdac29a1e279d404823
1610318f0b89e2096a33c45fcd4c1d207e12aff0
48129ec4b0ffd287b68079f5cb837b12b7e66f66a88ef476084c6d0538c9c3a4
GET /upload/usps.zz.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 5030
x-guploader-uploadid: ADPycdst8dAqpiCz3t-1SRyhhRRc8LOcXHQhAy4V3ruwZw6pdhZ_aH3JT-4NQNEO_Bkmdg0lIJI31B8ZZR5KgtoCkEjAtzJ1vXhp
expires: Sat, 01 Oct 2022 21:14:31 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 14:55:46 GMT
etag: "21127efc42b96cdac29a1e279d404823"
x-goog-generation: 1661439346199882
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5030
x-goog-hash: crc32c=x9U1/g==, md5=IRJ+/EK5bNrCmh4nnUBIIw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2535
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hWR%2FrRfOqbtlViFUUu1g6a4%2FME6NOkPzY%2FbOwIPFiEgiylkmLy34fvjbp0HoSeiv%2F2X%2F6QSsMztmy3XB6vQcTAUhDkauOzPiLrDIzfdCS1OjViNU6HZxkZ%2BZ70Fl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8cc7407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/Treesisilia.jpg
104.21.235.73
200 OK
24569
URL
HTTP/2
263cdn.com/upload/Treesisilia.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash
22fb858c0563c2482d086cca3cd26cb6
d627302ed6b80ddc306247e736019d550a8ddf73
693b14ac3a2b4221d95ea3071c203dde4882b79aa1cb7bb8ab647802762b6f52
GET /upload/Treesisilia.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 24569
x-guploader-uploadid: ADPycdvS0ROLT0EBQiNPWUI-jTcF0moCT0SuvTSF2Fnswk7WYC3wMoNKJWXSyVH00xm88rTdhoSv3NvTx98DgmyK3WmvkEt8Pl-L
expires: Sat, 01 Oct 2022 22:04:39 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:47:57 GMT
etag: "22fb858c0563c2482d086cca3cd26cb6"
x-goog-generation: 1655329677032585
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 24569
x-goog-hash: crc32c=hwzIAA==, md5=IvuFjAVjwkgtCGzKPNJstg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 717
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k7nyFhdfUleBC7XSHu%2FrSfBKh4dpBpB7Y7UW9rCjswYsUfgr30ZM4K%2BLM8e7BTOWUKGWnPdqIWtNI88TTHCFAa7JhXllkGtT1lqjZGxMvOm8l4EdwxJCuTHJbGja"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8da7407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
104.18.20.226
200 OK
1462
URL
HTTP/1.1
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1
IP
104.18.20.226:0
Hash
cf176be21500683add9b17106d480fbc
f3600b4544080ee7202b32e4dd7e741e16b866b3
b7c377500a7404eb47f03ecd5c095a1314a0d63a883cbea65d49b72ec46e04b1
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 01 Oct 2022 22:16:37 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "81D7645B8B5F98E7BB77388C6719C6E28C770A64"
Expires: Sun, 02 Oct 2022 09:00:00 GMT
Last-Modified: Sat, 01 Oct 2022 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 1569
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 753890520aa40b3d-OSL
263cdn.com/upload/Rustam%20Oruj.jpg
104.21.235.73
200 OK
28866
URL
HTTP/2
263cdn.com/upload/Rustam%20Oruj.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash
7a81bfffa80a49fa130eaf03378d3b6d
98d2920144684413b97938217af15fdb5d0e2ca4
3f956b8874dc18d21d563308e8c9033daf5196ba5aef69b527e8ed5290199429
GET /upload/Rustam%20Oruj.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 28866
x-guploader-uploadid: ADPycdtKfwbbjKdm6TTTuJZPrH2UUmRjNU4KS2gbUcKrI4H-jIQc82DpSzIvhjDZ4MITDB_yVjAexlq0YOqIDzdH5CgR7ztf17AT
expires: Sat, 01 Oct 2022 21:06:32 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:47:28 GMT
etag: "7a81bfffa80a49fa130eaf03378d3b6d"
x-goog-generation: 1655329648409928
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 28866
x-goog-hash: crc32c=/SFR5g==, md5=eoG//6gKSfoTDq8DN407bQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1793
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TUSqWNNOv64QzC547BPqTkdcBlndqMXSTnpQnqkhTACY5TPYk2Ss4B3LBtoOLQtqqflFc43UhhhGUaTSsiZOQin2gB0AUuCFuvnAfjnMNpp5AXy8XEe74lcWTIT%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8de7407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
142.250.74.161
200 OK
13695
URL
HTTP/2
1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
IP
142.250.74.161:0
Magic
PNG image data, 350 x 251, 8-bit colormap, non-interlaced\012- data
Hash
ff055162c5d233506eece3fb69a47e74
49812e303ae6674819b6a7a6e0721d555ef64df4
7e46c8bcf219a0d6f0f3d5c5b027ed613678a0c54d637172d6495f428ff80150
GET /-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_inbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13695
x-xss-protection: 0
date: Sat, 01 Oct 2022 20:32:59 GMT
expires: Mon, 22 Nov 2021 12:23:38 GMT
cache-control: public, max-age=86400, no-transform
age: 6218
etag: "v630"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
263cdn.com/upload/Pierre%20Renaudin.jpg
104.21.235.73
200 OK
21791
URL
HTTP/2
263cdn.com/upload/Pierre%20Renaudin.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash
8f63e05228dc94b4f5091a84c9b4168d
4b2d1fe92d6461bb7e39415cf3c8af4fa104791e
9fbff31d3ad789f22276cc030afe35e67e10928db0ff2f384fcedc30ab48ae21
GET /upload/Pierre%20Renaudin.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 21791
x-guploader-uploadid: ADPycdtY74Db5IizNzfWB7t1EtJCOn834FBsfEYjBn-lFCPE07g4n1JFrw30FM6TqG5Ia-5jMcUVbltpsPu7AuMyUi5SG0P9XPaB
expires: Sat, 01 Oct 2022 22:48:51 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:47:17 GMT
etag: "8f63e05228dc94b4f5091a84c9b4168d"
x-goog-generation: 1655329637728133
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21791
x-goog-hash: crc32c=bXAAZg==, md5=j2PgUijclLT1CRqEybQWjQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SRzo0ppdJuI8B5rISO8LLFCZqNtM7Cey%2Bh165JPQrkJI2U62tTAgWRpXnDmvc6IKPA9fkYoPK6n%2F4rWgBoYWstVuZ%2B7agc3T%2BZr3k5ph0x8AvhnsFbD4ONcs4Dc%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8d97407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/uspsm.box1.png
104.21.235.73
200 OK
27996
URL
HTTP/2
263cdn.com/upload/uspsm.box1.png
IP
104.21.235.73:0
Magic
PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash
2a424d24ab2c74f09c1cdef968d0c6e6
08f4527d6ef70aeb2e9338f61c0292d201ce2aa3
5edbcaaf73e0b2bc018151cb44a4b53fdf39e5fc00a217cb4a050d1dcb88f7ce
GET /upload/uspsm.box1.png HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/png
content-length: 27996
x-guploader-uploadid: ADPycdvelgjqfH6T3ebZFEHmSVuaHnAZSLnVYHeMzspenujMes-Qoi4UhCi23jm1DETYoagb1cPv2I-RfrVRZ4FweNYszg
expires: Sat, 01 Oct 2022 22:11:27 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 15:04:36 GMT
etag: "2a424d24ab2c74f09c1cdef968d0c6e6"
x-goog-generation: 1661439876670381
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 27996
x-goog-hash: crc32c=xH44hQ==, md5=KkJNJKssdPCcHN75aNDG5g==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3487
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8IP%2FzeO4hhajRBBJyxBWA6RhEa%2Bm8QuINoC1pm%2FDAjrq0iOypIU3fOn3Ot2y40nnOD6QUdaCk2dSPZqzD%2FHZPen5eBrxBTa1J7jLuA%2BbeZBQe1gpzhrOHbuV6w4R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8d47407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29
200 OK
471
IP
93.184.220.29:0
Hash
829e839c217bf861b8cf90c8d636f510
459714fcf0d374bdc078ef59d122d59bf9312c5f
36282e09bb25caf3d7350c4bee485cb87947aabc7d7409169caf15c2e75d8b7d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5252
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Last-Modified: Sat, 01 Oct 2022 20:49:05 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
263cdn.com/upload/usps.zo.jpg
104.21.235.73
200 OK
13687
URL
HTTP/2
263cdn.com/upload/usps.zo.jpg
IP
104.21.235.73:0
Magic
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 199x120, components 3\012- data
Hash
0214ae1a08054577121723cd62f7fe55
87333fbea11943fde61dfd19b1d751b11ac871ae
9d242691e3dedeb124f366db00d37ecd1cfeff9ec5264ca02aafc36526869663
GET /upload/usps.zo.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 13687
x-guploader-uploadid: ADPycdsWimYORv6cTRh9DZ9wYBt_5G_MJXHa2qucQostKLXaXMGI6XhwsbCiXWy-pB3HFYkIkjJ9wBgmvH3w2qot5VP3Eg
expires: Sat, 01 Oct 2022 22:02:27 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 14:55:45 GMT
etag: "0214ae1a08054577121723cd62f7fe55"
x-goog-generation: 1661439345346362
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13687
x-goog-hash: crc32c=2AyQ6Q==, md5=AhSuGggFRXcSFyPNYvf+VQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2439
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rQij9cDCm2TRT9tjhoYkjlcnvdNinwLv%2FynblMDCwZl33wMgdrqu3zitzgPbYexgP9Oqvb9pZYanMtIvye6hAVRNwwcV6PNJlXzXgabf0%2FIGV7t75z4DHhasVY2w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051c8ea7407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
142.250.74.161
200 OK
180954
URL
HTTP/2
1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
IP
142.250.74.161:0
Magic
PNG image data, 497 x 308, 8-bit/color RGBA, non-interlaced\012- data
Hash
fd835c1f326d3e7da0d9839550f66723
5004618bc15011d7d0f569f60f900d076b164b3d
b2286c3ed452ee4eeb15d2044a90cfc456d4789b2fdbe42bb9e023c9da18e4a8
GET /-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_outbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 180954
x-xss-protection: 0
date: Sat, 01 Oct 2022 20:32:59 GMT
expires: Wed, 17 Nov 2021 05:57:49 GMT
cache-control: public, max-age=86400, no-transform
age: 6218
etag: "v632"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
263cdn.com/upload/uspsm.box2.png
104.21.235.73
200 OK
7199
URL
HTTP/2
263cdn.com/upload/uspsm.box2.png
IP
104.21.235.73:0
Magic
PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash
cd6a41f9665594a48149a56b76e5a6ae
85ad07d91e04b3fcd2a435f99650614a8352930c
a4e8c4850780a57c521407be9df8797bbb66db4120e8b28859aebd8abd5cda7b
GET /upload/uspsm.box2.png HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/png
content-length: 7199
x-guploader-uploadid: ADPycdvZAV3yxiOCoQn4oAFK7MIiYWS7YsYSTM89AoA2ncRuwIwPeNTOVXjYhdMMXLb3fGE8Nw992sabtCozQ7rFrTxlJA
expires: Sat, 01 Oct 2022 21:01:45 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 15:04:36 GMT
etag: "cd6a41f9665594a48149a56b76e5a6ae"
x-goog-generation: 1661439876717427
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7199
x-goog-hash: crc32c=dyFNGg==, md5=zWpB+WZVlKSBSaVrduWmrg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2658
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6zMKXsLLujNwT%2Fogzwq3vIeJ9T3ZB29a%2B7ioamULFZxRiDmRcBceeI9Zr0dNRNVQFKwjCsX4Guk7mqfOG5ZBckCyA5N9pRKW%2FDbywG6szCBWSiQMDY0rPQYhFhbp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051b8cf7407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
v00jtf.cn/S1TaJk46/usps/?_t=1664662593310
104.21.84.78
200 OK
24063
URL
HTTP/2
v00jtf.cn/S1TaJk46/usps/?_t=1664662593310
IP
104.21.84.78:0
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash
2dfd6a472fe1990b7c04c29b5b107406
e95120ef034b41bdfd72a28cb303ff3e082c671a
28abdec1ffd7db7ed780aff1507b7397c47112dd0156b32dd47bbda2f65c9f38
Analyzer
Verdict
Alert
fortinet
Phishing
GET /S1TaJk46/usps/?_t=1664662593310 HTTP/1.1
Host: v00jtf.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://librarianafloat.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: pType=mo; expires=Sat, 01-Oct-2022 22:28:37 GMT; Max-Age=720; path=/; domain=v00jtf.cn
usps-tthh1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.v00jtf.cn
usps-tthh2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.v00jtf.cn
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E2LtoX7X%2FHH0QVoF26FasCkXkg89XDa7YOa0jeX03Pew0m7lY%2F5WbYK9WmmrRgLTfJO1d4Siq16xURMc2GM%2F4izbe%2ByMgRhvcR4s4uNQ1OzYAk0y0hWS%2FN4V2Ig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7538904f8d210b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3
200 OK
471
IP
142.250.74.3:0
Hash
a2d3925dad8ae1248c7b5d96220bd00a
8b6326da45860d5f480504e23864de0c28523b61
421d30a538dc347afc7fc8eee0fa6502aa65d789eb2353eb9c9f8bd0c5f3b3d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Oct 2022 22:16:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
263cdn.com/upload/L%C3%A9a%20Fenet.jpg
104.21.235.73
200 OK
38178
URL
HTTP/2
263cdn.com/upload/L%C3%A9a%20Fenet.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash
6a0ee2d82e9e2e4a63af4bd8ec9df5a5
414f34e24d67e585298128249813d2cb54e6ed5d
4da5f51a7c92309a3b29ebf422e5460dc307e5d75e2cf83b486d8703abb2b97a
GET /upload/L%C3%A9a%20Fenet.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 38178
x-guploader-uploadid: ADPycduerwHMccekTfMBKGtQy088ttjYaepL9f3JXEkzhNnaFKahsT8jBJFMj6HcZvU356DP0dsIODbeTCPzL-6tFg3lV4gszmbJ
expires: Sat, 01 Oct 2022 21:50:03 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:45 GMT
etag: "6a0ee2d82e9e2e4a63af4bd8ec9df5a5"
x-goog-generation: 1655329605318750
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 38178
x-goog-hash: crc32c=qUuqiw==, md5=ag7i2C6eLkpjr0vY7J31pQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 227
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sbB4rEywHszLoNaaCia1MbBMs1Wgjnq1rLQpeZHmypEDbYuTCX1IYkarTNyUWZN%2BJPpK620ImUjjZ6tA9ch0Dg%2BU6yqQuzHWkhRaJwUkn%2BEyK55YpTE9fU1MysMD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051c8f37407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/uspsm.box3.png
104.21.235.73
200 OK
32882
URL
HTTP/2
263cdn.com/upload/uspsm.box3.png
IP
104.21.235.73:0
Magic
PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash
3a89dd62775cdc10e9b1e5a2c4ba7b13
ae9a0572bb90467e967c4844a054df352d2bd043
f6b816e6556d9c5fd8de013bf03231102b5145ec406ed53e9e088c9a076d5f31
GET /upload/uspsm.box3.png HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/png
content-length: 32882
x-guploader-uploadid: ADPycdv0ti_q6Ei4drUeY1YS3fxJ8gLZu3bhwU1pz-mCYyKgnX6-g87vkd5oh1XKtl5aYRSAUiye_64RzXySFn12VPaJgg
expires: Sat, 01 Oct 2022 22:49:10 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 15:04:36 GMT
etag: "3a89dd62775cdc10e9b1e5a2c4ba7b13"
x-goog-generation: 1661439876673679
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 32882
x-goog-hash: crc32c=hhXzuA==, md5=OondYndc3BDpseWixLp7Ew==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1642
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UWg56OA%2FS%2Fg5DxgdQqFrExP%2FcGp84ro6p7b6lA41EdOKG0GGMildFaGVt7GS7Rwzw1OcJKOldwuSud8RRlAmArEzZHgcXJ8YyUWHPdZ9yOGmI1bHEdKNgozAcA%2BR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051c8f27407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/Ashley%20Benson.jpg
104.21.235.73
200 OK
31801
URL
HTTP/2
263cdn.com/upload/Ashley%20Benson.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash
9f1e9f0170ba7483cc7ce810bbe78e1f
1dc7ab4b8e5734180e22190f0cc6e7123586f244
da41a6d0acadbb94a5d939a2b245838d613ea21ce39bb1dd6b70595322f73043
GET /upload/Ashley%20Benson.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 31801
x-guploader-uploadid: ADPycdvoAbJS3wDomeFrxTg8GEYlDapHiD7MG_vVinCITVsbsZo4E0LtDINoiyHfJMBsddtNnxMy6NLjf_0t3PnTEX4uOxsM0G7c
expires: Sat, 01 Oct 2022 22:04:37 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:45:34 GMT
etag: "9f1e9f0170ba7483cc7ce810bbe78e1f"
x-goog-generation: 1655329533993202
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31801
x-goog-hash: crc32c=ikFAgQ==, md5=nx6fAXC6dIPMfOgQu+eOHw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1157
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ilvtRfudjd5IZyPX78F73Wx%2FwpiZqCn0c2tl9R8B0VWdVIDaC5%2BllCVk9zRefvbRhAiWhRCb82XSXos%2F04z6k54NrErXe92qEMc2xIBkKfcPs1zi1S5mpYrIG2X2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75389051c8ee7407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
263cdn.com/upload/Jubosh-Kolencik.jpg
104.21.235.73
200 OK
27878
URL
HTTP/2
263cdn.com/upload/Jubosh-Kolencik.jpg
IP
104.21.235.73:0
Magic
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash
f610dc6591af9b85d5fbfb1933ea833f
4b08fcc89454d352d422b9f375ccb44712b3e24a
55aaad0519b7bb45de57f1e1c9151a3ac381c3887f05f43d4ed3517e8bc8994e
GET /upload/Jubosh-Kolencik.jpg HTTP/1.1
Host: 263cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Oct 2022 22:16:37 GMT
content-type: image/jpeg
content-length: 27878
x-guploader-uploadid: ADPycdtl-Fok-o-o4v1H7O6HHWACTF1fIT843jPGCsC24JuUi8rVqhEcD5GCdVVbLbViTBeS_qlb8dX5avBMHBikAHVG4VPslRDl
expires: Sat, 01 Oct 2022 21:44:41 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:39 GMT
etag: "f610dc6591af9b85d5fbfb1933ea833f"
x-goog-generation: 1655329599305485
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 27878
x-goog-hash: crc32c=b9UNLg==, md5=9hDcZZGvm4XV+/sZM+qDPw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1279
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Li5XvliSxaITQZEIh12riBBHTZhGfHlX18GVllD%2BBtrhRqfm9seOx9FX1k8eX9JNC8lxjXZW2pRx%2FIvB9TMlLhVZQi8KP7NF2g2q8zogNJOhiXt1V1QkYpusYveh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7538905239557407-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2