w.g8boja.cyou/dia-aq22/tb.php?kd=za1675104144422
172.67.144.117200 OK 571 B URL HTTP/1.1 w.g8boja.cyou/dia-aq22/tb.php?kd=za1675104144422
IP 172.67.144.117:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (561), with CRLF line terminators
Hash 6224fe12710c8c947df8e64d304fb67e
b52a9123b5ea1457218b9079c407e5a055fb57b2
1763e3d54aa58f05688068f8fe8d62fe0d49e8b36fb626f3d3c0daae735bf508
GET /dia-aq22/tb.php?kd=za1675104144422 HTTP/1.1
Host: w.g8boja.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:56:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ry%2BgwszAE3SEr%2BTx3jIE%2FeH8VDgIuxTd8lDujNhQmCo9CROTCEF4bqbLgoW%2FjRQpqXmqrYgabnmUJDY5kywkmDdkqg7pvqikMd9XbReTLpxNXnZcvpJtT6bd0Mj0fy8g"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 791c6db229081bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17343
Expires: Mon, 30 Jan 2023 23:45:39 GMT
Date: Mon, 30 Jan 2023 18:56:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4895
Expires: Mon, 30 Jan 2023 20:18:11 GMT
Date: Mon, 30 Jan 2023 18:56:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 09ee4b0fe6cf4ca5ed31b24452338d00
7e62b6e20f0d4737f4a8d94f9818a0883027839e
56da08e18a408d7313de4e598984a251a0ecf85bbba98b421be9aebeb98835af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "56DA08E18A408D7313DE4E598984A251A0ECF85BBBA98B421BE9AEBEB98835AF"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2453
Expires: Mon, 30 Jan 2023 19:37:29 GMT
Date: Mon, 30 Jan 2023 18:56:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 18:35:46 GMT
content-type: application/json
age: 1250
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: em1hcM99gPsbm+VZN5cOOfYbRhRyxfSgT2474ekcsec3YPp7zQRokyhZhwiyc5ABPxYT9h3iAM0=
x-amz-request-id: JHTCH22Y6S8D2D83
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 18:21:54 GMT
age: 2082
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:56:36 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
w.g8boja.cyou/favicon.ico
172.67.144.117200 OK 455 B URL HTTP/1.1 w.g8boja.cyou/favicon.ico
IP 172.67.144.117:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c5d244b8b6b192c76a2c4331450c235
7e53f5ad871fcd67705eaf77f1ca9ff247143e1e
e0f26b6349453a86cd1f0f87cfd80559ef7edb6d88ff0af9ced7d7e413c548e3
GET /favicon.ico HTTP/1.1
Host: w.g8boja.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://w.g8boja.cyou/dia-aq22/tb.php?kd=za1675104144422
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:56:36 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2016 03:54:11 GMT
ETag: W/"5861e5e3-1b0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r%2F3F2eMxmuzhLUB7yoKiWx11Z0xdctaQV9OdJtM0ESy5ekxo0Z22tPBpdGp6NJcTdV1A2DfaRRCAzYCS8i3%2F9RhF1A47RsyaGoN9evFhcwtUQFe84W76IQHYfb4gtaPk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791c6db45b2d1bfe-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
w.g8boja.cyou/j/og2.js?_t=1675105009850
172.67.144.117200 OK 942 B URL HTTP/1.1 w.g8boja.cyou/j/og2.js?_t=1675105009850
IP 172.67.144.117:0
File type ASCII text, with CRLF line terminators
Hash bad1af26351d2e87c035596233940ab0
9ac0e34dcbfd29ca3070c506c200777a8016b161
bc734ed6fc97cbcbaa0ed5236ce8aa46754596a9a79eef96684242d231d0644e
Analyzer Verdict Alert fortinet Phishing
GET /j/og2.js?_t=1675105009850 HTTP/1.1
Host: w.g8boja.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://w.g8boja.cyou/dia-aq22/tb.php?kd=za1675104144422
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:56:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Oct 2022 16:09:56 GMT
Vary: Accept-Encoding
ETag: W/"635172d4-850"
Expires: Tue, 31 Jan 2023 06:56:36 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wtz9P1bjajnwFK%2BZKj3%2F1EdKG7jm5KDGd9yGjoQMO1Lyqm2RRUfQ%2BXr9d%2FqMdLjkhPf6TAbnxYNJXePteLozwDvCaeYfkNisinhjI4qwvAy1L1%2FZ856Z2Z11QVEfi2Jx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 791c6db4cac6b51d-OSL
alt-svc: h2=":443"; ma=60
w.g8boja.cyou/j/og2.php?_t=1675105009959
172.67.144.117200 OK 98 B URL HTTP/1.1 w.g8boja.cyou/j/og2.php?_t=1675105009959
IP 172.67.144.117:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1394c2a2f7dfaccc740806764849c4c1
971ce8e8b8de7e1293e1f0cf1f017b35ce26b585
8707017c7acf7cc2bcfe340e183f3824397c7d872b3cd040049661f1e7041ad1
POST /j/og2.php?_t=1675105009959 HTTP/1.1
Host: w.g8boja.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 48
Origin: http://w.g8boja.cyou
Connection: keep-alive
Referer: http://w.g8boja.cyou/dia-aq22/tb.php?kd=za1675104144422
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:56:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OGZgCUCIp3JGYZ9P6%2BA30epCNr8%2FRwAmQZCeunEFnGmEso89GV%2Bbgrf5x8DXIKRS5LiQ%2Fm1pdptNeDFnKyN0yn77scopMCbyEghVBbZicj%2BcWdep%2Fa%2BDBcF8a6GOIszv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 791c6db56bbeb51d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c1cd094d3473f9f857cac9b92c6ba289
3344f1ad7db9e211ca3947249215a131eafe8d75
062aea35e3de4c5f4d5e2bad65aaac96ca1e7838e81e5dbad82b12c02a9be958
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "062AEA35E3DE4C5F4D5E2BAD65AAAC96CA1E7838E81E5DBAD82B12C02A9BE958"
Last-Modified: Sat, 28 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9278
Expires: Mon, 30 Jan 2023 21:31:14 GMT
Date: Mon, 30 Jan 2023 18:56:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 18:49:04 GMT
age: 452
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash c1cd094d3473f9f857cac9b92c6ba289
3344f1ad7db9e211ca3947249215a131eafe8d75
062aea35e3de4c5f4d5e2bad65aaac96ca1e7838e81e5dbad82b12c02a9be958
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "062AEA35E3DE4C5F4D5E2BAD65AAAC96CA1E7838E81E5DBAD82B12C02A9BE958"
Last-Modified: Sat, 28 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9277
Expires: Mon, 30 Jan 2023 21:31:14 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15098
Expires: Mon, 30 Jan 2023 23:08:15 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash dc17f23e7d082d02310beae779cd457d
8c9887a3e0b380deb023e723a4c8503cb14a7412
489cff3a42703470e159689da28cc132f8b39c288554a7a3be36161fb5e2f3c8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1015
Cache-Control: max-age=168659
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Etag: "63d7fec1-116"
Expires: Wed, 01 Feb 2023 17:47:36 GMT
Last-Modified: Mon, 30 Jan 2023 17:30:41 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash dc17f23e7d082d02310beae779cd457d
8c9887a3e0b380deb023e723a4c8503cb14a7412
489cff3a42703470e159689da28cc132f8b39c288554a7a3be36161fb5e2f3c8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1015
Cache-Control: max-age=168659
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Etag: "63d7fec1-116"
Expires: Wed, 01 Feb 2023 17:47:36 GMT
Last-Modified: Mon, 30 Jan 2023 17:30:41 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash d81f874741beb45c89de8bb5c6de438e
a251ab903e654953631d84721479bbae55aa5cdf
ec28dafa2a54818028d4dfe99218d9e4b507f3bd7efaabfba630d85f24d4d75d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
142.250.74.168200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-0C230YDF7G
IP 142.250.74.168:0
File type ASCII text, with very long lines (19467)
Hash 50731f599d8dbdb2ac4965920aed1986
35f9c1aa7a195ec7757bd8c7430e589665f788e4
cd0f2369ec3776bd80dfd865d4423253d1da50f5b47805ffaf71c56ec0a6d654
GET /gtag/js?id=G-0C230YDF7G HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 18:56:37 GMT
expires: Mon, 30 Jan 2023 18:56:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77228
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
142.250.74.168200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-LW7434MYMN
IP 142.250.74.168:0
File type ASCII text, with very long lines (19467)
Hash 302fcdf621ca8deacf81b588a1c3c3b0
ce83b45662a5c9b56dace95bbbb89450d9d9417a
fc94ed8fae3435b1f28e9a2f37f5b6aadb3153207561c72f8ecd2d2e24c297d9
GET /gtag/js?id=G-LW7434MYMN HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 18:56:37 GMT
expires: Mon, 30 Jan 2023 18:56:37 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77230
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.160.32.147101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.160.32.147:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Yr5vjS7qqc5kPP1XAmRH7w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: eEh5VQMaLf1k3dnV4GG0ptcvPvc=
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 1c4a4bd19dc4151309a9231b14009f52
8b6a996323901484805618d0abebd28b5c07f24f
4d9c32e31016c61e9cad45fe516b4a14bde3d6576573bfb125e249efc7262e9b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D9C32E31016C61E9CAD45FE516B4A14BDE3D6576573BFB125E249EFC7262E9B"
Last-Modified: Sat, 28 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2538
Expires: Mon, 30 Jan 2023 19:38:55 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash dc17f23e7d082d02310beae779cd457d
8c9887a3e0b380deb023e723a4c8503cb14a7412
489cff3a42703470e159689da28cc132f8b39c288554a7a3be36161fb5e2f3c8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1015
Cache-Control: max-age=168659
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Etag: "63d7fec1-116"
Expires: Wed, 01 Feb 2023 17:47:36 GMT
Last-Modified: Mon, 30 Jan 2023 17:30:41 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
104.16.89.20200 OK 21 kB URL HTTP/2 cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css
IP 104.16.89.20:0
File type ASCII text, with very long lines (65317)
Hash fceb9e2b7fdc4d73a1524c359a1bd228
ef7e13206f1b5ff93484ee785d7bcf1e8e5a38f6
ab39c04f0652b160b513e90733094fedeaa126fcc3368012eabf510837a94da2
GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/css; charset=utf-8
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
x-served-by: cache-fra19151-FRA, cache-iad-kiad7000044-IAD
x-cache: HIT, MISS
vary: Accept-Encoding
cf-cache-status: HIT
age: 17061059
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dBzRHjY6rw54lGawu%2FxU8IHRIGLqsgzuVBmEEVugThSn7hqai975eHX4F0dWGTTPJ9K%2BhFbgAmSB4gDWSpXVfyYLKdM2iLIpd1kHdk%2Bg%2F%2F9Ukjupw3APcwF249mR1hfV1TA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c6db8ca9ab4e8-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
172.64.165.21200 OK 25 kB URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP 172.64.165.21:0
File type ASCII text, with very long lines (65321), with CRLF line terminators
Hash d9e661ff602659c7414191f7f1e723de
d73e57421e6d6a7e34eadef58dce882f16b2c57f
316eff14e832825ad02e77b752b4427c8ce2af65dc553cc47923713778daec27
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/css
x-guploader-uploadid: ADPycdu5uAaRno4bHNFLFgygxni3jHAOMBdIMq69dQqYugLweM0yAoXPFzYzE9PblykdtUtsSDtg_NQM52w3GQIMgh0-cxhtrVO3
expires: Mon, 30 Jan 2023 18:54:49 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2564
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kDEynUHMySwxTsXHMnzMmYtV%2BKX%2BBMaR8Qt2VzBC2aQTOuu%2BydIziKZMmq3oFL1yhJcg9b6Wo9gp%2BqLAgDIvxqPrLjmU5b7OHy0W7NNYAOEbHOtz4qh6LiyixxpfSaIgEC4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db8afba8885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0bd549cb1a96522b079dad4e400f62a6
82e532a9d6fce2545f55e37ddb7b2d4d4eaafbce
bb30b0c9f02724101802aaa60601733b517241926ad6ab524e7d63911e83010f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BB30B0C9F02724101802AAA60601733B517241926AD6AB524E7D63911E83010F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14084
Expires: Mon, 30 Jan 2023 22:51:21 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 00f4a0e788bd484c84f6fc7407e06ad3
840418f49c444dc62e370825451b945ff89e99bf
69b2086f39e1f30b567049191696db642db8babe79a0c6ce084b06cdbc962b6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnbun.com/upload/dia-aq-box2.png
172.64.164.25200 OK 3.5 kB URL HTTP/2 cdnbun.com/upload/dia-aq-box2.png
IP 172.64.164.25:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash f64d3d38ba71d8b510a7c0901b5ec67d
252b6ee1280907ce8e15c72a78288f333e6453cd
d95cb5b42d435543bf930101ee9c5ea08ca13c8418367ae5ed8415b23ecbb420
GET /upload/dia-aq-box2.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/png
content-length: 3503
x-guploader-uploadid: ADPycduyMr6uyxd-I7RnGdQk1dPWjd0rBIz7kZJ0UW2x61bCWezOQhX5Pe7UW7AE5TDqfhl8-AhSG9oMg4STa5z-5M-EXt1DC_1P
expires: Mon, 30 Jan 2023 19:45:05 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:47 GMT
etag: "f64d3d38ba71d8b510a7c0901b5ec67d"
x-goog-generation: 1667273927324437
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3503
x-goog-hash: crc32c=LdzWqQ==, md5=9k09OLpx2LUQp8CQG17GfQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xC6qldjWQIUXScRaQhe5%2Fu1jJL8egwUH9b9zw3%2Bte4MfX4PoZLLChe%2B50wrK06KjOuyicw1FQZXYisOZ2R3uKN8y5q2mxtOC4ZcpIUEp%2FyoRjt06%2FDrvUyRNJVWh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbaaf5b8861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/Pierre%20Renaudin.jpg
188.114.96.1200 OK 22 kB URL HTTP/2 cdnkey.net/upload/Pierre%20Renaudin.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 8f63e05228dc94b4f5091a84c9b4168d
4b2d1fe92d6461bb7e39415cf3c8af4fa104791e
9fbff31d3ad789f22276cc030afe35e67e10928db0ff2f384fcedc30ab48ae21
GET /upload/Pierre%20Renaudin.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 21791
x-guploader-uploadid: ADPycdvZbYAyaU0QP3B5ibQ1V19jY_fkV01JrZ14oPNuH-yz31ztvnGyQKBf5n1D1QS7CZ_q88TWH5lwuvdCgfqrDcmmbTsv5bml
expires: Mon, 30 Jan 2023 19:32:39 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:39 GMT
etag: "8f63e05228dc94b4f5091a84c9b4168d"
x-goog-generation: 1662378639925450
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21791
x-goog-hash: crc32c=bXAAZg==, md5=j2PgUijclLT1CRqEybQWjQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zgv7UatyFOpt9gbNjxvsta7oi%2FOZmjbJkWUHklWFBG2cixTL%2Ban8I2vO0xubXt2tlRvx3lutSpXWK3A0cZgQ3U6SlER5r0c4lOPdmaghRfS9HbAj8jyfWk%2BlQULh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbad967b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
142.250.74.161200 OK 14 kB URL HTTP/2 1.bp.blogspot.com/-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png
IP 142.250.74.161:0
File type PNG image data, 350 x 251, 8-bit colormap, non-interlaced\012- data
Hash ff055162c5d233506eece3fb69a47e74
49812e303ae6674819b6a7a6e0721d555ef64df4
7e46c8bcf219a0d6f0f3d5c5b027ed613678a0c54d637172d6495f428ff80150
GET /-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_inbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13695
x-xss-protection: 0
date: Mon, 30 Jan 2023 15:04:34 GMT
expires: Mon, 23 Jan 2023 07:16:14 GMT
cache-control: public, max-age=86400, no-transform
age: 13923
etag: "v630"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnkey.net/upload/Jennifer%20Fourcaulx.jpg
188.114.96.1200 OK 32 kB URL HTTP/2 cdnkey.net/upload/Jennifer%20Fourcaulx.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash a4327c59929252ace5b9aed35efa33fb
e8c3841813de3fe99085da0d02b12f9c781b6107
9142a09b09418c8705cbef9ba7d9920ee1d31f7ec681df8b0faaf39a896efea6
GET /upload/Jennifer%20Fourcaulx.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 31965
x-guploader-uploadid: ADPycdv9EzDG8EFdQSdGOlnnUE_LN5Kul3pSFUvIxWcAqZIrSICML5kJHQNYG1UxJOCXuyPS3b6VQMnDPsRp9R1gRV9gcfXzGLgi
expires: Mon, 30 Jan 2023 18:12:33 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:38 GMT
etag: "a4327c59929252ace5b9aed35efa33fb"
x-goog-generation: 1662378638883882
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31965
x-goog-hash: crc32c=CEl9ew==, md5=pDJ8WZKSUqzlua7TXvoz+w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8H0GmX6%2FxmcDJNu9VdTlcSMByg6Jy84xmXWHInquvEF7FybzgHR9zRpdtSoUuGYZ7TwN48%2BxtFY05pEk9%2FnmVclGqvKCS485c%2B2oyKcyDlWh08wINJfYMFKRb2P9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbad96cb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/dia-aq-show2.jpg
172.64.164.25200 OK 57 kB URL HTTP/2 cdnbun.com/upload/dia-aq-show2.jpg
IP 172.64.164.25:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x281, components 3\012- data
Hash 75e23e305da54df96ffe81efc6d0d1cd
2efd5be92b2d82d5442f7db8c3986ce43c5c8d1a
62d187c80ed7c0f0240937691fcc4cae46d1ec678f19f617e36110ceaa4b5a65
GET /upload/dia-aq-show2.jpg HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 57122
x-guploader-uploadid: ADPycdt7ud41BxtR9PEtvi-e0FxW3ueaJ9iN-k-g_hQ97oHDs4rkfvLp1ZiClgSzELB4pH3i8ZYJqU-3aJVneZ6ya-8NJ1V_r-jx
expires: Mon, 30 Jan 2023 19:20:07 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:50 GMT
etag: "75e23e305da54df96ffe81efc6d0d1cd"
x-goog-generation: 1667273930438215
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 57122
x-goog-hash: crc32c=2G7Zgw==, md5=deI+MF2lTflv/oHvxtDRzQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QvDcTwgrH1%2B1XWTz3nkPOqwcEyTO%2FpBvHMt1blzTh5wZQ2k9X%2BmYH7U6j6FAS%2BeIgLf5la6H2Iy7KZaChASqr3ANoDA%2BKTgMpu%2BG0gTp1mKZrGptJsUVkSOGxAv%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbaaf658861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/dia-aq-left.png
172.64.164.25200 OK 990 B URL HTTP/2 cdnbun.com/upload/dia-aq-left.png
IP 172.64.164.25:0
File type PNG image data, 20 x 178, 8-bit/color RGBA, non-interlaced\012- data
Hash c36b84c95f5255da6f529750b4812ca0
dc4426980da9e00d4a69c53c0ca86ca680133c42
3edcc2ad3af5343838a83326eec192d097088dea4760ab9d4de6d51557ae1f1a
GET /upload/dia-aq-left.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/png
content-length: 990
x-guploader-uploadid: ADPycduKU6AFOZhEJvHh29kWNlaL84Zlp-6JZco1XZS4YWmBKZQR3SXHBiHEdAtwBfadihXuug5hC40K0jvvqgnjlqMgCw
expires: Mon, 30 Jan 2023 19:13:26 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:48 GMT
etag: "c36b84c95f5255da6f529750b4812ca0"
x-goog-generation: 1667273928349182
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 990
x-goog-hash: crc32c=NU+g7g==, md5=w2uEyV9SVdpvUpdQtIEsoA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YN%2FYET2G7CugGWDn9%2FFJEqVHgU2CHG9kMylRjNY7onPpQSTgcHUb%2FEV%2FYY0I%2F8wJjilJoQAO48HvCvbFsaiWuQ9DkfV0ruSJ4b%2FhC0PX9myFT1m7hc3bsm07%2B1nz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbabf738861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/Sharon%20Kalifa.jpg
188.114.96.1200 OK 26 kB URL HTTP/2 cdnkey.net/upload/Sharon%20Kalifa.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 23c9827b9aebc5b81df47764d1e0d911
5930d34351242bec181f07f2f3a8f00b80a39dd2
dd02eeb72de57c36cf71017c3f79ae3b4dac32d3752a5ebf8d453a8697840235
GET /upload/Sharon%20Kalifa.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 25800
x-guploader-uploadid: ADPycdvW-ONJ1uuOlw0GTplnKi2PzPHZYYuxvzwyWv9kUzuvTr8NZGuuMm49ZKKbsu-miKMwk9pRbsPcon6tPOICe3isKw
expires: Mon, 30 Jan 2023 19:45:58 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:41 GMT
etag: "23c9827b9aebc5b81df47764d1e0d911"
x-goog-generation: 1662378641087615
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 25800
x-goog-hash: crc32c=pVNA5w==, md5=I8mCe5rrxbgd9Hdk0eDZEQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JaErw6H6ukp8XUJBTckIpIL2PH2MODEaVcUok99NCl8NDN1EzLaW6xbIITg02hpk049quZzNi0OK2NG6tY%2BKMWOn%2FdvZbPHT0tvtESdXstJDZ%2FuftEAZ9gcI1vV8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbac966b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/hu.jpg
188.114.96.1200 OK 27 kB IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 9127e0230475268801040ce72ba6245c
c42bfd66c701225ba788bf96ab72822e381c9c89
d5b1138f638a041d31e26a44dfc74134f1a466fd5252c328ba504e52f54e6f2e
GET /upload/hu.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 27112
x-guploader-uploadid: ADPycdt8MFY-zDlqCWGjBedPfdEmYFBsk-GLJlEMAB3M2sNi4w1j9uio10GhpCg5cS0g8aTqQgRPmz90j1xESrvliTN6_Yf3mMva
expires: Mon, 30 Jan 2023 18:56:16 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:38 GMT
etag: "9127e0230475268801040ce72ba6245c"
x-goog-generation: 1662378638813534
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 27112
x-goog-hash: crc32c=i4EeUQ==, md5=kSfgIwR1JogBBAznK6YkXA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lau1b5j7NQ0g4XXRwIQC6AFh9lbEcdi3ayAxGqa8FjwG1rLVNEXevY%2FW%2B8WIs7nYlBFbpyL6I7HNeT4bLke1Z39ln1jD9qIfQId2NS3mDonO4Opv0dFjz3ifclHq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbad96bb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/Sarah%20Belli.jpg
188.114.96.1200 OK 16 kB URL HTTP/2 cdnkey.net/upload/Sarah%20Belli.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash a0a0a8e5df2a3013b2a9c46045f4d1e5
5de61b171986a6739fc18ff2dbc159ef14b716ed
4f5fdc4238663f38e62a441654ba94baeb21a0f5145a2dadb4d89c80afe12732
GET /upload/Sarah%20Belli.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 16424
x-guploader-uploadid: ADPycduPz-YAsOFiWEGKrYe6Wjz0crei4cAesqLCjMpwYMwgG9XW0pWGAp17VVlVZWy-W31em3tC1dkOrYpL_6KNwPNp3Zh2b7bT
expires: Mon, 30 Jan 2023 18:28:39 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:40 GMT
etag: "a0a0a8e5df2a3013b2a9c46045f4d1e5"
x-goog-generation: 1662378640959698
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 16424
x-goog-hash: crc32c=g7EkQA==, md5=oKCo5d8qMBOyqcRgRfTR5Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3361
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tsnqtkRXP%2FDflhdaQNGMnAo4NC%2BBC7gZqUD7uqjLPf%2B%2F%2Bi37WDk82h5KVT%2BMDg7b8Vl%2Fx%2F7LdrE%2BOdAOMHOWoFQWuzt%2Fsx6l1KHwSYkxCENdIBdTMIlSScx84as%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbad96ab4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/dia-aq-box3.png
172.64.164.25200 OK 28 kB URL HTTP/2 cdnbun.com/upload/dia-aq-box3.png
IP 172.64.164.25:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash 488593a16b93e295cbf1b620494bdfb7
62958a134099b90a589029718d14424cc66d3bf8
7e244493059a0294b42f93b3fb6cb3912ecc6640490018d1b4a8c9e4aee90758
GET /upload/dia-aq-box3.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/png
content-length: 28423
x-guploader-uploadid: ADPycdsgEguOHK-18lLpckh8KuG-J7NceATn8IMynKcNbdSkJdOZT-woWj1e0IBwoZ_dhFERkiMYrArRgSvburkP-JAwrY45xyRW
expires: Mon, 30 Jan 2023 19:21:09 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:47 GMT
etag: "488593a16b93e295cbf1b620494bdfb7"
x-goog-generation: 1667273927450941
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 28423
x-goog-hash: crc32c=JPTXAw==, md5=SIWToWuT4pXL8bYgSUvftw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLhn7A3H8youLTm7eX62dXIclqt%2FIrT5Tt1a2W9OxaKMh%2BxxCq1nVrF9DLcA5TKFEQu1GJjUfxKS%2BfImLhApz%2FXgVWPedS5ymyQySt%2Fg9Yn%2FAswCfrZIGELBcIXJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbabf6e8861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash c804ea79d8bfab409c9a56d2a09483d4
7c406bf9645e1c505f2534a447b86611757d3c8f
b99ac0abd9effa874cf5af4a0ba9a54e540bced7af79d1bb8326b9caafbf66fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B99AC0ABD9EFFA874CF5AF4A0BA9A54E540BCED7AF79D1BB8326B9CAAFBF66FD"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9859
Expires: Mon, 30 Jan 2023 21:40:56 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9a07e841896595cd26ebb34a82a55afd
c6e48c6805a2ac1c8e6f1c38072d7cacbb659136
54bd57b285e583ce2d4c306bc80252cf46d7e5c88422f1fcd56b12ac2ad21229
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "54BD57B285E583CE2D4C306BC80252CF46D7E5C88422F1FCD56B12AC2AD21229"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6330
Expires: Mon, 30 Jan 2023 20:42:07 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 07dcea82ca0677d77347c58bcd943425
b0882a71b171ddf5c333f71151db2dd4a80e4c39
b6005a8ac35ada7bfc816a964f9af962c0835b041e63466b0a18a42696786b57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdnbun.com/upload/dia-aq-box1.png
172.64.164.25200 OK 30 kB URL HTTP/2 cdnbun.com/upload/dia-aq-box1.png
IP 172.64.164.25:0
File type PNG image data, 280 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash 8fa3098b9b9a4b956898a03f566c6b84
fe557ce64af0b97f2dcfa00e43968ee871ce78e5
6d2dadfa6ded951ac3b94b6575dacf8ca4df9b40eec8946cfc02ab7320e8f086
GET /upload/dia-aq-box1.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/png
content-length: 29910
x-guploader-uploadid: ADPycduCf-qrCGMBF4nbxxWhOmWjGbpzPYxNsR0tgnoiZvjUcnsHI2c4_7y-8UzMfvItoUbqj0HMmeBXbZBQRhUG__-47w
x-goog-generation: 1667273927395699
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29910
x-goog-hash: crc32c=9bpMUQ==, md5=j6MJi5uaS5VomKA/VmxrhA==
x-goog-storage-class: STANDARD
expires: Mon, 30 Jan 2023 19:20:07 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:47 GMT
etag: "8fa3098b9b9a4b956898a03f566c6b84"
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rX7FmfGHyF6WyEF%2B1Q61rg7m0eutyGyux4pz7fdn%2FZ6KXXMzMEH8mLZRvw1WPw4%2FNLJAqQ%2FyhHR6lixKzxi7WAwnLbgjNc3UoNbby9GDTllJkdQl%2FVVMjL0yG5rH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbacfb88861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnbun.com/upload/dia-aq-m.png
172.64.164.25200 OK 3.8 kB URL HTTP/2 cdnbun.com/upload/dia-aq-m.png
IP 172.64.164.25:0
File type PNG image data, 233 x 157, 8-bit/color RGBA, non-interlaced\012- data
Hash 4113118e9eefaf895a3ff68006d2e968
346f8b4510b919a59a70b6731e7791539b90a02a
d2512db1d8366b21d3b3643877c52d6924f3326a8d2f081b4dd59ab5d7f29155
GET /upload/dia-aq-m.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/png
content-length: 3831
x-guploader-uploadid: ADPycdu4_89t5TMFHnDpxCNHQr9EWBiU6SO4QvmME6RoO3u0_lg9Ca66aavm3JR2NORykHtLe29Pikb2wSrSG4IFT_aySg
expires: Mon, 30 Jan 2023 19:20:07 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:48 GMT
etag: "4113118e9eefaf895a3ff68006d2e968"
x-goog-generation: 1667273928474025
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3831
x-goog-hash: crc32c=vz/LXw==, md5=QRMRjp7vr4laP/aABtLpaA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iJk0ZPLuHhfe%2FBKWvNdvkMxM8SjnbNiJwDWcWRwF4S0EM0H91w47tJ82Tb4kS0IYy6GF2odEJaTCrhD0%2BhBtx1IR3%2BBMoxAIuZzE%2BN2X44JRPU6tvh48G9XbfC6F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbaf8088861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/Sasha%20Pieterse.jpg
188.114.96.1200 OK 32 kB URL HTTP/2 cdnkey.net/upload/Sasha%20Pieterse.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash d9cc3b86152bb84447f2c4f3ead72edd
2f8259daa028a7ac3fa7bba75cb318661c206249
8f63316250888fe7082064217ce59dfd7bd1afa8db430cf9c52ed698fe9c4d00
GET /upload/Sasha%20Pieterse.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 31593
x-guploader-uploadid: ADPycdusxMQdQP6sypnu8UWGQJbQUzYerIT56STiOJFoCOqwtEo7fTxe6OXZBd_BjBFDK5_Gq2YcYzQxLDf4XMkSh3n5BelC7jjo
expires: Mon, 30 Jan 2023 18:39:57 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:41 GMT
etag: "d9cc3b86152bb84447f2c4f3ead72edd"
x-goog-generation: 1662378641062323
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31593
x-goog-hash: crc32c=2IdMGw==, md5=2cw7hhUruERH8sTz6tcu3Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OOoIpjKAL7Q3Ot27AxOARxCex6pkSpkH%2FIvzgQVWNHHFmOesAnfoOD6gRixmrQUInFcNge5abb%2BmYifafX1ekmzhkYFs%2BG4Oy9gLdB3q0QUqIMV9kBzHajtz1SYi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbb29efb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.36.77.32200 OK 346 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9a07e841896595cd26ebb34a82a55afd
c6e48c6805a2ac1c8e6f1c38072d7cacbb659136
54bd57b285e583ce2d4c306bc80252cf46d7e5c88422f1fcd56b12ac2ad21229
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "54BD57B285E583CE2D4C306BC80252CF46D7E5C88422F1FCD56B12AC2AD21229"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6330
Expires: Mon, 30 Jan 2023 20:42:07 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
cdnkey.net/upload/R%C3%A9gis%20Laurencin.jpg
188.114.96.1200 OK 37 kB URL HTTP/2 cdnkey.net/upload/R%C3%A9gis%20Laurencin.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 297x300, components 3\012- data
Hash bdb898e634c09b5780ce35699139cbf4
fde6d594d1ea63e51a323b2e24e4a568220308dd
509599676e6812591ba1dfa66039d44520db43f495404415819947d40b5b7081
GET /upload/R%C3%A9gis%20Laurencin.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 37056
x-guploader-uploadid: ADPycdtazXbdmzd-cjDbwmXrv67Y7EXxKXZOI2DnNJ4G32BasShfKFB8J8fM3RiF0SaVOGedGvPbK0TwJrLnuCchW5Mo7klT0eJh
expires: Mon, 30 Jan 2023 19:07:46 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:40 GMT
etag: "bdb898e634c09b5780ce35699139cbf4"
x-goog-generation: 1662378639971154
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 37056
x-goog-hash: crc32c=GQMV+g==, md5=vbiY5jTAm1eAzjVpkTnL9A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dhp78GQeTAAMEDbUS5Crtxzv43nrY1sz%2FEwN%2FrChYZe98JUuZw2iz93u%2BvoJFtYPcgwG0vPfU%2FeAybGWhnBVRA929Z2ZyOvr%2BgpvneeiYEGk6IwQqfiv0ZeCsvjO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbb8a90b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/Lisa%20Medina.jpg
188.114.96.1200 OK 36 kB URL HTTP/2 cdnkey.net/upload/Lisa%20Medina.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 4bd77e3ff3ee8b51b5629f1e8c1ff918
39f72588e628585e791661fa931d8b189af3cbf1
6d208d57ec5b3d4262efceeaf20f828d825d62b2a1fd10b8ab2302887432062d
GET /upload/Lisa%20Medina.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 35911
x-guploader-uploadid: ADPycdvl2KECsVdwiMoD0AtIE3Om0QZSxAlN_UpI-h7oXC7Y0yrgSd5sUrdllFGlFxABZDZOg-AlvhU-L24tEm7oozkqDIU8LTvu
expires: Mon, 30 Jan 2023 18:42:32 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:39 GMT
etag: "4bd77e3ff3ee8b51b5629f1e8c1ff918"
x-goog-generation: 1662378639908000
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 35911
x-goog-hash: crc32c=f5osLQ==, md5=S9d+P/Pui1G1Yp8ejB/5GA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3361
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P10LZDAG16oO6sjQ%2FxAKIXXASsT228XcofW%2BzQYLWcWL0n7wBqLmm7mhvxrPop6YcYf%2BJJufIBvHuXk%2FDbaCTssUUenAWOdbY8LdqfmZ5pkkr5Y4i7WSyjvhpfP4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbb8aa2b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnkey.net/upload/Ashley%20Benson.jpg
188.114.96.1200 OK 32 kB URL HTTP/2 cdnkey.net/upload/Ashley%20Benson.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 9f1e9f0170ba7483cc7ce810bbe78e1f
1dc7ab4b8e5734180e22190f0cc6e7123586f244
da41a6d0acadbb94a5d939a2b245838d613ea21ce39bb1dd6b70595322f73043
GET /upload/Ashley%20Benson.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 31801
x-guploader-uploadid: ADPycdt3xWVtXEnUBEvomrS6dNBmEkLWHGVGK9vjM_eFvQlJqPI-MgdSY4M-0bEMqETLphPlLWTB571tE3_TTl-UuoxnnYEviRLP
expires: Mon, 30 Jan 2023 19:32:39 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:42 GMT
etag: "9f1e9f0170ba7483cc7ce810bbe78e1f"
x-goog-generation: 1662378642090884
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31801
x-goog-hash: crc32c=ikFAgQ==, md5=nx6fAXC6dIPMfOgQu+eOHw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 64
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=csZW1U4KTna5awQytEFHdaa7V8kGiNXIYPAcT9djfI4xQVsk6qINmTuGja2rmt0HKmn9V3Fe%2BbVL3P3Q%2FzmQs0ktYcZIJ3m1OAu4WACHknaJhCwpNqUR5EMvr4R%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbb8aa1b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 07dcea82ca0677d77347c58bcd943425
b0882a71b171ddf5c333f71151db2dd4a80e4c39
b6005a8ac35ada7bfc816a964f9af962c0835b041e63466b0a18a42696786b57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 18:56:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
142.250.74.161200 OK 181 kB URL HTTP/2 1.bp.blogspot.com/-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png
IP 142.250.74.161:0
File type PNG image data, 497 x 308, 8-bit/color RGBA, non-interlaced\012- data
Size 181 kB (180954 bytes)
Hash fd835c1f326d3e7da0d9839550f66723
5004618bc15011d7d0f569f60f900d076b164b3d
b2286c3ed452ee4eeb15d2044a90cfc456d4789b2fdbe42bb9e023c9da18e4a8
GET /-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_outbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 180954
x-xss-protection: 0
date: Mon, 30 Jan 2023 15:04:34 GMT
expires: Fri, 27 Jan 2023 22:59:37 GMT
cache-control: public, max-age=86400, no-transform
age: 13923
etag: "v632"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdnbun.com/upload/dia-aq-right.png
172.64.164.25200 OK 990 B URL HTTP/2 cdnbun.com/upload/dia-aq-right.png
IP 172.64.164.25:0
File type PNG image data, 20 x 178, 8-bit/color RGBA, non-interlaced\012- data
Hash eabc9801ccccf215e9e0d1ba72b2975f
52c6f59e3f338775a30b34a05677e9df2049415d
dff145e35904ee1637e798bd530eeae042abac1b8e7a085afef5fe83d2f9a52f
GET /upload/dia-aq-right.png HTTP/1.1
Host: cdnbun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/png
content-length: 990
x-guploader-uploadid: ADPycduc0TbzPUIl5VzRJYsgBFCwRgZaDYb13qqLN1Mi9_NKkW6bldYFqnGgSXNBCre3Gm6mYvxg5uQ7kRZ3brKxd7MwsQ
expires: Mon, 30 Jan 2023 19:20:07 GMT
cache-control: public, max-age=14400
last-modified: Tue, 01 Nov 2022 03:38:49 GMT
etag: "eabc9801ccccf215e9e0d1ba72b2975f"
x-goog-generation: 1667273929306194
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 990
x-goog-hash: crc32c=QBJp8Q==, md5=6ryYAczM8hXp4NG6crKXXw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 382
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9pMUDUJfaoja%2BabAqhxEVQEsh0c8wq%2BWX7pkXLbGQRppJb32uPHjj9nR2bngfpzeslceIN1DAk5G9wm7hk4YsCufFOFwNhQGkzObDzbnyDCTLcQGo6XGD3fI4u4a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbbb98d8861-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0bd549cb1a96522b079dad4e400f62a6
82e532a9d6fce2545f55e37ddb7b2d4d4eaafbce
bb30b0c9f02724101802aaa60601733b517241926ad6ab524e7d63911e83010f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BB30B0C9F02724101802AAA60601733B517241926AD6AB524E7D63911E83010F"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14084
Expires: Mon, 30 Jan 2023 22:51:21 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
cdnkey.net/upload/L%C3%A9a%20Fenet.jpg
188.114.96.1200 OK 38 kB URL HTTP/2 cdnkey.net/upload/L%C3%A9a%20Fenet.jpg
IP 188.114.96.1:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Hash 6a0ee2d82e9e2e4a63af4bd8ec9df5a5
414f34e24d67e585298128249813d2cb54e6ed5d
4da5f51a7c92309a3b29ebf422e5460dc307e5d75e2cf83b486d8703abb2b97a
GET /upload/L%C3%A9a%20Fenet.jpg HTTP/1.1
Host: cdnkey.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: image/jpeg
content-length: 38178
x-guploader-uploadid: ADPycdu-TOMquUxM8Xr9a6kM_Nw2xW2v0ZMtU7g-Tl529PFV226_2d9meqEpuiWT2f46uCx21u_QzOeHu0LZGVlx8AEJvmBovCck
expires: Mon, 30 Jan 2023 18:21:24 GMT
cache-control: public, max-age=14400
last-modified: Mon, 05 Sep 2022 11:50:38 GMT
etag: "6a0ee2d82e9e2e4a63af4bd8ec9df5a5"
x-goog-generation: 1662378638779924
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 38178
x-goog-hash: crc32c=qUuqiw==, md5=ag7i2C6eLkpjr0vY7J31pQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3361
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nG8RUnEyTv5Vl5BGE09lV2B5srxjqifwsgiAZNS3CGJe0RY6CZEg6O%2BI1MqvuGXqg%2Bc9yltsIMsDU%2BKogmh46NyJ7T%2FavwJ%2F324irfDplc2jUM4204wnvgECT3Vf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6dbbcaedb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-LW7434MYMN>m=2oe1p0&_p=88543425&cid=1601777404.1675105011&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675105011&sct=1&seg=0&dl=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015&dr=http%3A%2F%2Fw.g8boja.cyou%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
216.239.32.36204 No Content 437 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-LW7434MYMN>m=2oe1p0&_p=88543425&cid=1601777404.1675105011&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675105011&sct=1&seg=0&dl=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015&dr=http%3A%2F%2Fw.g8boja.cyou%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP 216.239.32.36:0
Hash ccf6c537e0d5bbd86ab6f8bea85dd080
20d44a5e75552d5bcb0659b2f8c3a38f956f2109
7e154a6ae001ab94bb00aec5b004ebdb9431b6d29b0b2be253c16702589a4dde
POST /g/collect?v=2&tid=G-LW7434MYMN>m=2oe1p0&_p=88543425&cid=1601777404.1675105011&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675105011&sct=1&seg=0&dl=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015&dr=http%3A%2F%2Fw.g8boja.cyou%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jzupsq.cyou
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://jzupsq.cyou
date: Mon, 30 Jan 2023 18:56:38 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
172.64.165.21200 OK 16 kB URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
IP 172.64.165.21:0
File type ASCII text, with very long lines (63188), with CRLF line terminators
Hash 26f241a08544822c7d9b92e932f405b9
5e8e79d51c5f7255766417e5a5c5029b5de409bb
18e8a29aa76eaa44ce163948647ca07f104aac86018ee2f776558bd037aa5ba1
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdu1uLyqvDmhguSZuTbI1iQCXdFSsjn9qfpazj_rw9BTzdDYAlrjdbWX5xLwqRvP4JuzcRyzK0e7bN4Tq1Un0CU
expires: Mon, 30 Jan 2023 18:54:49 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1025
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A6RtBdHL645J%2B1iQa4BHI%2BXuG9YLJ7%2BfkYNad3%2B1gRP876HwH%2Bh6vzVsLLhoIBkogEiC02XDTzvQEEFrAQMBVAxp0CFmTjFSTnDQxcaspTvcERYZv%2BOWBzO3mwAkW%2B8cJj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db8bfdb8885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
104.18.20.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.20.226:0
Hash ea4085b95bae4c0e3ce8fb37a06465bc
16ac3398f9b46d344702fff2a984b078fd38ed03
23c25e8a45fa51d3f42f7bf38c6dad7459e9e53bd6aaffe62380937fec448253
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 18:56:38 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 03 Feb 2023 15:07:11 GMT
ETag: "16ac3398f9b46d344702fff2a984b078fd38ed03"
Last-Modified: Mon, 30 Jan 2023 15:07:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 852
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791c6dc1fcd6b506-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5239
Expires: Mon, 30 Jan 2023 20:23:57 GMT
Date: Mon, 30 Jan 2023 18:56:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5239
Expires: Mon, 30 Jan 2023 20:23:57 GMT
Date: Mon, 30 Jan 2023 18:56:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5239
Expires: Mon, 30 Jan 2023 20:23:57 GMT
Date: Mon, 30 Jan 2023 18:56:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5239
Expires: Mon, 30 Jan 2023 20:23:57 GMT
Date: Mon, 30 Jan 2023 18:56:38 GMT
Connection: keep-alive
uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
185.66.200.220200 OK 8.1 kB URL HTTP/2 uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
IP 185.66.200.220:0
ASN #201702 skHosting.eu s.r.o.
Hash 81dcf45b8d933612330cdd053ada8a5e
7f2d3184783f10c86f31d8f94f5236fd1fc95443
7125235c4ee461b7aed9fe6eb6328c96ce0a94d39a4250ba820b4d5437cc519d
GET /bnr.php?section=General&pub=593174&format=300x50&ga=g HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: application/javascript
expires: Mon, 30 Jan 2023 18:56:37 GMT
last-modified: Mon, 30 Jan 2023 18:56:37 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b7a0759c043594fbe85af422b59b8227
a05cfaad16078f42218dae233da38f6f5dff8487
e898d6ef1b3998fb9322a8fc190069ec5f7b3582bfe8397a2367497d84a27549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb887e5-87fa-4855-b0ee-712d39779fa0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11568
x-amzn-requestid: 79b70f1f-a157-4dd4-8743-825714195b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9T3UGA3oAMFSlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c86695-36e60aba09c152c73b8aefcb;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 21:37:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HvqpQI-tR9W2NwvIgoi8loQaD--rOgVYFdLdkdlaXMhe4ts9mYqahg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:50:16 GMT
age: 75982
etag: "a05cfaad16078f42218dae233da38f6f5dff8487"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
bonepa.com/js/responsive.js
185.66.201.42200 OK 12 kB URL HTTP/2 bonepa.com/js/responsive.js
IP 185.66.201.42:0
ASN #201702 skHosting.eu s.r.o.
Hash b8cb55087c290279667c7064c6844ba3
23715921bc0a34efde1b2de380c84d059f3baa0f
0c964674e7472881cddaba4d5047995bbca3f46d5e1279f07d48cb7f7979be8b
Analyzer Verdict Alert fortinet Phishing
GET /js/responsive.js HTTP/1.1
Host: bonepa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 13:52:39 GMT
etag: W/"63627627-e32"
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fe31ee140c2fd62e616c8a1edc9e78bb
7aa5fbdc8156514770ae620e81f1afef1c77890f
799af4bf9fa07ed27ebdc9d1a3344ee8a2b6529f076c263495b93290c47a1cc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52796f60-dafe-46ba-9c7a-a08ce5e16c34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8464
x-amzn-requestid: bf2cf356-ebb1-469b-ba35-a79bb009cad6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj3qGeboAMFzNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e697-7c96841f52b6a96d1b0eaf34;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: y6bDvcD7a3-A4DLC3cSdZT-yewV1kkFqcGr7AMuqvUeGA4A0pgF4wQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 21:59:27 GMT
age: 75431
etag: "7aa5fbdc8156514770ae620e81f1afef1c77890f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
34.120.237.76200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4205d8106659e00fff1cbe9262918b8c
ab4f6528594a1725934727dc7d834c028a79c609
31f1a28602a194bd0856495d4d81d5c72cd7ff4e5bad6bdd1a31ec3041f4a2cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f0097a6-af00-4a1c-8faa-f9516e27b31a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4475
x-amzn-requestid: b7b272d6-3089-4f33-89b5-5cb388640e10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fa_e6HsaIAMF5Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d445f8-1789f7f4264270916da323db;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 21:45:28 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hAzO-IMqc1CFpiBAlRl8seIYL9UonyrBMATibovyFq5kEuaweY_VyA==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 05:47:49 GMT
age: 47329
etag: "ab4f6528594a1725934727dc7d834c028a79c609"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
34.120.237.76200 OK 9.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51aa950d5eed7b90cab6632107092edc
e4388ced02e5576867e77547496dec1ac2338ef7
588830e5f725e8e56270565e40f817f2658b0ee7c0425d138e5f65a17ff40483
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df754eb-70f9-4576-ac48-68a6ae719511.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9457
x-amzn-requestid: 7c48e5ca-2128-43da-ba83-fd91568af1ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkBOGHVoAMFQtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6d4-1b850ffd543f51f92dec3894;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3EXFa0gb46AbdZ9ZznGiPTemGZ7zWh9WLs5Yr1zmfyh_jyKA6o7xoA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:19:57 GMT
age: 74201
etag: "e4388ced02e5576867e77547496dec1ac2338ef7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?8b68846a3ac1709b0ec7199084ee5ea8
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?8b68846a3ac1709b0ec7199084ee5ea8
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (620)
Hash ec2ba0650bcf968838972fec28db2103
696fb680a6a03b6f082abcc4e7cde56372590e33
1300371f72fb4049bc6802f86d1c4379bb71d310ff488aded1cbd1fa4307019e
GET /hm.js?8b68846a3ac1709b0ec7199084ee5ea8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Content-Type: application/javascript
Date: Mon, 30 Jan 2023 18:56:39 GMT
Etag: c0a12c08d2151cb7a734a388a5400fa3
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=B50A954119E72401; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
e1.o.lencr.org/
23.36.77.32200 OK 11 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
File type gzip compressed data, max speed, from Unix\012- data
Hash 54303a0f52a5509a4664f7b457ae9fbb
58b4e22097a071418cbf8b3053161d0490078c1a
9d33ce8ad85e397443ca78f5da9535697fdbaa3f39198baac59fb8996258ec1f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "54BD57B285E583CE2D4C306BC80252CF46D7E5C88422F1FCD56B12AC2AD21229"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6330
Expires: Mon, 30 Jan 2023 20:42:07 GMT
Date: Mon, 30 Jan 2023 18:56:37 GMT
Connection: keep-alive
hm.baidu.com/hm.js?0aa88b082508cc6ac60f783f27dd5d1c
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?0aa88b082508cc6ac60f783f27dd5d1c
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (661)
Hash 024c9988c3a3ac9e3a8cda565198e1c2
b3744850ff87219b23f16ed2e1536589b96c5619
63b350c216ffffea107a8a4cc46323c0c8de84452535c156c6851c4df031330d
GET /hm.js?0aa88b082508cc6ac60f783f27dd5d1c HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11299
Content-Type: application/javascript
Date: Mon, 30 Jan 2023 18:56:39 GMT
Etag: 694db3da0f49d3c68277ef4f4517aea8
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=562C4D42151AC6D8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=857696418&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=857696418&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=857696418&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 30 Jan 2023 18:56:39 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=D977A5A5B839A5B2; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.js?ba99808308e7272d58c43367a11d1204
103.235.46.191200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?ba99808308e7272d58c43367a11d1204
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (629)
Hash bd9913510ee4c94355c8ed77b16100eb
589e7ef3025dd344242ae012489c88f2f995b01a
9fbf4689574a5e16dab98ade8f3006f585ee7ac7e93b127adb8a9aa70fa3333d
GET /hm.js?ba99808308e7272d58c43367a11d1204 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11267
Content-Type: application/javascript
Date: Mon, 30 Jan 2023 18:56:39 GMT
Etag: 690a33a0d05c878be3d9b7c297beaa55
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=097F0CF2F0FE39EB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1819998108&si=0aa88b082508cc6ac60f783f27dd5d1c&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1819998108&si=0aa88b082508cc6ac60f783f27dd5d1c&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1819998108&si=0aa88b082508cc6ac60f783f27dd5d1c&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 30 Jan 2023 18:56:40 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=E6507D4105A4190D; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=930109907&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=930109907&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=930109907&si=b521817f22507716e364b3fe28644f8b&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 30 Jan 2023 18:56:40 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=1BEB61142D22E994; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1893089225&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
103.235.46.191200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1893089225&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298
IP 103.235.46.191:0
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1893089225&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fw.g8boja.cyou%2F&v=1.3.0&lv=1&sn=30413&r=0&ww=1280&u=https%3A%2F%2Fjzupsq.cyou%2FCjcPaJ3f%2Fdia-aq22%2F%3F_t%3D1675105010015%231675105011298 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Mon, 30 Jan 2023 18:56:40 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=B5405D27FA7F8A70; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
jzupsq.cyou/CjcPaJ3f/dia-aq22/?_t=1675105010015
172.64.130.19200 OK 0 B URL HTTP/2 jzupsq.cyou/CjcPaJ3f/dia-aq22/?_t=1675105010015
IP 172.64.130.19:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /CjcPaJ3f/dia-aq22/?_t=1675105010015 HTTP/1.1
Host: jzupsq.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://w.g8boja.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: pType=mo; expires=Mon, 30-Jan-2023 19:08:36 GMT; Max-Age=720; path=/; domain=jzupsq.cyou
dia-aq22-tthh1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.jzupsq.cyou
dia-aq22-tthh2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.jzupsq.cyou
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gjHATsW7jp1OHhwiXEggW%2FMNmjW6JMTH2bDF03AfhJneMa1mozcGXVqz72bHErUkv3YIG17COQKjh0ucJ8gsQuU%2FCmwMcqhNpf7%2B8I%2FXLyURyCIP%2FuzTy4O3myLqAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c6db70b3c74b5-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
jzupsq.cyou/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
172.64.130.19200 OK 0 B URL HTTP/2 jzupsq.cyou/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 172.64.130.19:0
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: jzupsq.cyou
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/CjcPaJ3f/dia-aq22/?_t=1675105010015
Cookie: pType=mo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: application/javascript
last-modified: Mon, 23 Jan 2023 11:05:52 GMT
etag: W/"63ce6a10-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iBzGtQDvWB89vsIz8sbVMBj30QG5nkGSo1Fca7q0e4makN6%2B9v79N41%2FZm%2FvKLtwQzKsOMj0iVsK2oUT34NnUMrczyD7Gp6rTBPShyTpMhAUkEBR3WijFXeJTqvyKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db84ce174b5-LHR
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 01 Feb 2023 18:56:37 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
104.16.89.20200 OK 0 B URL HTTP/2 cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css
IP 104.16.89.20:0
GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
x-served-by: cache-fra19133-FRA, cache-iad-kiad7000178-IAD
x-cache: HIT, HIT
vary: Accept-Encoding
cf-cache-status: HIT
age: 20554262
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ooad8pjcyzf6qaUqTkZ5YcQ0%2B%2F1abBSU6CQVhiafIFclg1feg5rqcpxUhjYpG6GTBGu%2BSquiIWgsJaiElgH37MsBMqrxuUx9M4B5swdDZ6LRuGJ%2FV28BitGTnwaTDaQJGRQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791c6db8aa43b4e8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
172.64.165.21200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP 172.64.165.21:0
GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdvlE_DLoVV9BUo5AxOAhNxOSaLc0DTEnR_RrnAhqI2xSKui-ObXzfrmbzVJmlvWpzcQ9A8YUPlODUqcZtb8ik2WclFgR_Ik
expires: Mon, 30 Jan 2023 19:06:28 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2178
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=znlYgIE4fcHfuJcpcZifJhnKzauGVj4WBWP4VZqseA2tO22p3eSFWz%2BW2who0d3wJJlmDIOiMVNL4OAMKiyZm8FDYZgRJFqBrBtChkMi7qN0ZGhmybXh422BMbAXgIMMrhk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db8d82d8885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
bonepa.com/4fe48aebd6/4f59451604/?placementName=Pop&is_first=true&randomA=0_2210&maxw=0
185.66.201.42200 OK 0 B URL HTTP/2 bonepa.com/4fe48aebd6/4f59451604/?placementName=Pop&is_first=true&randomA=0_2210&maxw=0
IP 185.66.201.42:0
ASN #201702 skHosting.eu s.r.o.
GET /4fe48aebd6/4f59451604/?placementName=Pop&is_first=true&randomA=0_2210&maxw=0 HTTP/1.1
Host: bonepa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:56:40 GMT
content-type: text/html; charset=UTF-8
set-cookie: shown1=0; expires=Tue, 31-Jan-2023 18:56:40 GMT; Max-Age=86400; secure; SameSite=None
used_ad2633668=1; expires=Tue, 31-Jan-2023 04:59:59 GMT; Max-Age=36199; path=/; secure; SameSite=None
total_impressions=1; expires=Tue, 31-Jan-2023 04:59:59 GMT; Max-Age=36199; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
172.64.165.21200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
IP 172.64.165.21:0
GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdsf3tzwudZfkPS2DQ_oOQj0OKcbfGJswraNIZcM1hyXfZh87zci_6ainLgL0N_3wk_VzjbaWR9jSWBbFY1nGttIvPpZHBsd
expires: Mon, 30 Jan 2023 19:04:27 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2977
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PX81Dj5OR2qwMqhEPZcFEJnddFAHKXXlGqPNjfiqG36tiTfOiSjr%2BFxYEmtJa7oOkjaTg2kVV0tcn0bvxWQYONwNtJyEjlvAIu2t0jvh5PKU2xdkSIALsQbtlh6R38InTLg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db8afc68885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
172.64.165.21200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
IP 172.64.165.21:0
GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdtEi86mIADHQx0-Tw3Js-aisdL1bu5HdnObfPOJR-JODbwuU8Dh4go8RIl-0rhgjH4sKU6FrNPd2I-NyGdX-_jHzA5D73Bc
expires: Mon, 30 Jan 2023 19:14:04 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1219
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vELeHi%2BJIMXC%2BmHDiOPT4dOQlMzxLLvplQKzbjA02dpBJkckmYtfGVJ90yi3%2BVJGzE%2FV2JWYliWz%2F2qcHHOGo3U05CGE5Tfy58pt%2FOxY4HwrbuzteK6pW%2B056XsKJSobFEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db8cff88885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
172.64.165.21200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
IP 172.64.165.21:0
GET /npm/lazyload@2.0.0-rc.2/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycduIPxBxn9HV1RvlxQW5n8gWMNt2gH6LJACR5zSppFALBLzrzJxa_8ctHWVRnxFIChP9qRRTmrjDnfJ9VGLfuaiuefHrtsZR
x-goog-generation: 1647502963816044
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4798
x-goog-hash: crc32c=lted8w==, md5=3G3pgTxxS6mXM8pPtdOh+g==
x-goog-storage-class: STANDARD
expires: Mon, 30 Jan 2023 19:01:57 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:42:43 GMT
etag: W/"dc6de9813c714ba99733ca4fb5d3a1fa"
age: 1821
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qQ9eExPPCLMXUyzK50N8GHKimMjahVb6tFNmUaBeoPjMT60FOGkSKdVTjZCsmVkmh63zyitqNqCvmvrqRKJ4itQ9kWMndp%2Bcb71UJBAsMmItAuVNAufUtV7tWM2N5ff6Gdk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791c6db8c80d8885-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=167510499722100&xtt=2816925
185.66.200.220200 OK 0 B URL HTTP/2 uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=167510499722100&xtt=2816925
IP 185.66.200.220:0
ASN #201702 skHosting.eu s.r.o.
GET /bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=167510499722100&xtt=2816925 HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jzupsq.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 18:56:37 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 30 Jan 2023 18:56:37 GMT
last-modified: Mon, 30 Jan 2023 18:56:37 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2