r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c9ec202b798d350b6582220b7bb8457
d16ca24cd60b349231ad06fa5db32f54a3bc9e09
df036d315a613ac6396b77afb0a4ea5f793091786be0cbf3f3a0d043bc1d1d3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF036D315A613AC6396B77AFB0A4EA5F793091786BE0CBF3F3A0D043BC1D1D3C"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6775
Expires: Fri, 28 Oct 2022 08:33:06 GMT
Date: Fri, 28 Oct 2022 06:40:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42d84e61e6aa4d3cce623adccfafc3e2
0dba69e98be53c153a6726ff934b2d55feb20d75
2f53662c68c9ea7be85837310861c8007fd039e5e4d8eb8f0d8948d5d1571a03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F53662C68C9EA7BE85837310861C8007FD039E5E4D8EB8F0D8948D5D1571A03"
Last-Modified: Thu, 27 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11909
Expires: Fri, 28 Oct 2022 09:58:40 GMT
Date: Fri, 28 Oct 2022 06:40:11 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 221b3fe9a6458de64d8bbfcd4a8e2f36
988c93428ff15108d46a11865e1c7e2782fbae34
a5ff1b60b9ef85086d0c6617d9d39cf17ae45855bf7b0ee24ec49ad5a863c18e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5454
Cache-Control: max-age=102111
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 06:40:12 GMT
Etag: "635a4fdd-1d7"
Expires: Sat, 29 Oct 2022 11:02:03 GMT
Last-Modified: Thu, 27 Oct 2022 09:31:09 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 6lP+O0rAhAUrPdyMF/pmlX35M+nhU6fO/hBbwonSuv6YkDP3JmPlZGSo3nX7WVJqN6KRdam2RO4=
x-amz-request-id: 0G7J3DWV57P9J6QM
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 28 Oct 2022 06:36:59 GMT
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
age: 193
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
eroloves.top/
302 Found 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: eroloves.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Fri, 28 Oct 2022 06:40:12 GMT
Server: Apache/2.4.38 (Debian)
Location: https://brazz.icu/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash d72d2f5d05f03753594e43fd34398221
ac6795c1c33f3fa2139e7f8dc601c3e6de6029a5
036c965156cf07faecc342cb2e30b7a20def68ad4a10423951ce871a7a3a6777
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6401
Cache-Control: max-age=97998
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 06:40:12 GMT
Etag: "635a3c19-1d7"
Expires: Sat, 29 Oct 2022 09:53:30 GMT
Last-Modified: Thu, 27 Oct 2022 08:06:49 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ppze+0fAgUN4f87y/NuFQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: g/8cNvhKOvqqbanmerSN8A1UPJE=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 944be3cd0e44d90a9cfff2017faf6a2e
d455a3158f05a9bb4ee359f5be69d4e56a3ff78d
cafce4b9bcb4a26f2e3e5f1468372b16bef9df22314974bff7ac3e183f09f5e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CAFCE4B9BCB4A26F2E3E5F1468372B16BEF9DF22314974BFF7AC3E183F09F5E3"
Last-Modified: Thu, 27 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21541
Expires: Fri, 28 Oct 2022 12:39:14 GMT
Date: Fri, 28 Oct 2022 06:40:13 GMT
Connection: keep-alive
brazz.icu/
200 OK 1.7 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 062f6fbe169bd473ee8c3fbe0a11185e
a3dcc4febf2084cdeae8331ffd0eeeba0e0fb58e
1ebe53982641653e1ca03756676f6b9673dd7a74fc62e61570820745de5c43ab
GET / HTTP/1.1
Host: brazz.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 06:40:13 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: PHPSESSID=sbovu4mtvf79bfp1bfmomvsu76; expires=Fri, 28-Oct-2022 07:25:13 GMT; Max-Age=2700; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1693
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
brazz.icu/style.css
200 OK 1.3 kB IP
Hash 4dd6eaa6486dffffad403464e706bbf3
2d97469678e36dc8ac0099e0b233aa1681200e83
662301031a5d36e110a54a241f94c6b09d84c93b7983c758138f7142ffb0939b
GET /style.css HTTP/1.1
Host: brazz.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Cookie: PHPSESSID=sbovu4mtvf79bfp1bfmomvsu76
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 06:40:13 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sun, 27 Mar 2022 01:36:46 GMT
ETag: "104c-5db293a8ce801-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1322
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
qa24ljic4i.com/get/1898044?p=1898044&jp=_clxb7u6x7zyhtfcdmhok52
200 OK 7 B URL HTTP/2 qa24ljic4i.com/get/1898044?p=1898044&jp=_clxb7u6x7zyhtfcdmhok52
IP
File type ASCII text, with no line terminators
Hash a97eb6fbe6f13b601d5d48c0eba8baae
736efb938caf3d0edec406932ada889f1a4f2268
a04bf061f53e0011fd2f43bdf081526344f003c50146c88c42c2d95ef22c1821
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1898044?p=1898044&jp=_clxb7u6x7zyhtfcdmhok52 HTTP/1.1
Host: qa24ljic4i.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:13 GMT
content-type: text/javascript
content-length: 7
x-route-id: config
set-cookie: UID=22102801404dc2b66dfbcc4ef78f9f3b8f38; Path=/; Expires=Sat, 28 Oct 2023 06:40:13 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ed097bd15ee17dddd3bdce1cde6c878
5e1b8c0929748c90bb7a7237034a8d43a6c32eab
72a76375267086a106abec8f8b13e6a4357f901504c78785f6dbd98e5c482a66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72A76375267086A106ABEC8F8B13E6A4357F901504C78785F6DBD98E5C482A66"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3334
Expires: Fri, 28 Oct 2022 07:35:48 GMT
Date: Fri, 28 Oct 2022 06:40:14 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash 546994b6e8aed64affdafc8f3f30ca62
f61fce2a29bf848afc50726f53b03393d6f4a157
a60f583574d36166a15930036cce025ebfb5792933486df5f756fc873a025ef0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4562
Cache-Control: max-age=145815
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 06:40:14 GMT
Etag: "635afe13-118"
Expires: Sat, 29 Oct 2022 23:10:29 GMT
Last-Modified: Thu, 27 Oct 2022 21:54:27 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 546994b6e8aed64affdafc8f3f30ca62
f61fce2a29bf848afc50726f53b03393d6f4a157
a60f583574d36166a15930036cce025ebfb5792933486df5f756fc873a025ef0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4562
Cache-Control: max-age=145815
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 06:40:14 GMT
Etag: "635afe13-118"
Expires: Sat, 29 Oct 2022 23:10:29 GMT
Last-Modified: Thu, 27 Oct 2022 21:54:27 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 546994b6e8aed64affdafc8f3f30ca62
f61fce2a29bf848afc50726f53b03393d6f4a157
a60f583574d36166a15930036cce025ebfb5792933486df5f756fc873a025ef0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4824
Cache-Control: max-age=146077
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 06:40:14 GMT
Etag: "635afe13-118"
Expires: Sat, 29 Oct 2022 23:14:51 GMT
Last-Modified: Thu, 27 Oct 2022 21:54:27 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 280
cdn.pncloudfl.com/pn/087/982/9a0/0879829a09c40b64dbdc0f242a35b72ffac08aa6.png
200 OK 48 kB URL HTTP/2 cdn.pncloudfl.com/pn/087/982/9a0/0879829a09c40b64dbdc0f242a35b72ffac08aa6.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d4f5e956d4cbb01896c32e9be09275fa
c088d58a016a4558ef07355b6024af5396daec58
96baed66631078682d9d8c9821deeb772543af6c420501773c6a5947a04c1095
GET /pn/087/982/9a0/0879829a09c40b64dbdc0f242a35b72ffac08aa6.png HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 06:40:14 GMT
content-type: image/webp
content-length: 47682
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=78045
content-disposition: inline; filename="0879829a09c40b64dbdc0f242a35b72ffac08aa6.webp"
etag: 0713b5bb31c6e4567cfad608b49c7b62
expires: Sat, 29 Oct 2022 17:58:26 GMT
last-modified: Sat, 25 Jun 2022 11:34:30 GMT
vary: Accept
x-openstack-request-id: tx91ee5175127347938240f-0062b6fb07
x-proxy-cache: HIT
x-timestamp: 1656156869.15703
x-trans-id: tx91ee5175127347938240f-0062b6fb07
cf-cache-status: HIT
age: 45708
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 7611adc82ec8b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/78f/bd1/6c7/78fbd16c78ea1806ddadee92c337c990ee83656c.jpg
200 OK 36 kB URL HTTP/2 cdn.pncloudfl.com/pn/78f/bd1/6c7/78fbd16c78ea1806ddadee92c337c990ee83656c.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1a91849892f509597586c71a5d54f611
db8fe5c61712875cba87dc78cd30af6b2fbdb70f
34c1262affb1b22ed35dc3c2ea0f7a43281622244702d800239c984b557ddef2
GET /pn/78f/bd1/6c7/78fbd16c78ea1806ddadee92c337c990ee83656c.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 06:40:14 GMT
content-type: image/webp
content-length: 35502
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=73690
content-disposition: inline; filename="78fbd16c78ea1806ddadee92c337c990ee83656c.webp"
etag: a997ef91790907e430fceaa2353318cf
expires: Sat, 29 Oct 2022 18:06:02 GMT
last-modified: Wed, 26 Oct 2022 10:00:49 GMT
vary: Accept
x-openstack-request-id: tx9931920951b341809df7a-00635908e1
x-proxy-cache: HIT
x-timestamp: 1666778448.85842
x-trans-id: tx9931920951b341809df7a-00635908e1
cf-cache-status: HIT
age: 45252
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 7611adc83ed0b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.pncloudfl.com/pn/be2/4f4/e0c/be24f4e0cc57a6bd44c315d808592a3ac45a7d74.jpg
200 OK 35 kB URL HTTP/2 cdn.pncloudfl.com/pn/be2/4f4/e0c/be24f4e0cc57a6bd44c315d808592a3ac45a7d74.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 44b034dc0c54104c9605315dd8e04d0e
018a773154ce0d5250ba70522db8568f40ae14ed
bb0c5ebb30e8bcd06807050e97649125fab1af37e62756f7218d20d163d196de
GET /pn/be2/4f4/e0c/be24f4e0cc57a6bd44c315d808592a3ac45a7d74.jpg HTTP/1.1
Host: cdn.pncloudfl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 06:40:14 GMT
content-type: image/webp
content-length: 35140
access-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization
access-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS
access-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp
cache-control: max-age=172800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=73149
content-disposition: inline; filename="be24f4e0cc57a6bd44c315d808592a3ac45a7d74.webp"
etag: 7aa3d66e0eb3e5ae46780f37d76c0d3b
expires: Sat, 29 Oct 2022 17:34:44 GMT
last-modified: Sat, 27 Aug 2022 15:19:36 GMT
vary: Accept
x-openstack-request-id: txf17ea8af647c475db8cf7-00630a369f
x-proxy-cache: REVALIDATED
x-timestamp: 1661613575.75142
x-trans-id: txf17ea8af647c475db8cf7-00630a369f
cf-cache-status: HIT
age: 47130
accept-ranges: bytes
access-control-allow-origin: *
server: cloudflare
cf-ray: 7611adc83ed2b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 546994b6e8aed64affdafc8f3f30ca62
f61fce2a29bf848afc50726f53b03393d6f4a157
a60f583574d36166a15930036cce025ebfb5792933486df5f756fc873a025ef0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4562
Cache-Control: max-age=145815
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 06:40:14 GMT
Etag: "635afe13-118"
Expires: Sat, 29 Oct 2022 23:10:29 GMT
Last-Modified: Thu, 27 Oct 2022 21:54:27 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 28 Oct 2022 10:08:55 GMT
Date: Fri, 28 Oct 2022 06:40:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 28 Oct 2022 10:08:55 GMT
Date: Fri, 28 Oct 2022 06:40:14 GMT
Connection: keep-alive
forlumineoner.com/pfe/current/tag.min.js?pub=1&t=standalone&z=1898045&var=
200 OK 6.5 kB URL HTTP/2 forlumineoner.com/pfe/current/tag.min.js?pub=1&t=standalone&z=1898045&var=
IP
Hash 9b35488a0c15caeccb25df62f64769e8
d28b5682f1f59043deb081da1895368d85840c53
d4fb09a1653e84174d358ed3add822d68d7c5b48379fab47e4535a9928c8e92f
GET /pfe/current/tag.min.js?pub=1&t=standalone&z=1898045&var= HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: application/javascript
last-modified: Tue, 25 Oct 2022 09:56:49 GMT
etag: W/"6357b2e1-39be"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 28 Oct 2022 10:08:55 GMT
Date: Fri, 28 Oct 2022 06:40:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12521
Expires: Fri, 28 Oct 2022 10:08:55 GMT
Date: Fri, 28 Oct 2022 06:40:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ec53913f994b99340024aa1958102a2
8a2e935e59efbe8a6b4f4fad1ef0b87241731dec
7a17e72f6767e8d129ce43ec41aa535827fbc90b085898f5a764166c7600b48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10330
x-amzn-requestid: d1306110-4c96-44f6-86c9-542354fb5f26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw3DHedoAMFegg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb60-236067d573debd7b248a3579;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:56 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FEgc1gYGoQvntxdOiUoXrDNK6irThtVu-E1iztiw5Zry4zyLE3V9eQ==
via: 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:02:13 GMT
age: 31081
etag: "8a2e935e59efbe8a6b4f4fad1ef0b87241731dec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb430e5efbc6c8c306fce87e26faf734
b05b7299a7e473e873510671a6abdd5227a53f46
c49d64e87ec8243a1ee7f214f21988b6f6a33ba93814ec31262d80e4a22b8504
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe98a4c03-5fa3-4445-a037-d229b86c94a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8936
x-amzn-requestid: d0698fc0-e4c9-4633-9b64-df09be35b450
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aocuiGBlIAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6359a7f6-7c78a1fc43552b934e6b8708;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 21:34:46 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: gus8UKo03dRkfqPRhxnW6zzqx7o-2tZbbv-DsBSW7UREHPOA1uqdUw==
via: 1.1 5abfab33f248090bb0f31ca137ce9464.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:12:58 GMT
age: 30436
etag: "b05b7299a7e473e873510671a6abdd5227a53f46"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: X2yIbylXM6iNJmvNHN8m0S70NeEPPCDafwWHfZto550QwEWKOAdl-A==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 00:46:12 GMT
age: 21242
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F763d669f-e7a7-4a98-adaf-5316f96ef18e.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F763d669f-e7a7-4a98-adaf-5316f96ef18e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 134b31ca1a6cb74ab6f6c21e27114883
bb13bb4f8876e00be7fb70e0b4f6cd52d0165458
539ee95d515835ade79c63a5c85c138678019563ac0e2f86bcfd7fcc0dc9dce2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F763d669f-e7a7-4a98-adaf-5316f96ef18e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7436
x-amzn-requestid: f6e2c641-406d-401b-b2df-83c4ea69ad3b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arwwIFuSoAMFVuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb33-5a2647d6231e8ad40f6a2335;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zz7z9urOnatwDD7s4ihvxkySKBLUFR0YvxGW3jy6Oa55ojQrOoAcUA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:29:04 GMT
age: 29470
etag: "bb13bb4f8876e00be7fb70e0b4f6cd52d0165458"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0beffd34-28f8-426e-9903-0c9e8e682498.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0beffd34-28f8-426e-9903-0c9e8e682498.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a0fb7946977ae30ca71ee4e0e8c8b4f5
d7bc764972e1113c55969131fb15252a10db9257
acbc9cf0d1d9d72240a46dd7c828f4f3c19729751c1110d00cb5eb243ecaca5b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0beffd34-28f8-426e-9903-0c9e8e682498.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9716
x-amzn-requestid: aef98b3b-256a-4c97-98cc-3f401b949755
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv19Gp3IAMFzkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9bf-39cb1f173f545d7223a5f865;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:35:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KmiXq5sohOZRTQB-UzcvlgCot8LIz3eEqSjypT5c4xIYNMHtY-FKCA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:41:18 GMT
age: 32336
etag: "d7bc764972e1113c55969131fb15252a10db9257"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64dc32b98b1b728bf4324c6ddb8bfc21
88e5606d51d034ff9865bfd363c6a1721ccc9904
ea02af9d94c82fee1fa1f1086c6241fa4995ed4d2389fa5d5258d920c18cdb51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11395
x-amzn-requestid: 74d92b9c-c8c2-43d3-b084-4a0503a2ce2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arxL5H2mIAMFfFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afbe5-396fc42b1c1365791d6889bf;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:45:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4ZkIg3rnrulTnmOI3xoz0pnx5rjM8SyOXHof9LkbtfNKUWPc6Yo1FA==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:25:49 GMT
age: 29665
etag: "88e5606d51d034ff9865bfd363c6a1721ccc9904"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
brazz.icu/search-16.png
200 OK 350 B IP
File type PNG image data, 15 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 0f4590cdf9813c9b26676f86803bbf00
55f14aaef94a983d0021354f4b3d5d9e75098890
0ba4538eb01fd6b19ffaca2e1513d76db32b8f4c9a1c9da74e6fc03378e71574
GET /search-16.png HTTP/1.1
Host: brazz.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/style.css
Cookie: PHPSESSID=sbovu4mtvf79bfp1bfmomvsu76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 06:40:14 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sun, 27 Mar 2022 01:36:46 GMT
ETag: "15e-5db293a8ce801"
Accept-Ranges: bytes
Content-Length: 350
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
forlumineoner.com/zone?pub=1&zone_id=1898045&is_mobile=false&domain=brazz.icu&var=&ymid=&var_3=
200 OK 619 B URL HTTP/2 forlumineoner.com/zone?pub=1&zone_id=1898045&is_mobile=false&domain=brazz.icu&var=&ymid=&var_3=
IP
File type JSON data\012- , ASCII text, with very long lines (618)
Hash 9c476c638f3b8dd27f75c328aef4c644
3255a76fb67e34b64b1629e2b1a93171cfa3cd31
9eeae98e4402a9bf0065509efcfd002fe27ce8283e1916e77352cb1f43b4518f
GET /zone?pub=1&zone_id=1898045&is_mobile=false&domain=brazz.icu&var=&ymid=&var_3= HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brazz.icu/
Origin: https://brazz.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: application/json; charset=utf-8
content-length: 619
x-trace-id: b2c5074b95d8cd90d80a99f06247a82f
access-control-allow-origin: https://brazz.icu
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
forlumineoner.com/custom
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://brazz.icu/
Origin: https://brazz.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://brazz.icu
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
forlumineoner.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brazz.icu/
Content-Type: application/json
Origin: https://brazz.icu
Content-Length: 372
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: bf92d1fec8dce8b2be402ce0be300029
access-control-allow-origin: https://brazz.icu
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
brazz.icu/brazz-icu.png
200 OK 306 kB IP
File type PNG image data, 1200 x 228, 8-bit/color RGBA, non-interlaced\012- data
Size 306 kB (305913 bytes)
Hash e0766df6fcb47fa1458d77adc8f1b26e
3c78449bec92f5a2b8cd524c265849e75562c4b2
168ce679fc66c58bd35465c5831552ab1394b69d032c75d4bf39102d040ca6ed
GET /brazz-icu.png HTTP/1.1
Host: brazz.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Cookie: PHPSESSID=sbovu4mtvf79bfp1bfmomvsu76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 06:40:13 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sun, 27 Mar 2022 01:44:54 GMT
ETag: "4aaf9-5db2957a31180"
Accept-Ranges: bytes
Content-Length: 305913
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
brazz.icu/top-slots-bestof-casino.png
200 OK 43 kB URL HTTP/1.1 brazz.icu/top-slots-bestof-casino.png
IP
File type PNG image data, 479 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ff24406315978478cd7c484cebad1da
6babb9a1d24c0f1afa1a463e385cefed4b379570
f5e150318efab614b0659c8b06c14a48bbda84dceef1ee4122e4c103ddef9d66
GET /top-slots-bestof-casino.png HTTP/1.1
Host: brazz.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Cookie: PHPSESSID=sbovu4mtvf79bfp1bfmomvsu76
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Fri, 28 Oct 2022 06:40:14 GMT
Server: Apache/2.4.38 (Debian)
Last-Modified: Sun, 27 Mar 2022 01:36:46 GMT
ETag: "a680-5db293a8da383"
Accept-Ranges: bytes
Content-Length: 42624
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
forlumineoner.com/custom
200 OK 39 B IP
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brazz.icu/
Content-Type: application/json
Origin: https://brazz.icu
Content-Length: 722
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: a29938516f753820af9b6a563bee01b2
access-control-allow-origin: https://brazz.icu
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
brazz.icu/favicon.ico
404 Not Found 3.8 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ISO-8859 text
Hash 283d0d6bf6dceb657cfdab214055dfbb
779682ee7909fac3335aee815e864dfe771c5918
554be885e3e33749f251325f3563ea4cdbfc052ad2d70114f46a07cfe55df116
GET /favicon.ico HTTP/1.1
Host: brazz.icu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Cookie: PHPSESSID=sbovu4mtvf79bfp1bfmomvsu76; pnState={"impressions":0,"delayStarted":1666939212319,"page":"/"}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Fri, 28 Oct 2022 06:40:14 GMT
Server: Apache/2.4.38 (Debian)
Set-Cookie: brazz-mvisits=1; expires=Fri, 28-Oct-2022 08:40:14 GMT; Max-Age=7200
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Length: 3814
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
forlumineoner.com/pfe/current/standalone.min.js?v=3.1.401
200 OK 31 kB URL HTTP/2 forlumineoner.com/pfe/current/standalone.min.js?v=3.1.401
IP
Hash bbaab7dad2e600e1eba493876ffad852
b793c7ece89bc2dc666e6bf79e74bbf810aedf9f
1df26c99af5d23520a66c3a474292ebfd239877052c2cc8dc8c1c91f0b052135
GET /pfe/current/standalone.min.js?v=3.1.401 HTTP/1.1
Host: forlumineoner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://brazz.icu/
Origin: https://brazz.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:12 GMT
content-type: application/javascript
last-modified: Tue, 25 Oct 2022 09:56:49 GMT
etag: W/"6357b2e1-1670c"
access-control-allow-origin: https://brazz.icu
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
vzigttqgqx.com/chicken.gif?z=1898043&pb=baba775f9876a9194cfda7433b9cde621666946414&psp=NAPDf0MUsJ-PpKqEDUd38HV3V64tKdXIic4mgDTOw4pS9ZdYE8360-2TpgFDXkMQtpmN1e3L2dpl4VFuZbUJP-bgnQfyfdVlbOBCnryX-cz_9n1AWM2E3Zw87rsSNIMSO5CACyL2mqlKQrMYTi3tyTEqloA_fW6SsOnZsHElet_YhkCuBZj1wgVUnIfdGOKMj_wbKsm1ACEra61nbiKhWF50gBWhITORxzkDhND8cmH2elsGH8XP8JZMBBn11x7c1D5Vs21jVsJqqSATDk1xN6-YnapZm2mazx2b0DhddaAMLxadq95fdMpGETkWiWYheDt3j5KhoMHhyI9-kOxy2Nuk9TYGOOJcwT8reCqKhpdrBepV5s6fwVnflkevqtXJQnoKtnFHWC7FkMCubBa8B14NmdS8bSQZPI76RCMn0iJA5_jOh-J7epi4WuaQQOVWvmR52y0OERwQo8Y06jnOw3mgWRFNyli3_OW7JOTsDlJia2Uh7g4MRyeDW6RDV3yJ6Cgb8VdrZvwKOVXAyU68yDLADTX5AXYzxH_E8frfZ5VWNVkIXsp_sNM_JS5UCKLzwt1Xsz1BE5l-adJMhOmALLAEFA1xlbgn7p7NWs_B1Ax-xFzhC88taQuLvzOa2lYFX76X6rXX_T0tHFgH13XW40_ylzDj2K1t6e8zkSfQug-3b6VG9y5GrAb2vKKxsnz2e2KjPktrY53-vQAQIH7cRki_VqNLTtdvHcS9jKDWue1uy3WUYTWa4VbVvfdGQ5_RfFSLi9cLzZ1b099qhbiSQKkR_QhFh0kZsRTrmYaUHvWHIxy61EgehoOJOQc25uqFWL4-RDDCmDjNw95pedYj9smaBJKXMAlajXdxAR4rmQt902vB7P08fkVE9wHO9rv1VzVCighBi-ffUZ7Hl0Y50cQi2HtmNqQ-pBVLq5926wx-igyvMNRm9g7Ypf1LlVDTD7AXxaQhtrQ9IU8N4_GfOm8jO8W8srNKDJ9iuc4iO2n2ODEqg6Zt0mQgacUYV5azVnvomg_OF3fUFbw2V63LZAUPxnHbnQgWRMmCNv4Qb-9cbb27Fv3dL458IosWOeiA3kbEIi0_0R8zNeDdJBQ2wkHmfuuUfS0T32ohqXW7Uv1Z6UA66pZKYhUN9aN1q360oxuQmWIy1zSEHwCybVzzEdfwawpntf8sN0N4CmODSVB7VTRqK5xRbawi7HuwjVv7b6jVhABBYBkoyJcnNJqWXhrFHcMflluEJVfBKL8cZOxN6Cn6YSq4mXYZkGZ7rdP8aDAUS5qjnzYOAg1SLA==&abvar=0&os=0
200 OK 43 B URL HTTP/2 vzigttqgqx.com/chicken.gif?z=1898043&pb=baba775f9876a9194cfda7433b9cde621666946414&psp=NAPDf0MUsJ-PpKqEDUd38HV3V64tKdXIic4mgDTOw4pS9ZdYE8360-2TpgFDXkMQtpmN1e3L2dpl4VFuZbUJP-bgnQfyfdVlbOBCnryX-cz_9n1AWM2E3Zw87rsSNIMSO5CACyL2mqlKQrMYTi3tyTEqloA_fW6SsOnZsHElet_YhkCuBZj1wgVUnIfdGOKMj_wbKsm1ACEra61nbiKhWF50gBWhITORxzkDhND8cmH2elsGH8XP8JZMBBn11x7c1D5Vs21jVsJqqSATDk1xN6-YnapZm2mazx2b0DhddaAMLxadq95fdMpGETkWiWYheDt3j5KhoMHhyI9-kOxy2Nuk9TYGOOJcwT8reCqKhpdrBepV5s6fwVnflkevqtXJQnoKtnFHWC7FkMCubBa8B14NmdS8bSQZPI76RCMn0iJA5_jOh-J7epi4WuaQQOVWvmR52y0OERwQo8Y06jnOw3mgWRFNyli3_OW7JOTsDlJia2Uh7g4MRyeDW6RDV3yJ6Cgb8VdrZvwKOVXAyU68yDLADTX5AXYzxH_E8frfZ5VWNVkIXsp_sNM_JS5UCKLzwt1Xsz1BE5l-adJMhOmALLAEFA1xlbgn7p7NWs_B1Ax-xFzhC88taQuLvzOa2lYFX76X6rXX_T0tHFgH13XW40_ylzDj2K1t6e8zkSfQug-3b6VG9y5GrAb2vKKxsnz2e2KjPktrY53-vQAQIH7cRki_VqNLTtdvHcS9jKDWue1uy3WUYTWa4VbVvfdGQ5_RfFSLi9cLzZ1b099qhbiSQKkR_QhFh0kZsRTrmYaUHvWHIxy61EgehoOJOQc25uqFWL4-RDDCmDjNw95pedYj9smaBJKXMAlajXdxAR4rmQt902vB7P08fkVE9wHO9rv1VzVCighBi-ffUZ7Hl0Y50cQi2HtmNqQ-pBVLq5926wx-igyvMNRm9g7Ypf1LlVDTD7AXxaQhtrQ9IU8N4_GfOm8jO8W8srNKDJ9iuc4iO2n2ODEqg6Zt0mQgacUYV5azVnvomg_OF3fUFbw2V63LZAUPxnHbnQgWRMmCNv4Qb-9cbb27Fv3dL458IosWOeiA3kbEIi0_0R8zNeDdJBQ2wkHmfuuUfS0T32ohqXW7Uv1Z6UA66pZKYhUN9aN1q360oxuQmWIy1zSEHwCybVzzEdfwawpntf8sN0N4CmODSVB7VTRqK5xRbawi7HuwjVv7b6jVhABBYBkoyJcnNJqWXhrFHcMflluEJVfBKL8cZOxN6Cn6YSq4mXYZkGZ7rdP8aDAUS5qjnzYOAg1SLA==&abvar=0&os=0
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28e463819a210071de3b45ebe7633613
6dccd571828ec0912629119cf7eabfea9f33ddbc
44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84
Analyzer Verdict Alert quad9 Sinkholed
GET /chicken.gif?z=1898043&pb=baba775f9876a9194cfda7433b9cde621666946414&psp=NAPDf0MUsJ-PpKqEDUd38HV3V64tKdXIic4mgDTOw4pS9ZdYE8360-2TpgFDXkMQtpmN1e3L2dpl4VFuZbUJP-bgnQfyfdVlbOBCnryX-cz_9n1AWM2E3Zw87rsSNIMSO5CACyL2mqlKQrMYTi3tyTEqloA_fW6SsOnZsHElet_YhkCuBZj1wgVUnIfdGOKMj_wbKsm1ACEra61nbiKhWF50gBWhITORxzkDhND8cmH2elsGH8XP8JZMBBn11x7c1D5Vs21jVsJqqSATDk1xN6-YnapZm2mazx2b0DhddaAMLxadq95fdMpGETkWiWYheDt3j5KhoMHhyI9-kOxy2Nuk9TYGOOJcwT8reCqKhpdrBepV5s6fwVnflkevqtXJQnoKtnFHWC7FkMCubBa8B14NmdS8bSQZPI76RCMn0iJA5_jOh-J7epi4WuaQQOVWvmR52y0OERwQo8Y06jnOw3mgWRFNyli3_OW7JOTsDlJia2Uh7g4MRyeDW6RDV3yJ6Cgb8VdrZvwKOVXAyU68yDLADTX5AXYzxH_E8frfZ5VWNVkIXsp_sNM_JS5UCKLzwt1Xsz1BE5l-adJMhOmALLAEFA1xlbgn7p7NWs_B1Ax-xFzhC88taQuLvzOa2lYFX76X6rXX_T0tHFgH13XW40_ylzDj2K1t6e8zkSfQug-3b6VG9y5GrAb2vKKxsnz2e2KjPktrY53-vQAQIH7cRki_VqNLTtdvHcS9jKDWue1uy3WUYTWa4VbVvfdGQ5_RfFSLi9cLzZ1b099qhbiSQKkR_QhFh0kZsRTrmYaUHvWHIxy61EgehoOJOQc25uqFWL4-RDDCmDjNw95pedYj9smaBJKXMAlajXdxAR4rmQt902vB7P08fkVE9wHO9rv1VzVCighBi-ffUZ7Hl0Y50cQi2HtmNqQ-pBVLq5926wx-igyvMNRm9g7Ypf1LlVDTD7AXxaQhtrQ9IU8N4_GfOm8jO8W8srNKDJ9iuc4iO2n2ODEqg6Zt0mQgacUYV5azVnvomg_OF3fUFbw2V63LZAUPxnHbnQgWRMmCNv4Qb-9cbb27Fv3dL458IosWOeiA3kbEIi0_0R8zNeDdJBQ2wkHmfuuUfS0T32ohqXW7Uv1Z6UA66pZKYhUN9aN1q360oxuQmWIy1zSEHwCybVzzEdfwawpntf8sN0N4CmODSVB7VTRqK5xRbawi7HuwjVv7b6jVhABBYBkoyJcnNJqWXhrFHcMflluEJVfBKL8cZOxN6Cn6YSq4mXYZkGZ7rdP8aDAUS5qjnzYOAg1SLA==&abvar=0&os=0 HTTP/1.1
Host: vzigttqgqx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: UID=2210280140d665d51868e24867bafdcd3ce8; OACICAP=ACKF5gAAAAAAAAAB; OACIBLOCK=ACKF5gAAAABjW2HQ; ppucnt=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:17 GMT
content-type: image/gif
content-length: 43
x-route-id: stats.impression
set-cookie: OACICAP=ACKF5gAAAAAAAAABACKEfAAAAAAAAAAB; Path=/; Expires=Sun, 27 Nov 2022 06:40:17 GMT; Secure; SameSite=None
OACIBLOCK=ACKF5gAAAABjW2HQACKEfAAAAABjW2HQ; Path=/; Expires=Sun, 27 Nov 2022 06:40:17 GMT; Secure; SameSite=None
ppucnt=0; Path=/; Expires=Sat, 29 Oct 2022 06:40:17 GMT; Secure; SameSite=None
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
qa24ljic4i.com/q/tdl/95/dnt/1898044/kep.js
200 OK 0 B URL HTTP/2 qa24ljic4i.com/q/tdl/95/dnt/1898044/kep.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /q/tdl/95/dnt/1898044/kep.js HTTP/1.1
Host: qa24ljic4i.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:13 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 09:37:01 GMT
vary: Accept-Encoding
etag: W/"6343e7bd-c3e1"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
vzigttqgqx.com/bultykh/ipp24/7/bazinga/1898043
200 OK 0 B URL HTTP/2 vzigttqgqx.com/bultykh/ipp24/7/bazinga/1898043
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /bultykh/ipp24/7/bazinga/1898043 HTTP/1.1
Host: vzigttqgqx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:13 GMT
content-type: application/javascript
last-modified: Mon, 10 Oct 2022 09:37:02 GMT
vary: Accept-Encoding
etag: W/"6343e7be-34819"
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
vzigttqgqx.com/pn07uscr/f/tr/zavbn/1898045/lib.js
200 OK 0 B URL HTTP/2 vzigttqgqx.com/pn07uscr/f/tr/zavbn/1898045/lib.js
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /pn07uscr/f/tr/zavbn/1898045/lib.js HTTP/1.1
Host: vzigttqgqx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:13 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: script
set-cookie: UID=2210280140d665d51868e24867bafdcd3ce8; Path=/; Expires=Sat, 28 Oct 2023 06:40:13 GMT; HttpOnly; Secure; SameSite=None
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
vzigttqgqx.com/get/1898043?zoneid=1898043&jp=_cl4zprctvuggt6xsx6zczn&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=6583168992590494
200 OK 0 B URL HTTP/2 vzigttqgqx.com/get/1898043?zoneid=1898043&jp=_cl4zprctvuggt6xsx6zczn&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=6583168992590494
IP
Analyzer Verdict Alert quad9 Sinkholed
GET /get/1898043?zoneid=1898043&jp=_cl4zprctvuggt6xsx6zczn&nojs=0&ix=0&abvar=0&t=0&x=1280&y=939&wcks=1&wgl=0&cnvs=1&os=0&md=undefined&bb=0&lang=en-US&pf=Linux%20x86_64&cd=24&freq=0&cid=6583168992590494 HTTP/1.1
Host: vzigttqgqx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://brazz.icu/
Cookie: UID=2210280140d665d51868e24867bafdcd3ce8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 06:40:13 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
x-route-id: config
content-encoding: gzip
timing-allow-origin: *
accept-ch: sec-ch-ua,ua,sec-ch-ua-platform,ua-platform,sec-ch-ua-mobile,ua-mobile,sec-ch-ua-full-version,ua-full-version,sec-ch-ua-platform-version,ua-platform-version,sec-ch-ua-arch,ua-arch,sec-ch-ua-bitness,ua-bitness,sec-ch-ua-model,ua-model,sec-ch-lang,lang,sec-ch-save-data,save-data,sec-ch-width,width,sec-ch-viewport-width,viewport-width,sec-ch-viewport-height,viewport-height,sec-ch-dpr,dpr,sec-ch-device-memory,device-memory,sec-ch-rtt,rtt,sec-ch-downlink,downlink,sec-ch-ect,ect,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
X-Firefox-Spdy: h2
198.251.65.36
23.36.77.32
93.184.220.29
62.122.171.6
104.22.59.221