cut-y.net/PpdHcEJdDVW
301 Moved Permanently 155 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 42c394b8f0152b372537ace9acc3f7bb
1219c55c4e3ea109c473aab65deb81f09a0fe0a6
6aaad3365c30c4f8d2504e569527e588d33eeae66dd7045bcfeef7413820db2a
GET /PpdHcEJdDVW HTTP/1.1
Host: cut-y.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 05 Sep 2022 13:35:38 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://cut-y.net/PpdHcEJdDVW
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yCp6QFsnneQbz2NyDBOl7jt3qAkrIaza%2FRbnLYTtL5PY9eOETUlbAW2Idaq3QBecVxHdKyHkhslcGRibJBQHVzQW%2FOs30QydfawyzlGeXJk3OQ4v05OiJPd30ts%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 745f596b191fb50f-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 12:44:47 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CMwNSFz0fbPOk2mjwrevKlrsl1bSWa_9lhtpCp11B0M1SdN6GBfaYw==
Age: 3051
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17066
Expires: Mon, 05 Sep 2022 18:20:04 GMT
Date: Mon, 05 Sep 2022 13:35:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: N4uUsrHE_sQreumgRFN02t0gPI-eJbIy-SIc0qKizS6GvSzj5XdsYA==
age: 44421
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 13:35:39 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 05 Sep 2022 12:38:16 GMT
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 13:23:31 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UmjApKe7TIyfX_AlrkK7iSwnSMndcCsVnBZuxWp6wne-eKv-HQJ_Xw==
Age: 3443
ocsp.digicert.com/
200 OK 471 B IP
Hash b57a9dd04797bf34612c80361f1dffb3
56573166d8b9cd9b8dae19fd905e4f3293af306b
b03552109f1e7d1e482aa14614ffb1e38fb53ae4951152aab307b927674dad98
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2526
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:39 GMT
Last-Modified: Mon, 05 Sep 2022 12:53:33 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
cut-y.net/PpdHcEJdDVW
200 OK 35 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (17359)
Hash b8b91a98ad61f0474207913d796c7f8c
7c60a3e32068dfdb3f83b715c43e95bb4a81e780
dd19f1936b4c96fff7f7003a09a66129c2391bc70f3eca31ed3b0211cd910427
GET /PpdHcEJdDVW HTTP/1.1
Host: cut-y.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Mon, 05 Sep 2022 13:35:39 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: must-revalidate, no-cache, no-store, private
pragma: no-cache
expires: 0
x-frame-options: SAMEORIGIN, SAMEORIGIN
set-cookie: XSRF-TOKEN=eyJpdiI6InRoSExuQitVRlo5ZUJ3K0pqYTZRTGc9PSIsInZhbHVlIjoiUTJQaWlaUXVQdXk4bHNmWXpDaFRuNWl3WlFpZXNMMnJIUXUrZmMrNERsL3hVaDNOYWJ5S0pGZW1PdTRBS1RFZ1ZBV2VFUnlIZHVXelFFMVdsa0tsSVo0dzVYcUl1MUlhT29QNVdtR0NZNFJQRzJkRmsvaDhEbkxwdlJBOStqRzMiLCJtYWMiOiIzZmYzODc3Njg1ZGJhMmZhMDJmOGU0ZTgwZjRiNmYzMzM2MDc2YzY2MDE2NDRiNmI2ZjVhNDhhODljNjI0N2IxIiwidGFnIjoiIn0%3D; expires=Mon, 12 Sep 2022 13:35:39 GMT; Max-Age=604800; path=/; samesite=lax
cuty_session=eyJpdiI6InJWSnRRT0FUUXhidHJ1RWdZRlRjbnc9PSIsInZhbHVlIjoiTnJtY3o4VTJXWE14bGZVVDM3QUZxampSY2U4V1o3MXZGQlAvQkRJQWlRT1UzSzErMTU4ZFBnWjcwbUcrbkhadkZGVDE3dTZwZWZFV1BXNS80cHRXWnBxU0JJWDhnS3ZPcXJMODk5eVBtbHFsbldTYlVJYm5ZcnFXTlJ1VzFuSm4iLCJtYWMiOiJmNTE3MjhmYWM1YmM1YjY1OGE4NzI3MGUyNmVhYWM4YzJhMzllMWJiNGI5NzEzZWEwNDgwYjRlODE0MDhiYjYwIiwidGFnIjoiIn0%3D; expires=Mon, 12 Sep 2022 13:35:39 GMT; Max-Age=604800; path=/; httponly; samesite=lax
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xfr%2BO%2F8%2BMPcls26l5a5qMNK9S1tZvF29zQPsP3viYJhm74dyDrm0g%2FXGZ4lfgsnjrbMYrpZVupgHVALz41dSFn5AUHIKStD051hx%2FehZVQzqDXtPIn47ESI%2FnRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745f596d0b05b4eb-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 3747f4719ef2159363aa694c375cacd9
4dd44a19857906964d331b4c90ac727427331aa5
ce6e404dc72aa60fd8754af33873a7d7a7546d9fd2ec0754f15184304ad6c80c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "CE6E404DC72AA60FD8754AF33873A7D7A7546D9FD2EC0754F15184304AD6C80C"
Last-Modified: Sun, 04 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10936
Expires: Mon, 05 Sep 2022 16:37:55 GMT
Date: Mon, 05 Sep 2022 13:35:39 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a73c40e0fed317f31e35a24d5b5e2d0d
fb19e9d403e37956762ebb527260576860161872
4a38f2cc8997dada402e2cce06bbd8776cbad2075b00696d00efa59ad5388644
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash 3747f4719ef2159363aa694c375cacd9
4dd44a19857906964d331b4c90ac727427331aa5
ce6e404dc72aa60fd8754af33873a7d7a7546d9fd2ec0754f15184304ad6c80c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "CE6E404DC72AA60FD8754AF33873A7D7A7546D9FD2EC0754F15184304AD6C80C"
Last-Modified: Sun, 04 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10936
Expires: Mon, 05 Sep 2022 16:37:55 GMT
Date: Mon, 05 Sep 2022 13:35:39 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f718aed1515026a418d0d9cb8de2335e
8c382b4a4df72be8cc4d96d56fd52deb94bcc9a8
57faf12689d86dc5cf5fb51f580ac467beb4f4fc57639d306835b3bd07b8835e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "57FAF12689D86DC5CF5FB51F580AC467BEB4F4FC57639D306835B3BD07B8835E"
Last-Modified: Sat, 03 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15033
Expires: Mon, 05 Sep 2022 17:46:12 GMT
Date: Mon, 05 Sep 2022 13:35:39 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 1.1 kB IP
Hash d49d31f1c1e0e8569f2ef23e2559f8a3
42bcc4ec0858ad2288e1f92a6f83ae1b6db09791
c386dcdf0b29f035e76773314fc5795f0ffa9cddf503489c8fe6f2c65b4c337e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 633 B IP
Hash a8e11bd9a02a2f3244a05243e78efe99
f9bce2fb6f858415fc771691d253babc87000890
8e59f9d0cfa28f0c2484b4bb803cbce071c16693f1a2800b21676cb60c6474e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
200 OK 38 kB URL HTTP/2 fonts.gstatic.com/s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 37924, version 1.0\012- data
Hash e08be6d5d433944f7ad52902e4d24db5
e2600c1d60d12d397b3ee44411a021231d71e974
450f3ba4e47ee174bd9692b396f264b907d37d2528f53911760f3d0edb785f7e
GET /s/inter/v12/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cut-y.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 06:03:56 GMT
expires: Fri, 01 Sep 2023 06:03:56 GMT
cache-control: public, max-age=31536000
age: 372704
last-modified: Mon, 11 Jul 2022 20:54:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
simoolkankrej.com/tbDiri6ECfK2Via/51949
200 OK 25 B URL HTTP/1.1 simoolkankrej.com/tbDiri6ECfK2Via/51949
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
Analyzer Verdict Alert quad9 Sinkholed
GET /tbDiri6ECfK2Via/51949 HTTP/1.1
Host: simoolkankrej.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 05 Sep 2022 13:35:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://cut-y.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jUtOwzAYhPMOVUnESDkAR2gi0rRLNqy4Q%2BTYf4Jp4r9y3Ae3xyDBbh6fZoIgiKoS4TWLEV9Ei%2BejGru9pJrkoW6a%2BuXQyLEdRDfWqunqdoeNXnsnhplcgseJDFkte8mKCjz56i85Gb6ZBOlghVEF0sUTc4F8sHxbyVYxEiMWQv6mLY1894T4ZIvouPdSGy%2FDHSJeq7jcIH3X5nIvt1lQFlmA7XkWbmS79Fp5m05WKEL4igcpHE1sv5ArWk%2BOzwDPqv%2Fnfz%2FT%2BWcNmaKrlt6y%2ByD7DTb9Sx8%3D; expires=Tue, 06-Sep-2022 13:35:40 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Tue, 06-Sep-2022 13:35:40 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3958546039b436bd448017432b45c949
45aadab2339c0718b57200a1b2849073c04f08f5
903f9b9e0ccec46513fb56991790db64f79dd2548f6240c4905cf9f19bdaa783
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d192r5l88wrng7.cloudfront.net/?rwlrd=961706
200 OK 116 kB URL HTTP/2 d192r5l88wrng7.cloudfront.net/?rwlrd=961706
IP
File type Unicode text, UTF-8 text, with very long lines (15945)
Size 116 kB (115632 bytes)
Hash bb3e11f4d08ad98e9091c717bbd2f209
17e6cf9fb546bf5334a5f11e1ede24298f09713f
6927f43e118122282329595d7e8f1b57c087cc8d6514623d75234f9e26060b3c
GET /?rwlrd=961706 HTTP/1.1
Host: d192r5l88wrng7.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 115632
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MAIzYBWaV1_OYPTxqiK4vPRFv6dmBZ1JR8IVmFC4F3BJP4ZaScUDcA==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash def56bca1856ea71ce0e33a85c247037
669ace2b5417e6da561853ff276df2b98b66c2c0
6156903289398cb1817d1855c797f1383b62c07ea1a1f4be9eac24d5d39984f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6156903289398CB1817D1855C797F1383B62C07EA1A1F4BE9EAC24D5D39984F3"
Last-Modified: Mon, 05 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6056
Expires: Mon, 05 Sep 2022 15:16:36 GMT
Date: Mon, 05 Sep 2022 13:35:40 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: px0+oSk8dJQFEbx5XYnzOQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9+U8xeIo7PMsL9V7iQvjH6HhbG0=
ocsp.pki.goog/gts1c3
200 OK 89 kB IP
Hash 9d2c42039f9f277482af1cb606f24640
c148f9aeff3c2ee6b130e3d96ed549a304a2e94a
d607343f674815ec942aec79c511aae193dc69b0a7f853b52c44cf4100d4a65c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tefections.xyz/VnVXeEx5SjQLcQQiESItOycvLn4iLwEWNA4UEQAYMCMVCRk6IHEMJTJIbk59YUVhXjw/EWpJaiUBNgw5JUhmXiU4EzhFaiBIZlZ/YltlQGJnUyJFfXABJxkra0RxCDgiGWpJemBHZEB4b0ZiT3lk
204 No Content 0 B URL HTTP/2 tefections.xyz/VnVXeEx5SjQLcQQiESItOycvLn4iLwEWNA4UEQAYMCMVCRk6IHEMJTJIbk59YUVhXjw/EWpJaiUBNgw5JUhmXiU4EzhFaiBIZlZ/YltlQGJnUyJFfXABJxkra0RxCDgiGWpJemBHZEB4b0ZiT3lk
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /VnVXeEx5SjQLcQQiESItOycvLn4iLwEWNA4UEQAYMCMVCRk6IHEMJTJIbk59YUVhXjw/EWpJaiUBNgw5JUhmXiU4EzhFaiBIZlZ/YltlQGJnUyJFfXABJxkra0RxCDgiGWpJemBHZEB4b0ZiT3lk HTTP/1.1
Host: tefections.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AiTt20c5C0zz4DCr4G%2FEL8efJhGysbxpelYulI6o%2FjJd%2Fnq4hWnNM2dUkM9ECN%2BCFAOElVwvtXVX8Je%2B%2FkxwvkGBLIZrDinKWeeWQinASOHsJRdlkOCNGRZ82y0LOqXSfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745f5974dcceb506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tefections.xyz/cnVJdW9dSioGUiYxCEY9HCNsRykwAh8MPkESADcnIDstNDY6EQw4SQYcLUhWREV8RltUBSARUkNTOgEOBgA6SF5UHCcTAE9TP0heXEZ9W11KW3hTGk9EbwEfExJ0REkCAT0ZUkNDf0dcSkFwRlpFQno
204 No Content 0 B URL HTTP/2 tefections.xyz/cnVJdW9dSioGUiYxCEY9HCNsRykwAh8MPkESADcnIDstNDY6EQw4SQYcLUhWREV8RltUBSARUkNTOgEOBgA6SF5UHCcTAE9TP0heXEZ9W11KW3hTGk9EbwEfExJ0REkCAT0ZUkNDf0dcSkFwRlpFQno
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cnVJdW9dSioGUiYxCEY9HCNsRykwAh8MPkESADcnIDstNDY6EQw4SQYcLUhWREV8RltUBSARUkNTOgEOBgA6SF5UHCcTAE9TP0heXEZ9W11KW3hTGk9EbwEfExJ0REkCAT0ZUkNDf0dcSkFwRlpFQno HTTP/1.1
Host: tefections.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zP34G4cXs%2BXJ7zb7051M%2B8G0QVzah1Rk7KiCbxkuvhwP0kno9SSQTiG3il53kQnoKo5kUUKEUKcLByBU6j0%2FQrRKtwqKeAeguS%2BY9DWXzAfxlT4yFYE8p%2BqTKwZsvGL90g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745f5974ecd7b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js
200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 528455474b03fa8ad71a558347e43fe1
597b34487415fa60028f80afd7ab2cf27383ace5
af9ee6f9ce7bd44e5dbbfcab2a528e062f9dec4640a98a396170d46c494dafb5
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 05 Sep 2022 13:35:40 GMT
date: Mon, 05 Sep 2022 13:35:40 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tefections.xyz/NUxzTkgacxA9dWMIJTsRYjgaDA5BGiQJGXcbHyoRVw0xFB1ZK1U6IVFxSnh5AnxEaDhcKE5/cBM/By88QD9Of25cIhUhdRM6Tn9mBWJCYHsTOU5/bkE8Eil1BGoDOjxZcUJ4fgd/S3pxBnlEdns
204 No Content 3.9 kB URL HTTP/2 tefections.xyz/NUxzTkgacxA9dWMIJTsRYjgaDA5BGiQJGXcbHyoRVw0xFB1ZK1U6IVFxSnh5AnxEaDhcKE5/cBM/By88QD9Of25cIhUhdRM6Tn9mBWJCYHsTOU5/bkE8Eil1BGoDOjxZcUJ4fgd/S3pxBnlEdns
IP
File type gzip compressed data, from Unix\012- data
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /NUxzTkgacxA9dWMIJTsRYjgaDA5BGiQJGXcbHyoRVw0xFB1ZK1U6IVFxSnh5AnxEaDhcKE5/cBM/By88QD9Of25cIhUhdRM6Tn9mBWJCYHsTOU5/bkE8Eil1BGoDOjxZcUJ4fgd/S3pxBnlEdns HTTP/1.1
Host: tefections.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LoHN6sd2gPQLDrgFuty3NbKraI914oSIyhLwNdEZj9CgVLvITAKnmtYqGHWVApf6sElYPPO52AZgzPrJ3wcESbXg3qPkABnJzJeBQ2R%2F0AeGNx8Xdh%2FLmzEHO0K4mq2cuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745f5974dcd1b506-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-GGDCMPL4QP
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-GGDCMPL4QP
IP
File type ASCII text, with very long lines (17899)
Hash 9b50d34d10d20e743bdc146eec9bbb0b
644a443fc446f5bca7eef4e2bbc59fcba0534b64
12e89cb0ee7042419cea0569e83d1b96cf9ea29594c9a764956e54fea4d18b84
GET /gtag/js?id=G-GGDCMPL4QP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 05 Sep 2022 13:35:40 GMT
expires: Mon, 05 Sep 2022 13:35:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74461
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 194d72d26ddeaa8a8a266839eb707300
86427a0db92a3b4bd2690ad361109559c7212992
ab77f42ccfa0c649217777139f0d14a6742039596ee37a045c5fe96e7ca32338
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 420a6ffc72857f7132a9065de7c844a9
dee617384561d0790b72f096336b73ade7950579
c98bdc53f1f22291c4b954e9bd5f6432cfe3d5b24e3680b4ada3fc3a696e79d7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ktobedirectu.autos/VllneGk3OwQVVjdkBV4cJDVaXVsQfFU+DWdgVQpcOmFfDxs4PlBWCjo2EhwPJDYJDEc4PBNdWxA9KTAZFDghKjEQCl83CGYYMzI/AC0mEx1kDiA1OhMdLjAmPQsvNVghYSU6EWcSHxQKG2oDNyATbQIeLz4gMDoaIB1VEzoeIF80CAcPBDEoIWskLVw4ETMtIxAgUys5AD4wMSxnNAQTUCAOLz0uBTQMKTMHDwEbACYhJRMGIhgzCCsXNDUZMxMhJBwTMjAmPlAvEgk9LgUzKh0KBzpQHS9jbyU+Jz0OCio9HiAuPCYuHy46WCYyJS0ZLg4wKS8Oako2MBs1VzEjF21QLC9vIysVWRUPLz4mHwgLNE88KggWGWsrUxBZMG0kNQEfbw
200 OK 1.6 kB URL HTTP/2 ktobedirectu.autos/VllneGk3OwQVVjdkBV4cJDVaXVsQfFU+DWdgVQpcOmFfDxs4PlBWCjo2EhwPJDYJDEc4PBNdWxA9KTAZFDghKjEQCl83CGYYMzI/AC0mEx1kDiA1OhMdLjAmPQsvNVghYSU6EWcSHxQKG2oDNyATbQIeLz4gMDoaIB1VEzoeIF80CAcPBDEoIWskLVw4ETMtIxAgUys5AD4wMSxnNAQTUCAOLz0uBTQMKTMHDwEbACYhJRMGIhgzCCsXNDUZMxMhJBwTMjAmPlAvEgk9LgUzKh0KBzpQHS9jbyU+Jz0OCio9HiAuPCYuHy46WCYyJS0ZLg4wKS8Oako2MBs1VzEjF21QLC9vIysVWRUPLz4mHwgLNE88KggWGWsrUxBZMG0kNQEfbw
IP
Hash b048206ae06cb27f932e018d4f7eaec6
32619863a64164d6aa2132e14fc266bc987b9dea
cf5c32c747fe0ef0d2c4a17ada91783de9397836efef42fff8e5d1085acd37cf
GET /VllneGk3OwQVVjdkBV4cJDVaXVsQfFU+DWdgVQpcOmFfDxs4PlBWCjo2EhwPJDYJDEc4PBNdWxA9KTAZFDghKjEQCl83CGYYMzI/AC0mEx1kDiA1OhMdLjAmPQsvNVghYSU6EWcSHxQKG2oDNyATbQIeLz4gMDoaIB1VEzoeIF80CAcPBDEoIWskLVw4ETMtIxAgUys5AD4wMSxnNAQTUCAOLz0uBTQMKTMHDwEbACYhJRMGIhgzCCsXNDUZMxMhJBwTMjAmPlAvEgk9LgUzKh0KBzpQHS9jbyU+Jz0OCio9HiAuPCYuHy46WCYyJS0ZLg4wKS8Oako2MBs1VzEjF21QLC9vIysVWRUPLz4mHwgLNE88KggWGWsrUxBZMG0kNQEfbw HTTP/1.1
Host: ktobedirectu.autos
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1154
date: Mon, 05 Sep 2022 13:35:40 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tX-EAtimwllEpOI7OwnN2ETIe4zFAFzy2OFqLWF5h57WVAh-wL4adw==
X-Firefox-Spdy: h2
ktobedirectu.autos/NUdhdVZUJQIYaVR6A1MjRytcUGRzYlMzMgR+UwdjWX9ZAiRbIFZbNVkoFBEwRygPAXhbIhVQZHMkLxkcYSI2PwBlE1ETDmAOVjtmZyUgMhxYFA0sB3oEICIScB0XPwIBcDAMOWcJCCM3UQQCMRRSMwgRBGADNjEAQB8WEQ94EFQ8BHMkUzgDZxAkNg9fAQYeGngUIBAQBTBXPj4NAjUbB1gAJ0w0ZRQKJBJZKBsRPUYsIEYuXx8nNBFQLhU8A00JCTAATRYjH2IDARkRGVF1Jz8RUnIKMRMMECRHE2cfJzQRfAQ3FgNtIxMvAFEUKUYyXRQwIwJ4E0wSAWcwMCAPYCs1Nzt/LjIjG2EeJjgwdncwRhhnHgAwZHQRMDMHbB4PIBttMAJTPEYoDwVrQwA4AC53CCYZ
200 OK 1.2 kB URL HTTP/2 ktobedirectu.autos/NUdhdVZUJQIYaVR6A1MjRytcUGRzYlMzMgR+UwdjWX9ZAiRbIFZbNVkoFBEwRygPAXhbIhVQZHMkLxkcYSI2PwBlE1ETDmAOVjtmZyUgMhxYFA0sB3oEICIScB0XPwIBcDAMOWcJCCM3UQQCMRRSMwgRBGADNjEAQB8WEQ94EFQ8BHMkUzgDZxAkNg9fAQYeGngUIBAQBTBXPj4NAjUbB1gAJ0w0ZRQKJBJZKBsRPUYsIEYuXx8nNBFQLhU8A00JCTAATRYjH2IDARkRGVF1Jz8RUnIKMRMMECRHE2cfJzQRfAQ3FgNtIxMvAFEUKUYyXRQwIwJ4E0wSAWcwMCAPYCs1Nzt/LjIjG2EeJjgwdncwRhhnHgAwZHQRMDMHbB4PIBttMAJTPEYoDwVrQwA4AC53CCYZ
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3011), with no line terminators
Hash 66c311f08ec6561064999a3aaaca153a
09e0e26ef95e71fbc84c07c29a0641934ad2477a
22403729d83a9814041b2fb0881b1a988d308adc9122218d1b7bd0d54034cfab
GET /NUdhdVZUJQIYaVR6A1MjRytcUGRzYlMzMgR+UwdjWX9ZAiRbIFZbNVkoFBEwRygPAXhbIhVQZHMkLxkcYSI2PwBlE1ETDmAOVjtmZyUgMhxYFA0sB3oEICIScB0XPwIBcDAMOWcJCCM3UQQCMRRSMwgRBGADNjEAQB8WEQ94EFQ8BHMkUzgDZxAkNg9fAQYeGngUIBAQBTBXPj4NAjUbB1gAJ0w0ZRQKJBJZKBsRPUYsIEYuXx8nNBFQLhU8A00JCTAATRYjH2IDARkRGVF1Jz8RUnIKMRMMECRHE2cfJzQRfAQ3FgNtIxMvAFEUKUYyXRQwIwJ4E0wSAWcwMCAPYCs1Nzt/LjIjG2EeJjgwdncwRhhnHgAwZHQRMDMHbB4PIBttMAJTPEYoDwVrQwA4AC53CCYZ HTTP/1.1
Host: ktobedirectu.autos
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1168
date: Mon, 05 Sep 2022 13:35:40 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1dREyaq-FLIrI06-KnvNK46id-yg1VQhSDcCOpC7Mwe-L45esJcJ7Q==
X-Firefox-Spdy: h2
ktobedirectu.autos/QjN3S1MjURQmbCMOFW0mMF9KbmEEFkUNN3MKRTlmLgtPPCEsVEBlMC5cAi81MFwZP30sVgNuYQRmFCcVMFIiDgESVCIbNSVqQw9iEAclDBEhZC8vBg1LEAwfNXkEBjo1Zz0KJxFyLw4aCnUAfBUQYhEfAXIEMSYrIGcOewcSRA8eCTpQUnkVAXUlPAUGcicIYDp0EzNrGH8fJyABcRgmETtAMw4QIWY8HmMhejJzawBxOiQbKAM8HxsPAy0OBRhpMgk7E0sxPAJxYS4AYRByLhowA38AKCMWXwMzEC9fEwU9JnQTDTQwaTIJOwVhTiACEHEkE2F7cBIOfndRFBkGcnA2AiYUATo/BHF1MxIFNmoUHh1yZCEgPQVKOgQXOwc8LxUpRRIOAWcBMRxjegMjeRJkWQQkPTIOLg4BFGlOI2M4fkAZByR9
200 OK 1.2 kB URL HTTP/2 ktobedirectu.autos/QjN3S1MjURQmbCMOFW0mMF9KbmEEFkUNN3MKRTlmLgtPPCEsVEBlMC5cAi81MFwZP30sVgNuYQRmFCcVMFIiDgESVCIbNSVqQw9iEAclDBEhZC8vBg1LEAwfNXkEBjo1Zz0KJxFyLw4aCnUAfBUQYhEfAXIEMSYrIGcOewcSRA8eCTpQUnkVAXUlPAUGcicIYDp0EzNrGH8fJyABcRgmETtAMw4QIWY8HmMhejJzawBxOiQbKAM8HxsPAy0OBRhpMgk7E0sxPAJxYS4AYRByLhowA38AKCMWXwMzEC9fEwU9JnQTDTQwaTIJOwVhTiACEHEkE2F7cBIOfndRFBkGcnA2AiYUATo/BHF1MxIFNmoUHh1yZCEgPQVKOgQXOwc8LxUpRRIOAWcBMRxjegMjeRJkWQQkPTIOLg4BFGlOI2M4fkAZByR9
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3025), with no line terminators
Hash 5a87b890e38c64336d5afb71c261f318
1c547b5b6d5d1d1d24c057132ac56ea6b345b1d5
f7a27d8ed6c8ca8dbc5bffbc1cfa2425d88ab819e11f4e3e0af6ecd7330cce36
GET /QjN3S1MjURQmbCMOFW0mMF9KbmEEFkUNN3MKRTlmLgtPPCEsVEBlMC5cAi81MFwZP30sVgNuYQRmFCcVMFIiDgESVCIbNSVqQw9iEAclDBEhZC8vBg1LEAwfNXkEBjo1Zz0KJxFyLw4aCnUAfBUQYhEfAXIEMSYrIGcOewcSRA8eCTpQUnkVAXUlPAUGcicIYDp0EzNrGH8fJyABcRgmETtAMw4QIWY8HmMhejJzawBxOiQbKAM8HxsPAy0OBRhpMgk7E0sxPAJxYS4AYRByLhowA38AKCMWXwMzEC9fEwU9JnQTDTQwaTIJOwVhTiACEHEkE2F7cBIOfndRFBkGcnA2AiYUATo/BHF1MxIFNmoUHh1yZCEgPQVKOgQXOwc8LxUpRRIOAWcBMRxjegMjeRJkWQQkPTIOLg4BFGlOI2M4fkAZByR9 HTTP/1.1
Host: ktobedirectu.autos
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1179
date: Mon, 05 Sep 2022 13:35:40 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kztNtwmDxonp4Onz5FU9hbu8ZeewetIzHDfnlxuPVGCcatXoj7U6Vw==
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 53ad3b9b4818bf4f71c681ee167ca667
d0f621ac745f012fd203d1bae185f4a9dcda75cf
3eece372bc9d570cdd0db182ee8789c7d05783569069fbb12e6587923796c04a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=97420
Date: Mon, 05 Sep 2022 13:35:40 GMT
Etag: "6314d43a-1d7"
Expires: Tue, 06 Sep 2022 16:39:20 GMT
Last-Modified: Sun, 04 Sep 2022 16:37:14 GMT
Server: ECS (dcb/7FA6)
X-Cache: Miss from cloudfront
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sCtr8kOZkfqhjdLjbCq268qs8wg20kLvMt22pn-0lig2lU29QkuduA==
Age: 126
accedenonre.xyz/V21Ya0IsTyscHSIfNEl4dQUsHzIkV3dEISIZdRJsOQgsRDEgQzIYYHtPKwYkdVdpR2AkAC5JeHVZdlhge08sCiUIBDxJeHVUblpxYVt6R2AkGDo0KzNfelFgYl9hXyMyDGtGd2dUOUZ2NlhoRiNlVGpGJzNfbApxMlVtDnJhTyU
502 Bad Gateway 0 B URL HTTP/2 accedenonre.xyz/V21Ya0IsTyscHSIfNEl4dQUsHzIkV3dEISIZdRJsOQgsRDEgQzIYYHtPKwYkdVdpR2AkAC5JeHVZdlhge08sCiUIBDxJeHVUblpxYVt6R2AkGDo0KzNfelFgYl9hXyMyDGtGd2dUOUZ2NlhoRiNlVGpGJzNfbApxMlVtDnJhTyU
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /V21Ya0IsTyscHSIfNEl4dQUsHzIkV3dEISIZdRJsOQgsRDEgQzIYYHtPKwYkdVdpR2AkAC5JeHVZdlhge08sCiUIBDxJeHVUblpxYVt6R2AkGDo0KzNfelFgYl9hXyMyDGtGd2dUOUZ2NlhoRiNlVGpGJzNfbApxMlVtDnJhTyU HTTP/1.1
Host: accedenonre.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 502 Bad Gateway
set-cookie: b13e577d049d4c2c603aa5a7dc674f11=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2
d192r5l88wrng7.cloudfront.net/dNHpBaFRXFS8Oa0ATJVVtAkt2WGMSEDIHOkRHM1w8BBx1KxlcM3dOIE4efFhyWBsvD2kSHy8LaQVcIAw2CU5nHTUJFy4SPVgWIE1mck9vWHEGSmkQZQVfcipxBkotATpBAmRaZExCdzdiAF9yKnEGSjMecQc7eF56BFNkWmRTHyIDOxFIB1pkBUpxWWQFX3-NYMl0IJA47TF9zLm0CVHFOIQlL
200 OK 184 B URL HTTP/2 d192r5l88wrng7.cloudfront.net/dNHpBaFRXFS8Oa0ATJVVtAkt2WGMSEDIHOkRHM1w8BBx1KxlcM3dOIE4efFhyWBsvD2kSHy8LaQVcIAw2CU5nHTUJFy4SPVgWIE1mck9vWHEGSmkQZQVfcipxBkotATpBAmRaZExCdzdiAF9yKnEGSjMecQc7eF56BFNkWmRTHyIDOxFIB1pkBUpxWWQFX3-NYMl0IJA47TF9zLm0CVHFOIQlL
IP
File type ASCII text, with no line terminators
Hash a3619de69b91efe313310db6ed6ae933
ceee9aad1f7f42badef7d7675a7c5a49344922df
2d1b36e385ef2e9dce37045a705c0f62101a9a0a16b3efece94182c10305fedd
GET /dNHpBaFRXFS8Oa0ATJVVtAkt2WGMSEDIHOkRHM1w8BBx1KxlcM3dOIE4efFhyWBsvD2kSHy8LaQVcIAw2CU5nHTUJFy4SPVgWIE1mck9vWHEGSmkQZQVfcipxBkotATpBAmRaZExCdzdiAF9yKnEGSjMecQc7eF56BFNkWmRTHyIDOxFIB1pkBUpxWWQFX3-NYMl0IJA47TF9zLm0CVHFOIQlL HTTP/1.1
Host: d192r5l88wrng7.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ktobedirectu.autos/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 184
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: WF-ZLeNnN-TSGGHkl48LHTHmtVwINLuyG9ETe2I3_i9d39pDCJaqVA==
X-Firefox-Spdy: h2
d192r5l88wrng7.cloudfront.net/cNlJTeWJVPT0fXUI7N0RbAGJmSlYQOCAWDEZvJT47QyoRNiVadCcDBgtidRUDWDVuXwdYMW5IRFc2MURWECYjFgkLMSAeF0w6Kh8ETnQmGF9bPSkQDlozdkskA3xjXFAGeitIUxNhEVxQBj46FxdOd2FJGg5kDE9WE2ERXFAGICVcUXdrZVdSH3dhSQVTMT-gWRwQUYUlTBmJiSVMTYGMfC0Q3NRYaE2AVQFQYYnUMXwc
200 OK 493 B URL HTTP/2 d192r5l88wrng7.cloudfront.net/cNlJTeWJVPT0fXUI7N0RbAGJmSlYQOCAWDEZvJT47QyoRNiVadCcDBgtidRUDWDVuXwdYMW5IRFc2MURWECYjFgkLMSAeF0w6Kh8ETnQmGF9bPSkQDlozdkskA3xjXFAGeitIUxNhEVxQBj46FxdOd2FJGg5kDE9WE2ERXFAGICVcUXdrZVdSH3dhSQVTMT-gWRwQUYUlTBmJiSVMTYGMfC0Q3NRYaE2AVQFQYYnUMXwc
IP
File type ASCII text, with very long lines (697), with no line terminators
Hash a0cfe7a92cd70bdedd777cecea347a82
b2895a82b6e553c71f85d122e46f0ad34da86524
3761e60e297319526936217932f783d452a48a51a914c31f861fe94b659304c7
GET /cNlJTeWJVPT0fXUI7N0RbAGJmSlYQOCAWDEZvJT47QyoRNiVadCcDBgtidRUDWDVuXwdYMW5IRFc2MURWECYjFgkLMSAeF0w6Kh8ETnQmGF9bPSkQDlozdkskA3xjXFAGeitIUxNhEVxQBj46FxdOd2FJGg5kDE9WE2ERXFAGICVcUXdrZVdSH3dhSQVTMT-gWRwQUYUlTBmJiSVMTYGMfC0Q3NRYaE2AVQFQYYnUMXwc HTTP/1.1
Host: d192r5l88wrng7.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ktobedirectu.autos/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 493
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LOxkCL5FWTX7ovKlOYK89Sm57TDToUi3IRIM-bw8OXf2dsfR5D-3oA==
X-Firefox-Spdy: h2
d192r5l88wrng7.cloudfront.net/UclFraUERPgUPfgY4D1R4RGBcWXdUOxgGLwJsMiwTJAtSAXEIHFw7FRQfTR07FmxbTy0TPwxUZxc/CFRwVDAPC3xGdx8ZLhlsCBomBysDECcUKU0cIE88BBMoHj0KTHM0ZEVZZEBhQxFwQ3RYK2RAYQcALwcpTltxCmldNndGdFgrZEBhGR9kQRBSX29CeE-5bcRU0CAIuV2MtW3FDYVtYcUN0WVknGyMODy4KdFkveER/W080T2A
200 OK 564 B URL HTTP/2 d192r5l88wrng7.cloudfront.net/UclFraUERPgUPfgY4D1R4RGBcWXdUOxgGLwJsMiwTJAtSAXEIHFw7FRQfTR07FmxbTy0TPwxUZxc/CFRwVDAPC3xGdx8ZLhlsCBomBysDECcUKU0cIE88BBMoHj0KTHM0ZEVZZEBhQxFwQ3RYK2RAYQcALwcpTltxCmldNndGdFgrZEBhGR9kQRBSX29CeE-5bcRU0CAIuV2MtW3FDYVtYcUN0WVknGyMODy4KdFkveER/W080T2A
IP
File type ASCII text, with very long lines (803), with no line terminators
Hash fe9390a0e7525b7dfb0cee7b8f7eb78a
011db94c3d289db4d492d2419fcaa284eec6f718
c5ed3c0aac8904309f6f966f1e84eaa61eaf2bcb5fc5a4d70009940a59353726
GET /UclFraUERPgUPfgY4D1R4RGBcWXdUOxgGLwJsMiwTJAtSAXEIHFw7FRQfTR07FmxbTy0TPwxUZxc/CFRwVDAPC3xGdx8ZLhlsCBomBysDECcUKU0cIE88BBMoHj0KTHM0ZEVZZEBhQxFwQ3RYK2RAYQcALwcpTltxCmldNndGdFgrZEBhGR9kQRBSX29CeE-5bcRU0CAIuV2MtW3FDYVtYcUN0WVknGyMODy4KdFkveER/W080T2A HTTP/1.1
Host: d192r5l88wrng7.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ktobedirectu.autos/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 564
date: Mon, 05 Sep 2022 13:35:40 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VpvlI-Fk1rChd5NN35xowwfZyH7_ySwp2JcJY3T9KpRl86JqsCVnSw==
X-Firefox-Spdy: h2
accedenonre.xyz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: accedenonre.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 382
Origin: https://cut-y.net
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
IP
Hash a4d51e909157b2b86c7c9d29de77f30e
fda5f6fe7dd1a17660404b2273983a6ab81399ff
11902c2a28030c7c74bd45990d9c59d4a2356fea0a81f204bf7528357d049717
GET /css2?family=Inter:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 05 Sep 2022 13:35:39 GMT
date: Mon, 05 Sep 2022 13:35:39 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e62f2399f9d20bf0924a04214ef012c6
08d5022f493f6b4ce9ae700e21c1339fffd830a1
1005dbc0f5b119a04df922a23953aea57d5e2713092704d57fc910b7a5d88e26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e62f2399f9d20bf0924a04214ef012c6
08d5022f493f6b4ce9ae700e21c1339fffd830a1
1005dbc0f5b119a04df922a23953aea57d5e2713092704d57fc910b7a5d88e26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash a06cb209fdc15ecf8329895a6c0fc705
cb50f7e79c5db17b1b6bdaa5078d6a2bcb16b978
456a815459be52bda7348e51591a765c94a46e7ed36b70a69142c4163b3f62dc
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "456A815459BE52BDA7348E51591A765C94A46E7ED36B70A69142C4163B3F62DC"
Last-Modified: Sun, 04 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13814
Expires: Mon, 05 Sep 2022 17:25:54 GMT
Date: Mon, 05 Sep 2022 13:35:40 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash a06cb209fdc15ecf8329895a6c0fc705
cb50f7e79c5db17b1b6bdaa5078d6a2bcb16b978
456a815459be52bda7348e51591a765c94a46e7ed36b70a69142c4163b3f62dc
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "456A815459BE52BDA7348E51591A765C94A46E7ED36B70A69142C4163B3F62DC"
Last-Modified: Sun, 04 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13814
Expires: Mon, 05 Sep 2022 17:25:54 GMT
Date: Mon, 05 Sep 2022 13:35:40 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash a06cb209fdc15ecf8329895a6c0fc705
cb50f7e79c5db17b1b6bdaa5078d6a2bcb16b978
456a815459be52bda7348e51591a765c94a46e7ed36b70a69142c4163b3f62dc
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "456A815459BE52BDA7348E51591A765C94A46E7ED36B70A69142C4163B3F62DC"
Last-Modified: Sun, 04 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13814
Expires: Mon, 05 Sep 2022 17:25:54 GMT
Date: Mon, 05 Sep 2022 13:35:40 GMT
Connection: keep-alive
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 398 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (381)
Hash 43eefc80115448a5d8f0f45f1db3bf3a
72138811bd128fdb3e3bbf132cbfd5cc98c21fa7
c2c735cf12032203b048602c35ae9fbe163c029f3a8db640c0c8c1f3524d00a0
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Sep 2022 13:35:40 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1693825670%3A1662384940897868&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmWp6X889qnXQGlwWTbm5QTMEqswXT1lgok5DWDtsI6l0PSIYVQUzwcVr5uDo5TzDIpZb_FZhA
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-wAm1HgvaNRiuWjaiOrPQIw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 398
server: GSE
set-cookie: __Host-GAPS=1:dxRqmhQ7RI9a6pszHxYsioemppFHUw:MPlL_0xO3CvUzuwS;Path=/;Expires=Wed, 04-Sep-2024 13:35:40 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ktobedirectu.autos/utx?cb=fOrUomArnR3n&top=cut-y.net&tid=961706
204 No Content 0 B URL HTTP/2 ktobedirectu.autos/utx?cb=fOrUomArnR3n&top=cut-y.net&tid=961706
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=fOrUomArnR3n&top=cut-y.net&tid=961706 HTTP/1.1
Host: ktobedirectu.autos
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cut-y.net
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 13:35:40 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://cut-y.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Mon, 05 Sep 2022 13:36:40 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: dDm-v6LUgBpiETNB7iviiotPx_tQBaZ-kAAsIvS5P9P5sK6OfvnCsg==
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash a06cb209fdc15ecf8329895a6c0fc705
cb50f7e79c5db17b1b6bdaa5078d6a2bcb16b978
456a815459be52bda7348e51591a765c94a46e7ed36b70a69142c4163b3f62dc
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "456A815459BE52BDA7348E51591A765C94A46E7ED36B70A69142C4163B3F62DC"
Last-Modified: Sun, 04 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13814
Expires: Mon, 05 Sep 2022 17:25:54 GMT
Date: Mon, 05 Sep 2022 13:35:40 GMT
Connection: keep-alive
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 399 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (383)
Hash 003ae616bc0f0125eba91028be6c2dd0
26cde5a215762daff52e617a9897877f298cecdc
1c1b8d165f8b85db8dca16b0f5c870681b8a8dbb688b510bb18a036a096b5eb4
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Sep 2022 13:35:40 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-99807063%3A1662384940901143&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmV4-uU2yKizCDKWTHdEBArO8_ZFoy5Dro2eb12xNub7y7xIDb8uQNLB1RqknqWJEoJ2sbNhDA
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-KNLjisjJBBK3s7rVEYFgsw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 399
server: GSE
set-cookie: __Host-GAPS=1:b08WN8fa7LpDGOTy0eoHLBylN2KgIA:VficlnC9t00ZMe8Q;Path=/;Expires=Wed, 04-Sep-2024 13:35:40 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ktobedirectu.autos/utx?cb=ab1j7RVL2AMn&top=cut-y.net&tid=960534
204 No Content 0 B URL HTTP/2 ktobedirectu.autos/utx?cb=ab1j7RVL2AMn&top=cut-y.net&tid=960534
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=ab1j7RVL2AMn&top=cut-y.net&tid=960534 HTTP/1.1
Host: ktobedirectu.autos
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cut-y.net
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 05 Sep 2022 13:35:40 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://cut-y.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Mon, 05 Sep 2022 13:36:40 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Cs7AFODz3pTR25wVJe68tqmzyUEnMa5NWb73XI0ebFwUh3FQiXhajg==
X-Firefox-Spdy: h2
accedenonre.xyz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: accedenonre.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://cut-y.net
Content-Length: 357
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 3d734db6d950acb609cd0ccfe98fd9ba
0201364c8b9d6e1963b6bf4abb63fef9b3e0886d
bbced6e776c18b28b6edbbb94659a19bb383fb65caf293249d58988c61769693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1876
Cache-Control: max-age=127929
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:40 GMT
Etag: "63154491-1d7"
Expires: Wed, 07 Sep 2022 01:07:49 GMT
Last-Modified: Mon, 05 Sep 2022 00:36:33 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
pogothere.xyz/asd100.bin
200 OK 103 kB IP
Size 103 kB (102872 bytes)
Hash f6577b6176825bd957f99e1173bd8715
f626bfaadde36addc4cbdbfaaf73ddb94a33ccbd
7e65180dd417a26c8b84fc76190cf8082fa4e4b185bf7b2ff263ba193e25f111
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Origin: https://cut-y.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Sep 2022 13:35:40 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://cut-y.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4272
last-modified: Mon, 05 Sep 2022 12:24:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZDII3lKwPeJHl%2BuNBQjJsi7K3oSXtO2ag5kZjYEYbPcn94YojxxBduqbV12Lpxls88UImKlrl31k57sxsj90NIepzGAzaWS%2F%2FmpinXDJM%2F4Ap8alZci%2BfcyvVER2tUd3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745f59789d5fb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accedenonre.xyz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: accedenonre.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Content-Type: text/plain;charset=UTF-8
Origin: https://cut-y.net
Content-Length: 348
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
200 OK 0 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /pagead/js/adsbygoogle.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding, Origin
date: Mon, 05 Sep 2022 13:35:41 GMT
expires: Mon, 05 Sep 2022 13:35:41 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 7646139712741070203
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 1931a32d83e4feb5268887bcb07fcc1e
6fb75c21ced29544dd6d7c3b0ef79adf65718a39
d794fae0b82097a2e97af2f21b6c243832081f88036a2a56bbeeabb08790d88d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 13:35:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16665
Expires: Mon, 05 Sep 2022 18:13:26 GMT
Date: Mon, 05 Sep 2022 13:35:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16665
Expires: Mon, 05 Sep 2022 18:13:26 GMT
Date: Mon, 05 Sep 2022 13:35:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bc70b1691dd339e8120b92ba393ffb69
99118be3645b3182ccdc5f9da149a97c220a3929
da94f53f998808b2b187d6c265722e95e4cdce9f0a4b23ff0bf6c96d2cdf2bd8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA94F53F998808B2B187D6C265722E95E4CDCE9F0A4B23FF0BF6C96D2CDF2BD8"
Last-Modified: Mon, 05 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16665
Expires: Mon, 05 Sep 2022 18:13:26 GMT
Date: Mon, 05 Sep 2022 13:35:41 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f567821-8e06-4951-99ce-e4f161bb68b8.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f567821-8e06-4951-99ce-e4f161bb68b8.jpeg
IP
Hash c4f19c0976fa80fc9cd30653563e9174
4b6cfaa717fb96db829d8fceb698dc852cd43b64
6bfae8cbc969f85872ba6788ba1765a1a7948317cb1dc3ac55eb5c751083cab0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f567821-8e06-4951-99ce-e4f161bb68b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11529
x-amzn-requestid: 5a708c64-a562-4082-bdb0-54a7e7ca4c96
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqfLDEa3IAMFg7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630dabe0-50c8bda630d48d5866416a55;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 06:19:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wLCyRpkbM9GuCD0b68O8ttgaDNma8Dc18GetEWkNqo6bQJkuE44gKw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Sep 2022 03:17:24 GMT
age: 37097
etag: "b33bef0200ea8f8a64df0fdd28e648f36ed177d1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cuty.io/images/shared/logo.svg
200 OK 39 kB URL HTTP/2 cuty.io/images/shared/logo.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1008)
Hash e7cedb77f4141e7d58be83080000164c
41a1e6afd56a65425cb2718cc17581dcf991c188
e2a8f2cf91a44e95a02b2a54785f3d70d46740e0c2595d106596a61b8f00caae
GET /images/shared/logo.svg HTTP/1.1
Host: cuty.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 05 Sep 2022 13:35:39 GMT
content-type: image/svg+xml
last-modified: Thu, 14 Jul 2022 10:06:16 GMT
vary: Accept-Encoding
etag: W/"62cfea98-175a"
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
cache-control: max-age=14400
cf-cache-status: HIT
age: 2197
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cJ8PcAvKFUXRaSVcdHvOym76E8N5FPMmf3Xo5wjHnpZoK%2BdMVw1sFCp8rQGXorbcPyjt6MvQtIJkJxqTqew3Ag6dA9PJ8Kk3sa%2BFNAgcFEFG0HGs3zM30gs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745f59723b7fb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7877df05329f39350f4907a067f5840e
21f33eca6863c382c216c16799d1bea83e40fbd9
94b943383bbd05d11ac0f9c3672e315c9cfaa5cb2299c3779195f08491969fa8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99b438b1-ec2f-4d02-9da4-cca3c8bdf61b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4260
x-amzn-requestid: 024510ab-0cb7-421e-805b-fa54501d1e99
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XpjFQGPVIAMFytQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630d4bbb-4492cd20474c37337f8a5521;Sampled=0
x-amzn-remapped-date: Mon, 29 Aug 2022 23:28:59 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Wk8myA4exuK32he7TlFoJtvtqHb0WcDhvSuo6-aN0dMcxIr7cDkU5Q==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:04:04 GMT
age: 55897
etag: "21f33eca6863c382c216c16799d1bea83e40fbd9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30bf854fd3e27e2313a3d26fc43b9990
032acf1bfb0c8e2cbce8f2ff4d2964424b044951
7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: GuATNx2xnWnEl0cr_2ZWZo_jOWbHlSBYksIeHFDoHAK9o5Tf0PPliQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:03:29 GMT
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
age: 55932
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 290f6551c5ac539ea60810b135750f17
3633391a8dd87ef10fcb0d04d7b309738affc4a7
d94d133faaf232cf15b5c3f38f5b45d87d70bce0668d607b5c66a8d3f836540f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69b1e092-41e6-4f1e-b330-193f7dd11afc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7830
x-amzn-requestid: c56af3b5-2c48-4243-b220-d56a9be47990
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3H4JoAMFiMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-23ec24d867e3e5906fffa1a6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: VgP7BDBmd5A5bAmRgO88geep419uZ0TQop4jEmRkx-q9rX4PUJZOCQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 22:16:55 GMT
age: 55126
etag: "3633391a8dd87ef10fcb0d04d7b309738affc4a7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4d1d7d95258e80e549a36826ffd55d8b
2f3d6053c4014cbdabf2187474997eb2156f168a
7a8c4fa0f58191a0830de1921a128d1a49b9627f5e87bb153645b7687b3f8f5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11538
x-amzn-requestid: d429060b-9a2e-4bdc-8fd8-ade90fa26566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2EwCIAMFnAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-6733538a2958d9581b1d51e6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: heEJL_2CrIfnkRldwF8VLKHaR8O6YacPXZYaugcg8_z48zrwFIdskg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:49:50 GMT
age: 56751
etag: "2f3d6053c4014cbdabf2187474997eb2156f168a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-GGDCMPL4QP>m=2oe8v0&_p=1423869810&cid=780856544.1662384937&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662384936&sct=1&seg=0&dl=https%3A%2F%2Fcut-y.net%2FPpdHcEJdDVW&dt=Shorten%20Links%20And%20Earn%20Money%20%7C%20Cuty&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-GGDCMPL4QP>m=2oe8v0&_p=1423869810&cid=780856544.1662384937&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662384936&sct=1&seg=0&dl=https%3A%2F%2Fcut-y.net%2FPpdHcEJdDVW&dt=Shorten%20Links%20And%20Earn%20Money%20%7C%20Cuty&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-GGDCMPL4QP>m=2oe8v0&_p=1423869810&cid=780856544.1662384937&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662384936&sct=1&seg=0&dl=https%3A%2F%2Fcut-y.net%2FPpdHcEJdDVW&dt=Shorten%20Links%20And%20Earn%20Money%20%7C%20Cuty&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cut-y.net
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://cut-y.net
date: Mon, 05 Sep 2022 13:35:41 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 0 B URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: y5t4hY44knjZTD7X1zOBdtbkO07a+hpriS3fxvbXjdUqTmEwvWH7y1ICiiuLpSUbN0TN8VHW2FqpXkKc/nc+3Q==
date: Mon, 05 Sep 2022 13:35:40 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S-99807063%3A1662384940901143&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmV4-uU2yKizCDKWTHdEBArO8_ZFoy5Dro2eb12xNub7y7xIDb8uQNLB1RqknqWJEoJ2sbNhDA
403 Forbidden 0 B URL HTTP/2 accounts.google.com/v3/signin/identifier?dsh=S-99807063%3A1662384940901143&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmV4-uU2yKizCDKWTHdEBArO8_ZFoy5Dro2eb12xNub7y7xIDb8uQNLB1RqknqWJEoJ2sbNhDA
IP
GET /v3/signin/identifier?dsh=S-99807063%3A1662384940901143&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AQN2RmV4-uU2yKizCDKWTHdEBArO8_ZFoy5Dro2eb12xNub7y7xIDb8uQNLB1RqknqWJEoJ2sbNhDA HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Sep 2022 13:35:40 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-3kRLuorVl3DCtrtlSFftqQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi/external"}]}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=GgGYaXU8fzFIau1d_W7Wvy4qUoVE1c40_egXeVJeDM0OhDwujB2EBLNncZ6NYU3bK8c_OEpxBokZQVQjYYI0xEtJbRdTC5OdSf2lumbY8aDGeEzl2-eSmLVsgve6VgxvVu0LTk1lyhtcmZnQDm-z0xOOn9kdxE8rQoNJH7cogJM; expires=Tue, 07-Mar-2023 13:35:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 0 B IP
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Origin: https://cut-y.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 13:35:41 GMT
content-type: text/plain
set-cookie: csu=2143087748220641@1@1662384940; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://cut-y.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aflbsi490YSVpSyiRMldupJBW2leLCQro1wy16i85oEVzw3lysQcp5FNzacBL2SoTfoBkTgGXajQ88GweO8aLpwr%2BHlVuENLDePRGUFt5lzh3ZoiaUyv24eW%2F62GLNvb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 745f59789d62b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cut-y.net/
Origin: https://cut-y.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 05 Sep 2022 13:35:40 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://cut-y.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 4272
last-modified: Mon, 05 Sep 2022 12:24:28 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xb9qAaMrMqTIi367H1kG%2F4I3ygOohRCa1t2ljXT2uted3iz4zzlyZG%2B4F1qiH7Zs01Tkke27LMugirhi%2BsGzl26j%2FqLZM0MQB%2BTjdHXhdxGFAJew3bxinwia2J%2FOKqci"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 745f59789d61b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accedenonre.xyz/c001QW0obwx3XEB7A2NBUW8ZY1hBdAEgCBJ%2BGHRdSiwYdQxGfRggX0p%2EGCQJQXlUcghLeFBxW1FhFycJEH0BI1lHYFdwDkJgAXJfRWBXcFpFYA1yXRcpUXBeFSlUeE9fb0Y2T19vVCIOFilQLwIdP1BvFQo3F21PQn0bdE9fK1QtHhZhUyABACgZJwwfPlAc
200 OK 0 B URL HTTP/2 accedenonre.xyz/c001QW0obwx3XEB7A2NBUW8ZY1hBdAEgCBJ%2BGHRdSiwYdQxGfRggX0p%2EGCQJQXlUcghLeFBxW1FhFycJEH0BI1lHYFdwDkJgAXJfRWBXcFpFYA1yXRcpUXBeFSlUeE9fb0Y2T19vVCIOFilQLwIdP1BvFQo3F21PQn0bdE9fK1QtHhZhUyABACgZJwwfPlAc
IP
GET /c001QW0obwx3XEB7A2NBUW8ZY1hBdAEgCBJ%2BGHRdSiwYdQxGfRggX0p%2EGCQJQXlUcghLeFBxW1FhFycJEH0BI1lHYFdwDkJgAXJfRWBXcFpFYA1yXRcpUXBeFSlUeE9fb0Y2T19vVCIOFilQLwIdP1BvFQo3F21PQn0bdE9fK1QtHhZhUyABACgZJwwfPlAc HTTP/1.1
Host: accedenonre.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://cut-y.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: a9d34afd746c52dd58c3ff781fadaeef=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8445-GQQmxq3bXFmjFTMi+57K4l0v+MQ"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.49.213
143.204.42.165
31.13.72.36
104.21.49.213
93.184.220.29
23.109.248.150
23.36.76.226