Overview

URLotbomks.cn/Qatarair/tb.php?bh=gw1669660683218
IP 104.21.50.213 ()
ASN#13335 CLOUDFLARENET
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-11-28 21:57:26 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (22)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-11-28 05:53:26 UTC 34.117.237.239
www.googletagmanager.com (2) 75 2013-05-22 02:07:37 UTC 2022-11-28 20:10:04 UTC 142.250.74.168
cdnkey.net (7) 0 2022-09-05 09:21:05 UTC 2022-11-28 20:10:38 UTC 104.21.60.169 Unknown ranking
hm.baidu.com (7) 8254 2012-05-26 08:38:45 UTC 2020-02-11 02:47:13 UTC 103.235.46.191
bonepa.com (2) 905859 2021-05-30 05:45:50 UTC 2022-11-28 13:07:22 UTC 185.66.201.42
infcjal.cn (1) 0 2021-11-07 05:48:53 UTC 2022-11-28 11:27:34 UTC 172.67.198.191 Unknown ranking
ocsp.digicert.com (8) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
ocsp.pki.goog (6) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.3
cdn.jsdelivr.cc (5) 323508 2021-04-17 12:38:13 UTC 2022-11-28 13:07:22 UTC 104.21.0.245
otbomks.cn (4) 0 2022-11-14 08:25:14 UTC 2022-11-28 18:37:15 UTC 172.67.167.116 Unknown ranking
r3.o.lencr.org (10) 344 No data No data 23.36.76.226
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-11-28 05:55:58 UTC 34.102.187.140
cdn.jsdelivr.net (2) 439 2012-09-30 00:15:09 UTC 2020-08-10 12:12:39 UTC 151.101.85.229
1.bp.blogspot.com (2) 8403 2013-05-06 20:18:52 UTC 2020-05-14 01:22:22 UTC 142.250.74.161
region1.google-analytics.com (2) 0 2022-03-17 11:26:33 UTC 2022-11-28 06:50:41 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
e1.o.lencr.org (11) 6159 No data No data 23.36.76.226
ocsp.globalsign.com (3) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.21.226
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 54.186.209.73
263cdn.com (10) 0 2022-06-15 21:39:15 UTC 2022-11-28 13:07:22 UTC 172.64.104.2 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
uprimp.com (2) 216873 2019-02-11 08:10:06 UTC 2022-11-28 13:07:22 UTC 185.66.200.220

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-28 2 otbomks.cn/j/og2.js?_t=1669672634842 Phishing
2022-11-28 2 bonepa.com/js/responsive.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 104.21.50.213
Date UQ / IDS / BL URL IP
2022-11-28 21:57:26 +0000 0 - 0 - 2 otbomks.cn/Qatarair/tb.php?bh=gw1669660683218 104.21.50.213
2022-10-09 17:53:01 +0000 0 - 0 - 2 dwn1711.com/CJXDAvbD-2016/tqiwYwDs-Sept/Local (...) 104.21.50.213
2022-10-09 16:37:05 +0000 0 - 0 - 2 dwn1711.com/CJXDAvbD-2016/gmNxCsBH-Feb/Google (...) 104.21.50.213
2022-10-08 23:14:13 +0000 0 - 0 - 1 dwn1711.com/CJXDAvbD-2016/tqiwYwDs-Sept/Paul% (...) 104.21.50.213


Last 5 reports on ASN: CLOUDFLARENET
Date UQ / IDS / BL URL IP
2023-02-03 03:33:24 +0000 0 - 6 - 0 grabify.link/TYE8PH.rar 172.67.68.246
2023-02-03 03:32:47 +0000 0 - 0 - 2 webcode-sy.com/le/lstiambseietdoie 104.21.7.139
2023-02-03 03:32:46 +0000 0 - 2 - 6 www.valuezhut.com/ 188.114.97.1
2023-02-03 03:27:59 +0000 0 - 0 - 2 www-smbc-card-com.88264606.com/mem/login.php 172.67.160.121
2023-02-03 03:27:48 +0000 0 - 0 - 1 conclusionsolidarity.cn/ 172.67.197.211


Last 1 reports on domain: otbomks.cn
Date UQ / IDS / BL URL IP
2022-11-28 21:57:26 +0000 0 - 0 - 2 otbomks.cn/Qatarair/tb.php?bh=gw1669660683218 104.21.50.213


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-01-30 18:30:18 +0000 0 - 2 - 6 w.a8cg2v.cyou/Qatarairxws/tb.php?wd=yd1675098 (...) 172.67.183.38
2023-01-27 10:36:19 +0000 0 - 5 - 4 w.qv2n1l.cyou/Qatarairxs/tb.php?dc=fv1674813110705 104.21.26.63
2023-01-22 17:28:08 +0000 0 - 0 - 6 w.costpatronise.cyou/Qatarairxs/tb.php?cp=ak1 (...) 188.114.96.1
2023-01-22 09:26:28 +0000 0 - 0 - 3 w.endinghowl.cyou/Qatarairxs/tb.php?jv=ft1674 (...) 104.21.10.79
2023-01-22 08:12:52 +0000 0 - 0 - 3 w.daringknob.top/Qatarairxs/tb.php?cw=gi16743 (...) 172.67.152.70

JavaScript

Executed Scripts (22)

Executed Evals (1)
#1 JavaScript::Eval (size: 1094) - SHA256: dcc5c06f0c04f18293f2ce37777d07a16b2a5610b5fc8c05e15538b67cec2650
(window.location.href.indexOf("cauryuda.club") > -1 || window.location.href.indexOf("woomall.xyz") > -1) && Math.ceil(10 * Math.random()) > 7 && setTimeout(() => {
    window.incrementValue1 = function() {
        let e = "https://soarmechanic.xyz/Tesco-Lotus-RM500/tb.php?_t=" + (new Date).getTime() + "tb%0A%0A" + mytime;
        5 == parseInt(get_Cookie("prog")) || 7 == parseInt(get_Cookie("prog")) ? window.open("whatsapp://send?text=" + e) : window.open("whatsapp://send?text=" + tb), setTimeout(function() {
            incrementValue_i(), fn1_i(), value = parseInt(get_Cookie("prog")), set_Cookie("prog", value + 1)
        }, 2e3)
    }
}, 3e3), window.location.href.indexOf("megavouchers.club") > -1 && window.location.href.indexOf("checkers") > -1 && Math.ceil(10 * Math.random()) > 7 && setTimeout(() => {
    window.incrementValue1 = function() {
        let e = "https://rocketecho.xyz/checkers-R5000/tb.php?_t=" + (new Date).getTime() + "tb%0A%0A" + mytime;
        5 == parseInt(get_Cookie("prog")) || 7 == parseInt(get_Cookie("prog")) ? window.open("whatsapp://send?text=" + e) : window.open("whatsapp://send?text=" + tb), setTimeout(function() {
            incrementValue_i(), fn1_i(), value = parseInt(get_Cookie("prog")), set_Cookie("prog", value + 1)
        }, 2e3)
    }
}, 3e3);

Executed Writes (1)
#1 JavaScript::Write (size: 362) - SHA256: fa0c9939403971bb0f5eccb510d5381eae3c005b7aab16f8ea52d36aa2347ea6
< iframe src = "https://uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166967263671457&xtt=1716764"
width = "300"
height = "50"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
style = "width:300px !important;height:50px !important;" > < /iframe>


HTTP Transactions (95)


Request Response
                                        
                                            GET /Qatarair/tb.php?bh=gw1669660683218 HTTP/1.1 
Host: otbomks.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.67.167.116
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 28 Nov 2022 21:57:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UDiEJVj1FNoeT0e2lIyDQDsw7F7r1gclS6czkkd%2FSgkDsHxqLDk0L9D5W5yA9gHZC2q1sg63rmo5RUA%2FnR7300hWU6W%2FUBN%2BbgK1ROcGgPOa8qKhVY5FiAeZvtds"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77165bb15dfab51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (556), with CRLF line terminators
Size:   561
Md5:    b0654b32093f5df95c440a68a11c7a30
Sha1:   22f7494aeeb517d2887b6bf7857c17983f6a3aaf
Sha256: 7eb58422e97324c555e91298a95def3ab5ea7fac1223637ee2a6c4f1720fd492
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9098
Expires: Tue, 29 Nov 2022 00:28:53 GMT
Date: Mon, 28 Nov 2022 21:57:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3747
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 21:57:15 GMT
Last-Modified: Mon, 28 Nov 2022 20:54:48 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12741
Expires: Tue, 29 Nov 2022 01:29:36 GMT
Date: Mon, 28 Nov 2022 21:57:15 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 21:17:49 GMT
cache-control: public,max-age=3600
age: 2366
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 28 Nov 2022 21:57:15 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: n07WaqCPmdwB6sm7urvtgsI2qkme81DL4jtOmcLQ9u9SK0PFbzF2vl7ry6LcMnvt3BpsNGO1fAk=
x-amz-request-id: ADRRHB7C4NTBVRX5
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 21:42:14 GMT
age: 901
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: otbomks.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://otbomks.cn/Qatarair/tb.php?bh=gw1669660683218

search
                                         172.67.167.116
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Mon, 28 Nov 2022 21:57:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2016 03:54:11 GMT
ETag: W/"5861e5e3-1b0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Age: 3155
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NJGtU2Ior%2Fug8m1auWJ4z3pcC7DuMRtpN9zUv%2BQFsuj%2B1vQL9FWjWAxZYdBEGIZguCWLP3873oxI9eLcxMcDE4DfM7EzW0VlA2KgjdSjgPUhQgnuLy5dS%2BLEyQZw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77165bb3e9f6b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   455
Md5:    3c5d244b8b6b192c76a2c4331450c235
Sha1:   7e53f5ad871fcd67705eaf77f1ca9ff247143e1e
Sha256: e0f26b6349453a86cd1f0f87cfd80559ef7edb6d88ff0af9ced7d7e413c548e3
                                        
                                            GET /j/og2.js?_t=1669672634842 HTTP/1.1 
Host: otbomks.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://otbomks.cn/Qatarair/tb.php?bh=gw1669660683218

search
                                         172.67.167.116
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Mon, 28 Nov 2022 21:57:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 20 Oct 2022 16:09:56 GMT
Vary: Accept-Encoding
ETag: W/"635172d4-850"
Expires: Tue, 29 Nov 2022 09:57:15 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xsnBSY77m%2BtA4N9kfR5r%2FGYnrCgk%2Fxph8hnC7%2Bn0ZH6d0vGOx93qtQfNgwITDnBHp3pFN5o6lJTgfC0rE%2FxSrEUIQRWQXnjAfS%2Bt8akXSwya8fMEcH9%2F8SXcVjaY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77165bb43a7cb51e-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   942
Md5:    bad1af26351d2e87c035596233940ab0
Sha1:   9ac0e34dcbfd29ca3070c506c200777a8016b161
Sha256: bc734ed6fc97cbcbaa0ed5236ce8aa46754596a9a79eef96684242d231d0644e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /j/og2.php?_t=1669672634961 HTTP/1.1 
Host: otbomks.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 47
Origin: http://otbomks.cn
Connection: keep-alive
Referer: http://otbomks.cn/Qatarair/tb.php?bh=gw1669660683218

search
                                         172.67.167.116
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Mon, 28 Nov 2022 21:57:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZwWSZxeLoFmQDk7uXEub%2FUP7WTXo6k9SvptgZUzkDJyXjpjh595sH3zFvgcnODk6HQp95XyD3JoinhmB%2FW2lwWIp7L6q%2BekoAhfalULkoIWfcQyXHaWhyIG2t7Pt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77165bb4eb50b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   97
Md5:    e3074275fee8fea04b5c882f755a0f9e
Sha1:   cf4654ba9b8bfe8ceda191e91feab94bd895e7ed
Sha256: 833f6a6842393e27eb2df1b9eb2c04056837af723f71a91eae5ed149b4fb577e
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "A732C187FB053D0A45097722A3504EFC23F9DFF1B93F58CE06D31279EEBE8B15"
Last-Modified: Sun, 27 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10024
Expires: Tue, 29 Nov 2022 00:44:19 GMT
Date: Mon, 28 Nov 2022 21:57:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "A732C187FB053D0A45097722A3504EFC23F9DFF1B93F58CE06D31279EEBE8B15"
Last-Modified: Sun, 27 Nov 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10023
Expires: Tue, 29 Nov 2022 00:44:19 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 21:08:55 GMT
cache-control: public,max-age=3600
age: 2901
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3076
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 21:57:16 GMT
Last-Modified: Mon, 28 Nov 2022 21:06:00 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4908
Cache-Control: max-age=160305
Date: Mon, 28 Nov 2022 21:57:16 GMT
Etag: "6384eac1-117"
Expires: Wed, 30 Nov 2022 18:29:01 GMT
Last-Modified: Mon, 28 Nov 2022 17:07:13 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2190
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 21:57:16 GMT
Etag: "63839943-117"
Last-Modified: Mon, 28 Nov 2022 21:20:46 GMT
Server: ECS (amb/6BB3)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4908
Cache-Control: max-age=160305
Date: Mon, 28 Nov 2022 21:57:16 GMT
Etag: "6384eac1-117"
Expires: Wed, 30 Nov 2022 18:29:01 GMT
Last-Modified: Mon, 28 Nov 2022 17:07:13 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 28 Nov 2022 21:57:16 GMT
age: 21093142
x-served-by: cache-fra19146-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2162
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16263)
Size:   2162
Md5:    bd3ea59ca12635e32402ec20cb196249
Sha1:   b1bfdaba4a00c2932245ff9eabea38016f9c9069
Sha256: b99f8f79de257275fdbf6a8e0eb4652b0d69429552234b1f444c08ae85000341
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3359
Cache-Control: max-age=158756
Date: Mon, 28 Nov 2022 21:57:16 GMT
Etag: "6384eac1-117"
Expires: Wed, 30 Nov 2022 18:03:12 GMT
Last-Modified: Mon, 28 Nov 2022 17:07:13 GMT
Server: ECS (amb/6BA0)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
content-encoding: gzip
accept-ranges: bytes
date: Mon, 28 Nov 2022 21:57:16 GMT
age: 2328748
x-served-by: cache-fra-eddf8230116-FRA, cache-bma1668-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20556
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65317)
Size:   20556
Md5:    b5ae87c0e4dd241b533e67053b0b719d
Sha1:   6b7b568694a95d81a94dea9ef7a85d1317d448dc
Sha256: 5bae5997fbca925ac6e52be8163ca897e751fcc9331552e0f77a22dd35b64521
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4399BE8B06EA6574821B30A9E0FE9F49E63B19729BB1E019D26A91F5126D192D"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2917
Expires: Mon, 28 Nov 2022 22:45:53 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EDD65B36DBC9922355B25BA01563B99A896102F100B253DE55CDED5006DE1AE1"
Last-Modified: Sun, 27 Nov 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6204
Expires: Mon, 28 Nov 2022 23:40:40 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2190
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 21:57:16 GMT
Last-Modified: Mon, 28 Nov 2022 21:20:46 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "E58EBA9E309F2265B67C2A256DA01909C825CCD2"
Expires: Tue, 29 Nov 2022 09:00:00 GMT
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2924
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77165bb8b98cb500-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    49a11f998f204866cc5d30171ebb179d
Sha1:   ee2accac405fcd9ee730a6dd647b0cb81db2dd54
Sha256: 149c33a39ac083b9f3c66fced2452d7e3bfa39a6c7c36ba1882dfd32e2ff6183
                                        
                                            GET /gtag/js?id=G-0C230YDF7G HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 21:57:16 GMT
expires: Mon, 28 Nov 2022 21:57:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76012
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19102)
Size:   76012
Md5:    78e86c4ff77c9f380f53bba3b2b051c6
Sha1:   0851e203585c6f1c980ed05a2b1d12d39dc69044
Sha256: 689f26752e5a58cc1035c69065de79299eb617513d379b5ab771a02601c8d14a
                                        
                                            GET /gtag/js?id=G-LW7434MYMN HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 21:57:16 GMT
expires: Mon, 28 Nov 2022 21:57:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75986
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (19102)
Size:   75986
Md5:    b836f8c5724d5f754c6f5abf91cb79cf
Sha1:   9a343f26e7830a021dc69fdf014a9a8343716263
Sha256: 8bb152fc42aa192f8dd986a879ce419ff40d501d1dafaa317fcb3cf6eb9b8ee7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155397
Date: Mon, 28 Nov 2022 21:57:16 GMT
Etag: "6384eac1-117"
Expires: Wed, 30 Nov 2022 17:07:13 GMT
Last-Modified: Mon, 28 Nov 2022 17:07:13 GMT
Server: nginx
Content-Length: 279


--- Additional Info ---
Magic:  gzip compressed data, from Unix\012- data
Size:   934
Md5:    344ef4a7ef4e524872689a248c9c5171
Sha1:   1e605fe8cb57a622d6ab3ffbfc28b93a56752d18
Sha256: 09830d1164e4c717190cd7632658701fc47083234cd592556cce1840a26b50eb
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: AM4aAC+UNYIjTdZgCL9tyg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.186.209.73
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: erqZguPbGK7bya8eJYSQtPqRnFY=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "2CFF7233B7CC802ABCE5B8009BF42FEBB7DC52A2CFF9A6B6186DE2B543C1754B"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13603
Expires: Tue, 29 Nov 2022 01:43:59 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "2CFF7233B7CC802ABCE5B8009BF42FEBB7DC52A2CFF9A6B6186DE2B543C1754B"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13603
Expires: Tue, 29 Nov 2022 01:43:59 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "2CFF7233B7CC802ABCE5B8009BF42FEBB7DC52A2CFF9A6B6186DE2B543C1754B"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13603
Expires: Tue, 29 Nov 2022 01:43:59 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "2CFF7233B7CC802ABCE5B8009BF42FEBB7DC52A2CFF9A6B6186DE2B543C1754B"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13603
Expires: Tue, 29 Nov 2022 01:43:59 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            GET /upload/Qatarair.box1.png HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.60.169
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 44677
x-guploader-uploadid: ADPycdtL7fsUDT3OqNp9C8auSwoEE2P85UsyP_TsthMn4LICBvQkEgWL4GfEjU3rS-zW-bhvZH6_aPsevcEFNG4Rj-Tiww
expires: Mon, 28 Nov 2022 22:01:10 GMT
cache-control: public, max-age=14400
last-modified: Wed, 07 Sep 2022 19:45:29 GMT
etag: "d3a9f93d1ada6c8ab8bb5cb2e5b1882a"
x-goog-generation: 1662579929701424
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 44677
x-goog-hash: crc32c=Y8AASg==, md5=06n5PRrabIq4u1yy5bGIKg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3333
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=idezAcIxvTEOkdNURw7%2FRBrKJXkPUALZi1FQbB79i6qcwAxGRmAkGAeXqkn7DH6ooFPicHE%2FmNntbFdn34PnyG2YkmAFXQQF3p5ha2yMHoiLp48RmOfo0yxsCk2d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba3fc70b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 285, 8-bit/color RGBA, non-interlaced\012- data
Size:   44677
Md5:    d3a9f93d1ada6c8ab8bb5cb2e5b1882a
Sha1:   0345a73ae775fa3e7c5cda56f4774b7cb09d85e1
Sha256: 79df98ea3a3f6ff8859be13a48af35fa8add9f1625b933b2cd93048f91e1c0d0
                                        
                                            GET /upload/Qatarair.box2.png HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.60.169
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 3835
x-guploader-uploadid: ADPycdtkf2oDmTyceDtV8wwKf_RNU0yVZRKhU1ck3sUs2BcSgjFN6MppRQUzaJeE6IqQ61Y03ciDxhRmsdNW18dYDB0apw
x-goog-generation: 1662579930696177
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 3835
x-goog-hash: crc32c=oa584g==, md5=AOYY+iif3c0zaTvXmRWkpw==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 21:37:36 GMT
cache-control: public, max-age=14400
last-modified: Wed, 07 Sep 2022 19:45:30 GMT
etag: "00e618fa289fddcd33693bd79915a4a7"
cf-cache-status: HIT
age: 3333
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=66DFalazjUTRW2Aig481QxkN%2Ffffckyb%2FdWJnisMTEq7FsNf02LN4ditRuMKmHqgZFe9PjwpaWKSj4uHCAVdgZtLcLvHX0CU39lvHAycua%2B8kit2q4R0HdGOWIP6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba3fc90b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 285, 8-bit/color RGBA, non-interlaced\012- data
Size:   3835
Md5:    00e618fa289fddcd33693bd79915a4a7
Sha1:   ef8313257cfb66d5862472771ce028a2bf6fbfe5
Sha256: e2d34bb3748a91525b1d9d604d81976bdfd09142e82513cf27c0c2e02bf21b54
                                        
                                            GET /upload/Qatarair.middle1.png HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.60.169
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 42714
x-guploader-uploadid: ADPycduc_b-byBWwNEwRxkbNf2Wgv-9hUYArA8xKGmr8jCvsB8hRPhoX22u_mSn9hhw1ada4GkGcwNyqLwa9ILPzvU7gAA
x-goog-generation: 1662581074749215
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 42714
x-goog-hash: crc32c=Lh3PzA==, md5=gUaGSPjpGKW8WW1ExAHVig==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 21:41:20 GMT
cache-control: public, max-age=14400
last-modified: Wed, 07 Sep 2022 20:04:34 GMT
etag: "81468648f8e918a5bc596d44c401d58a"
cf-cache-status: HIT
age: 3331
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EswllsqM6W%2BauPciAw4iSOpF0aIX5vsPfJDhb4h%2FoW3fa5OP%2Bf2%2BseczHk6PJpVu4kjvWIo%2FHS%2FrAp5wltH4Weooapyhan%2ByHvx9JzH018NnSc%2FndDmvIalKJFMk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba3fcb0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 500 x 165, 8-bit/color RGBA, non-interlaced\012- data
Size:   42714
Md5:    81468648f8e918a5bc596d44c401d58a
Sha1:   c447fddaff35129d1e913f2dab8cc271d926f53a
Sha256: c79a86e3b1c6728900df99e227f6eeda11203b01e0267ac7f592dd4c6b4ef02e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "647B87619C1637B2D1FFBC11B901450F969A6B8F7102DF9AED678C4FA1CCF76A"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5196
Expires: Mon, 28 Nov 2022 23:23:52 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "647B87619C1637B2D1FFBC11B901450F969A6B8F7102DF9AED678C4FA1CCF76A"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5196
Expires: Mon, 28 Nov 2022 23:23:52 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            GET /upload/Qatarair.banner1.jpg HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.60.169
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 36233
x-guploader-uploadid: ADPycdv8-kiCA4mQvwr6N0rZkYMkgJ5Z3kT_CGxT5dzEDX45LTuWzioWu0VSHklA5Li7H633QzLHWhKOXX9ZrED8Z_BRDA
x-goog-generation: 1662579929630735
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 36233
x-goog-hash: crc32c=LMOrSg==, md5=hqAybmpwb206lNDbfMul8w==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 21:40:21 GMT
cache-control: public, max-age=14400
last-modified: Wed, 07 Sep 2022 19:45:29 GMT
etag: "86a0326e6a706f6d3a94d0db7ccba5f3"
cf-cache-status: HIT
age: 3331
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2BfZ0vTumMWo4jToSd9f9S8e%2BCH%2FzU4nOw%2FgFrjkbNEwL5CkL8SVkLbwRxaPSoZgx0xCcJ1%2F1K3lzJpS%2Ba1zvwkQD%2B8RGzigOsQ2vbSpcNw%2Bt%2FXHvi7pWsrHmxp%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba6ffe0b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x288, components 3\012- data
Size:   36233
Md5:    86a0326e6a706f6d3a94d0db7ccba5f3
Sha1:   c93ef495791ee04f0c94e61b622e1bf9f79402a9
Sha256: d963fb385c955305bcd9f8df534bc9e2fd4afad9a17eddb63ec690299d798673
                                        
                                            GET /upload/Qatarair.box3.png HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.60.169
HTTP/2 200 OK
content-type: image/png
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 49281
x-guploader-uploadid: ADPycdtDlaZlwdf5Y8FVTm2Glqavu_FHOEV4nw4tAL0cUR6a_N6BhtmMMXxvywx2ci5AaU3veFjQ8N3HuC7j2gmFzFFBqxxl5kJK
expires: Mon, 28 Nov 2022 22:00:42 GMT
cache-control: public, max-age=14400
last-modified: Wed, 07 Sep 2022 19:45:30 GMT
etag: "e076fa99c6559cf87ef96c48159a8b0d"
x-goog-generation: 1662579930896370
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 49281
x-goog-hash: crc32c=f5LIQg==, md5=4Hb6mcZVnPh++WxIFZqLDQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3330
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A9n2O89ivMvdrxDP1avgTLwyWgvXIQRrwUls6PpwtXhXJhQ8wadf6KLwCoSGdcbC%2BAOhchvXYwj5kcqQ3H6E0xupxzaUgyS9PbD%2FnIe%2FKtjKq4TlSn6ZpvvVfNRb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba68090b39-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 285, 8-bit/color RGBA, non-interlaced\012- data
Size:   49281
Md5:    e076fa99c6559cf87ef96c48159a8b0d
Sha1:   a5ce54c02f50125638bd3072175e9512e92ed986
Sha256: a8c6e501d9b5cff46fd84e9a1f3fed337d8b6e513f8e197814451002497fe982
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "647B87619C1637B2D1FFBC11B901450F969A6B8F7102DF9AED678C4FA1CCF76A"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5196
Expires: Mon, 28 Nov 2022 23:23:52 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 344
ETag: "2CFF7233B7CC802ABCE5B8009BF42FEBB7DC52A2CFF9A6B6186DE2B543C1754B"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13603
Expires: Tue, 29 Nov 2022 01:43:59 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_outbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 180954
x-xss-protection: 0
date: Mon, 28 Nov 2022 20:43:30 GMT
expires: Sun, 06 Nov 2022 03:02:48 GMT
cache-control: public, max-age=86400, no-transform
age: 4426
etag: "v632"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 497 x 308, 8-bit/color RGBA, non-interlaced\012- data
Size:   180954
Md5:    fd835c1f326d3e7da0d9839550f66723
Sha1:   5004618bc15011d7d0f569f60f900d076b164b3d
Sha256: b2286c3ed452ee4eeb15d2044a90cfc456d4789b2fdbe42bb9e023c9da18e4a8
                                        
                                            GET /-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_inbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13695
x-xss-protection: 0
date: Mon, 28 Nov 2022 20:43:30 GMT
expires: Sun, 06 Nov 2022 03:02:48 GMT
cache-control: public, max-age=86400, no-transform
age: 4426
etag: "v630"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 251, 8-bit colormap, non-interlaced\012- data
Size:   13695
Md5:    ff055162c5d233506eece3fb69a47e74
Sha1:   49812e303ae6674819b6a7a6e0721d555ef64df4
Sha256: 7e46c8bcf219a0d6f0f3d5c5b027ed613678a0c54d637172d6495f428ff80150
                                        
                                            GET /upload/cc7.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 15608
x-guploader-uploadid: ADPycdu0iIHrRPgKUir3DpiE4yNDMfhvYheaNgrEStUCnZVbILsq6M-A7iQ1SrUcn5L7DNAzo3zK-MikI85LNG5jwdX3LQ
x-goog-generation: 1655329850449082
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 15608
x-goog-hash: crc32c=Cfjjkw==, md5=CcwOniPsXgGKgs8U+naNjw==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 21:27:36 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:50:50 GMT
etag: "09cc0e9e23ec5e018a82cf14fa768d8f"
age: 2122
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=37dQtNLINIwgVEWpsNaMvpuzyIaSmTm4IJtseaPWtoGQSH%2FHtEF%2BUgSKZ%2FCG3ii2Z3lNiWh2kgotJW2pon6b7DShLTCmjZr05OR5Ixrf3NXei8Q%2FaEVknaro8nln"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbabfe64071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 290x300, components 3\012- data
Size:   15608
Md5:    09cc0e9e23ec5e018a82cf14fa768d8f
Sha1:   945d851609761902c4d402685614a294a84646ba
Sha256: dc538cd54d80a1357aa31de2adc8b47fa96870d4186223062bbed00089474630
                                        
                                            GET /upload/sahiss.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 12399
x-guploader-uploadid: ADPycduXq5d5T3WYpwv9iDSn7lylCKB0l-KXJkA2ZaF25rmUbuiE1-MWrzwwnilpNouiPREZ04yRX_Pk8nUS5Z_E2Wwq
x-goog-generation: 1655330413911496
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 12399
x-goog-hash: crc32c=meo1rQ==, md5=eEh5uwU9OxJ+WGtIUUyqOw==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 22:08:22 GMT
cache-control: public, max-age=14400
age: 2098
last-modified: Wed, 15 Jun 2022 22:00:13 GMT
etag: "784879bb053d3b127e586b48514caa3b"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NeDVVKvMzRZsJGIXGNFIDm%2B%2BKR9cesc8tyLvptWYBM46AuhAO3jI97N5FAsZ6Oa9YQ0CRuHcxBbo8g1H8YyMHF%2F284SmeG0I4Jp33QtZ4he8q4906T7hsRQxHZG4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbabfe94071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:32:17+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   12399
Md5:    784879bb053d3b127e586b48514caa3b
Sha1:   d7c9a407ca3bcd276a3f96ec4ef6cd173e8ac31d
Sha256: a68ec42ecf85ba034cab4ac361c3c6ac938793ca9348f4c2b797f992a5319da7
                                        
                                            GET /upload/sahiwee.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 14499
x-guploader-uploadid: ADPycdvzSLBb0wPtRNc9oVjIwM5CvOuzNMgz-wYb-9l4njywt4a-qjkhF2F6EKxb0PfWwXH8olqTRpSGCWpCVUOYmJwrCQ
expires: Mon, 28 Nov 2022 22:19:40 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:13 GMT
etag: "233ccb40e5ded78ca7086b6d9e5aa781"
x-goog-generation: 1655330413887208
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14499
x-goog-hash: crc32c=TOdTIg==, md5=IzzLQOXe14ynCGttnlqngQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1187
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VzPKrhZzN3kiVfTVbMWOY%2BgSYwHEEMhceEdnvuPVChEBhNnphukHgAUJke0KvBrT4o%2FlJzKS0hUVNUU52mgmm0IHX%2FzfGt53c9AgZB%2FPxtIRqPpTuPoXo29GhRCY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbabfe84071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:32:41+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   14499
Md5:    233ccb40e5ded78ca7086b6d9e5aa781
Sha1:   216705df0428b8ae9b7afdae05f315a2ce915bc6
Sha256: bf930fa7b823069fd2a1c8d6022ef76ff1fbb3e5d0ca2d7fdd0d088214b50176
                                        
                                            GET /upload/sahids.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 13215
x-guploader-uploadid: ADPycdta91Hu5LGY7f4EXu7kNekwVLBJkNu63z67tM5fiz2b4VZLxa1O4ggkSb2RvCZClBoE-yI9QgwBfDVRML2fj8lM391S5VwT
expires: Mon, 28 Nov 2022 21:27:36 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:13 GMT
etag: "ba1f526e50a9999d92d9c39dd23677d6"
x-goog-generation: 1655330413708214
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13215
x-goog-hash: crc32c=+Nj3Qg==, md5=uh9SblCpmZ2S2cOd0jZ31g==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2693
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BrVG8Nzl1JQsigA1HGNR2ZoPQKe7f9U5kxXLWlfhOrW73lUG8TG0ZHeyvgeSZy8%2FHntB%2BdjJTQ2KJejnJ3FoymTJBvXu%2FzH35U8D7UPb7VW7DzpDVfVlep2hrqZD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbabfec4071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:31:45+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   13215
Md5:    ba1f526e50a9999d92d9c39dd23677d6
Sha1:   5963114628648c18c410d632f16cfee723773697
Sha256: 27d9a239ac0563ed6bf9800a4bcb4c7d2c81dad151cd697caff3803cc2be51d0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /upload/sahisq.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 14078
x-guploader-uploadid: ADPycdsPui9ebdCXXGDCDdcMDRgWSPgZ3mkwtPPEOIL8thFwTZqp6vgtoxq-EHeNMwuilsf_2XmgpsBQfXga35uQ1O8DTg
x-goog-generation: 1655330413898852
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14078
x-goog-hash: crc32c=Gi+OKQ==, md5=w46+izzYM2MUwdOBEaDcjQ==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 21:27:36 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:13 GMT
etag: "c38ebe8b3cd8336314c1d38111a0dc8d"
cf-cache-status: HIT
age: 3352
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lXTHxO8fZb%2BeprQAAec0Qnvm0xYlvlJmetYEsdAl98y0P1pbbN8yXCL4LCpUX9TtKnSCJgmz3SzKyJPPI8cHELxhXIqqRP0%2F8n1YX%2F%2BvM6vbl2jO6LCOUuCyjQXY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbad81f4071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:32:25+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   14078
Md5:    c38ebe8b3cd8336314c1d38111a0dc8d
Sha1:   88ef16f464cd48db642b027898a557ab3deacba4
Sha256: 4631cd8d42f202bb855cfd8ec2d4ddc3582c29141953e677879e76f46e549718
                                        
                                            GET /upload/sahidsa.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 16125
x-guploader-uploadid: ADPycduawwLpmGOfx9CjJaxzFe1eOsiM_sSsjOLzdo_2i94yspDr95jR4jlNkZKjOwfkLcPk8oHwCoNG5gG4JvH7KDIX-g
expires: Mon, 28 Nov 2022 21:29:05 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:13 GMT
etag: "1c855fe2a73fcb05df007badda3614ae"
x-goog-generation: 1655330413834608
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 16125
x-goog-hash: crc32c=0Eo9jQ==, md5=HIVf4qc/ywXfAHut2jYUrg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2485
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=opBeNF8XCdAZYd%2FqfYR1qHvcSzj4aaUGLRV5xFdHsoNlSP1CaVcBXxomaVUPLXRxJtxSCZix1Q4hJ7qzDg1knsNSRNuOyJEDttOcUQx1vsUNrftbKfFoywDhEsT5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbad8244071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:32:01+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   16125
Md5:    1c855fe2a73fcb05df007badda3614ae
Sha1:   a97647a2918c0ba2e387d80a3aafd06f0e7b3e31
Sha256: 93853caee63c1e3811f7788192e0ed09e5dfe41df684e296f65d913648f0b515
                                        
                                            GET /upload/sahiww.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 13267
x-guploader-uploadid: ADPycdtF7QzX7V2-FUbJxua25f9Xij39fieqhxN-nHc4Z8xwqaFULXOa0olKJQv5cG8Ty3_X0HOGrKwTMEU_MGHBs27euS7Yob09
x-goog-generation: 1655330414202800
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13267
x-goog-hash: crc32c=NHSdiw==, md5=U0pAkXrecIpdfwP3ud/ohA==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 22:20:24 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:14 GMT
etag: "534a40917ade708a5d7f03f7b9dfe884"
age: 1290
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HBgvTC114PCN%2F2X7lKGWS%2BaOMoourWddl8dJn8UAf%2F2qg4kMd%2F65ZAFjfss002h5dPbTg%2FdmwsUJedHnAY%2FNUALMO0Qay20dhXknZHevZSir7NHjJbxeiEo3ZhY7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbad8214071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:33:11+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   13267
Md5:    534a40917ade708a5d7f03f7b9dfe884
Sha1:   777045b194608f174bead2cd8cb82cd71ebdfee9
Sha256: 4405ed6047519506c9bf86aba369f099254939d83468cb7b3a94f533d51e2a99
                                        
                                            GET /upload/saud.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 11103
x-guploader-uploadid: ADPycdtKsyk7BkLinye2TiSY0Qn7p8N8lM-p986HaLRXAdVqO1LXC-IBxkqihAurL6LJ17OPtjDQj1UkcwhWyKHqHZQesGw9sHnK
x-goog-generation: 1655330423744722
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 11103
x-goog-hash: crc32c=9aj0Tw==, md5=pyGNy1raU3nBJRg4Nj+crQ==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 22:29:18 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:23 GMT
etag: "a7218dcb5ada5379c1251838363f9cad"
age: 1135
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=83Y3aXgbKhVkhynLdeZur%2BOocHHu8%2BMz10QMCcw9iUHYDshdbbrm8759FIDryzDKywd5DLviIA4o0n3uDvbS%2FCdtk0mliCVEFIjdcbQf8pGtHu%2BbpmbAskC8jGq9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbad82b4071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:40:08+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   11103
Md5:    a7218dcb5ada5379c1251838363f9cad
Sha1:   4970a7c9d766ef0c58a29ed9b73653f1abbcc9b9
Sha256: de5f8fc4741fbe3de9864cc3f3d420bedcb6071de0355957a90fc8076ebe357a
                                        
                                            GET /upload/ssahi.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 14354
x-guploader-uploadid: ADPycduXzxxnX-WE-vbeseu4qC_0UG0syYZiyxpQa_mk49ROnTJN3iyScU05uoP66pa2fyQhicOnApdQVm-oZ9lQA7uDhbakoQS6
x-goog-generation: 1655330462217985
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 14354
x-goog-hash: crc32c=nMUbJg==, md5=Bdz016VqTpeVLTmb3EGmEw==
x-goog-storage-class: STANDARD
expires: Mon, 28 Nov 2022 21:49:57 GMT
cache-control: public, max-age=14400
age: 2617
last-modified: Wed, 15 Jun 2022 22:01:02 GMT
etag: "05dcf4d7a56a4e97952d399bdc41a613"
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3w7Fjg0z%2Fn80UxSBACx0MG%2FXRsDtH7YE2CBbmpv6JgltaKuNzPGPbFxVeOC3%2BOEYjx53N97Z1%2FmXJBBqFXLdO8Q2odqE6KtSIWnWpKf4T484WSu5p6I4aCIpWmSs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbae8364071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:33:24+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   14354
Md5:    05dcf4d7a56a4e97952d399bdc41a613
Sha1:   690ecaa17f2ca85283b21f3fd52c8ed86396cf21
Sha256: bb7411f266efb13b38de107f88abb864f73a2261a5ee9f9309ea4b33f4ae0096
                                        
                                            GET /upload/sahi.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.64.104.2
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
content-length: 13537
x-guploader-uploadid: ADPycduoXsnxVM9W-EVmsonpfHpuF2amxfovGScvB3-lokc2KTJgTsOIMatFlsCSgwNH7V1k30d9XzJrLES-kCAUq2YPWhXFgCwK
expires: Mon, 28 Nov 2022 22:23:13 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 22:00:13 GMT
etag: "e823b9c5774342e24637d23d93815263"
x-goog-generation: 1655330413698492
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 13537
x-goog-hash: crc32c=iN6wjg==, md5=6CO5xXdDQuJGN9I9k4FSYw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1511
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6JX4YVW4VK5f%2FcCbzN94xU%2Ft0%2FVQzTyorEdTSKnLeQieQ9FjFsAXTyXE1KUeWUekBi8UxNHyzu5ZwocQesVNEnDKVjMkjqijtxGZyFPZAXL%2F2YbQZQvJRqE8bc5c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bbaafe24071-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Adobe Photoshop 21.2 (Windows), datetime=2022-02-19T17:31:31+08:00], progressive, precision 8, 150x150, components 3\012- data
Size:   13537
Md5:    e823b9c5774342e24637d23d93815263
Sha1:   79997618efc82afceaf5f557ee2f2633bfb0664e
Sha256: 8bc6e572a1b2f6796189bd9dee859ac1e3f1352880c130f2b5c4ad1d2ae26f44
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "647B87619C1637B2D1FFBC11B901450F969A6B8F7102DF9AED678C4FA1CCF76A"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5196
Expires: Mon, 28 Nov 2022 23:23:52 GMT
Date: Mon, 28 Nov 2022 21:57:16 GMT
Connection: keep-alive

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:17 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 02 Dec 2022 20:51:20 GMT
ETag: "9d918a14d384f076788a9c18bd94d9f126dc0419"
Last-Modified: Mon, 28 Nov 2022 20:51:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 777
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77165bbd6827b500-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4860fdc4db6b20fdfcbfdf18c0191e1f
Sha1:   9d918a14d384f076788a9c18bd94d9f126dc0419
Sha256: 353db2e26be2fd628a0c2991f66e1514b360d13e98573d00016559ddf40c6cd5
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 28 Nov 2022 21:57:17 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Fri, 02 Dec 2022 20:51:20 GMT
ETag: "9d918a14d384f076788a9c18bd94d9f126dc0419"
Last-Modified: Mon, 28 Nov 2022 20:51:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 777
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77165bbd7b7f0b45-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    4860fdc4db6b20fdfcbfdf18c0191e1f
Sha1:   9d918a14d384f076788a9c18bd94d9f126dc0419
Sha256: 353db2e26be2fd628a0c2991f66e1514b360d13e98573d00016559ddf40c6cd5
                                        
                                            POST /g/collect?v=2&tid=G-LW7434MYMN&gtm=2oeb90&_p=1107737117&cid=986422114.1669672636&ul=en-us&sr=1280x1024&_s=1&sid=1669672635&sct=1&seg=0&dl=https%3A%2F%2Finfcjal.cn%2FrE9OTncp%2FQatarair%2F%3F_t%3D1669672635041&dr=http%3A%2F%2Fotbomks.cn%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://infcjal.cn
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://infcjal.cn
date: Mon, 28 Nov 2022 21:57:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-0C230YDF7G&gtm=2oeb90&_p=1107737117&cid=986422114.1669672636&ul=en-us&sr=1280x1024&_s=1&sid=1669672635&sct=1&seg=0&dl=https%3A%2F%2Finfcjal.cn%2FrE9OTncp%2FQatarair%2F%3F_t%3D1669672635041&dr=http%3A%2F%2Fotbomks.cn%2F&dt=&en=page_view&_fv=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://infcjal.cn
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

search
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://infcjal.cn
date: Mon, 28 Nov 2022 21:57:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12101
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12101
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12101
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12101
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12101
Expires: Tue, 29 Nov 2022 01:18:59 GMT
Date: Mon, 28 Nov 2022 21:57:18 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uGocx-Lv8ieJVvICjnTGQZyzaQzjVdICX2RZaNyBTQvUKeIcNxaCJQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:38:02 GMT
age: 51556
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10176
Md5:    03014221d7f49b50ffc2d1b0a0e75457
Sha1:   772d86ad983042a728ee3490630a9cf1134ad0dd
Sha256: 81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1ee10f9-36dd-4ca4-986e-a80758149640.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8460
x-amzn-requestid: 51416479-3854-4f1a-9d86-35e104c57f6a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnkHuZIAMF-_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852963-180b323d4a45fa2f29f9b1fc;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ieDA8l_Up51cFaB9IExlSs8A5m-H77va1rCVF_WRMg_FN53Xakipuw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:55 GMT
age: 623
etag: "be4c4d01fc67218e26a3e9d27a2f708e639c9d4b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8460
Md5:    516776052e5e906ea9f42d25bae5cc85
Sha1:   be4c4d01fc67218e26a3e9d27a2f708e639c9d4b
Sha256: 28e70e38cfad65ad8a7a68ab1dc78747c7013a87b854fc35b163cc5765cd0570
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8106
x-amzn-requestid: 73d1b662-99a8-4ad7-95f9-c0b1ebf7c45a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnQEhQoAMFbLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852961-64954bc92997c9302e291381;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UO4hCMgPgR4-ld-QCKgNPrq4p1gduUSA5R4ffZmnFodBj-1_NcFLmg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:37:21 GMT
age: 1197
etag: "b703ea2cc2fcd68e60135ff77d5a5f1b93fac128"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8106
Md5:    5ab97acd46d3380fa12711c96b3c2d35
Sha1:   b703ea2cc2fcd68e60135ff77d5a5f1b93fac128
Sha256: aeeaa56714fbd157e788cd24da03d43ede527959e2563e6d7d99489753dee85f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F306bb762-e2a8-4771-9a39-086c46f94b11.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7549
x-amzn-requestid: bb37235a-8c7d-47fe-abb6-6cc633560165
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cP-7lHmsoAMF9lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638311e3-1f2a4abc40119f3e026dc393;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 07:29:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ds96jURZ0epaXMg2oTUETRQCpHwlVJrl5hTqvpUAWEGVa5rbDve1FA==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:42 GMT
age: 636
etag: "600859401c885cc2cdd1f199cccc198eb41d6a04"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7549
Md5:    415b1b1d5a29fc17b4114bb3df1d1c22
Sha1:   600859401c885cc2cdd1f199cccc198eb41d6a04
Sha256: abfbf4ecf2423736a29686859f6a8f2b77204b48f3f60d208f6d491e80611e7f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1172c72b-d329-4446-80cb-92b8cf104425.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3944
x-amzn-requestid: 8a6732c1-72da-4a73-ba51-8533c6a01a9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNmfFgeIAMFjLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6385295c-0c807d93277bfb7f6b13c2ee;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:20 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oW4xFfsPp-Jmf28Uc88iZ2jLgtMRjn2gW0orrJ4K201r6Y6OlHkacQ==
via: 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:51 GMT
age: 627
etag: "5008d7344dd85ae61a598c17e7baf427def3e25d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3944
Md5:    9cd333c474420e235831d96ed881167e
Sha1:   5008d7344dd85ae61a598c17e7baf427def3e25d
Sha256: 2178a96e120661e43d8e8ed0df1fcf500caf4c58db9e1bedaf0706af0a80b286
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7faa45dd-b9de-4dae-a2d6-ee678d7d3906.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9015
x-amzn-requestid: 9f657586-a44e-46f0-8c38-f1bf26142486
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVOlEE6ZoAMFUPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852aed-1da2400f4165dd553418f8b9;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:41:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mqdz1NhVCqmSrhYLIF0miDzrBiS82SUU6ZRFzDMllbCwS70hC0rMRQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:46:55 GMT
age: 623
etag: "c6dfd277cdbd057472e6df6ad1a200f50684d442"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9015
Md5:    ae2e2986caa15a90b615147f229b51ec
Sha1:   c6dfd277cdbd057472e6df6ad1a200f50684d442
Sha256: ec3799922c38ee6394601744ff4b2c405ee44c4718a2b90c104134657f8b480b
                                        
                                            GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycdujKqP4OmsICcw4by2ej4M3gF2bmp67KcND5Yd7ZkChGu92L3U7j930k4J7s5KmD98KzStiLKDZt_7_8jjTVv4
expires: Mon, 28 Nov 2022 22:36:13 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 580
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iDvr%2Bo19XTr3hetG83uXqCD5uERXxATQZjbWtnMJUSMdLXsr%2FLQxvRMX4tuowPL9CfC%2F4zsCmGNVviTYQCtOxS74qIQrj2zTnk7UniVYmMulhfnaY518PdP5tckKHHhK9fU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bb82d23b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65446), with CRLF line terminators
Size:   43218
Md5:    3a83ec011f3849fbcf3a0213734309dc
Sha1:   f96a15a7c7fe36c1e55b163986842c43a64c7aaf
Sha256: c2971466ebc017a71f281c8e516b0af01918d9950090cd911b595c8ae00d15c5
                                        
                                            GET /hm.js?ba99808308e7272d58c43367a11d1204 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11267
Date: Mon, 28 Nov 2022 21:57:17 GMT
Etag: 53c1b79aa3ce98ad60fa66517f2c3f52
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=C88B5A80A7710C55; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (629)
Size:   11267
Md5:    6af1354aaf649e9736a53b071c261b0c
Sha1:   0ccf83bbc2a8685252686e5af70eecb6535b30f3
Sha256: 8d119109b12f05fc23c71bab76167d8c178a0028f9d8497cc6673b443c633271
                                        
                                            GET /hm.js?8b68846a3ac1709b0ec7199084ee5ea8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11258
Date: Mon, 28 Nov 2022 21:57:17 GMT
Etag: 832ef9297cf10ff3597d76cb773212cd
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=A19D417254F2C5EB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (620)
Size:   11258
Md5:    c95cdeb7d1139d57e5b005128312eb54
Sha1:   6c82a74962dc3bc1152b159de522f7773f68e53d
Sha256: 799059787c6da88dd4f06ca977656cce96e8a3ccff45ec17b1f4431b47815e9d
                                        
                                            GET /hm.js?730bc4fbdc7f73222399ea6e8a059c78 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11301
Date: Mon, 28 Nov 2022 21:57:17 GMT
Etag: 31a19d888e17959bc3c01d7d19582634
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=4BF135F787701BFF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (663)
Size:   11301
Md5:    60cd650c36a6780c690cb54d32e179cc
Sha1:   67225306464da8404eeafb6ed173bb58861a778e
Sha256: 6a62152271ab4cb14631caf446f222ad6eed79a9bd68cf22d9e7893d9c96329b
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=14115290&si=03f7fc2df8687cfa6c5f423f560ddb29&su=http%3A%2F%2Fotbomks.cn%2F&v=1.3.0&lv=1&sn=37442&r=0&ww=1280&u=https%3A%2F%2Finfcjal.cn%2FrE9OTncp%2FQatarair%2F%3F_t%3D1669672635041%231669672636247 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 21:57:18 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=14C8A4EBB4468160; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1088739945&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fotbomks.cn%2F&v=1.3.0&lv=1&sn=37442&r=0&ww=1280&u=https%3A%2F%2Finfcjal.cn%2FrE9OTncp%2FQatarair%2F%3F_t%3D1669672635041%231669672636247 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 21:57:18 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=405FEC756DAF6C33; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1402491956&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fotbomks.cn%2F&v=1.3.0&lv=1&sn=37442&r=0&ww=1280&u=https%3A%2F%2Finfcjal.cn%2FrE9OTncp%2FQatarair%2F%3F_t%3D1669672635041%231669672636247 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 21:57:18 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=067BF64FA282851E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=597375311&si=730bc4fbdc7f73222399ea6e8a059c78&su=http%3A%2F%2Fotbomks.cn%2F&v=1.3.0&lv=1&sn=37442&r=0&ww=1280&u=https%3A%2F%2Finfcjal.cn%2FrE9OTncp%2FQatarair%2F%3F_t%3D1669672635041%231669672636247 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Mon, 28 Nov 2022 21:57:18 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=230F04D01D3B0F96; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4EF7A801E1084CC8B7E82AA6388C61A964E12CAC2124BFD9B0402E44A7AB90DF"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15198
Expires: Tue, 29 Nov 2022 02:10:36 GMT
Date: Mon, 28 Nov 2022 21:57:18 GMT
Connection: keep-alive

                                        
                                            GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycds_5oPtcr3KFpC_u7Lnvdlqz8VeCGxAgHcXFP3zMljDMh6Q0ifyAwrLV7e0dbEbUBwQbF9kY0g0GrHWdqicRh8
expires: Mon, 28 Nov 2022 21:36:26 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2902
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h8YbXxXKdc6CuudrJfx7hvThTKnM12zN7Ln%2B2O0yQET6gSuJ6%2BUhIKzD9V6vEP%2F0XHGdu9eUlMpEJ1a8odFzgUrVDb6bq7ieC7kOPukKi4GN2irD%2B4KbG6qH04B6JyCTiJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bb84d63b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycdv0chj5F1Awc6K7Usaiie2qXL87Fxg5kp7mYqQH9s8HWV5Nuv0HuTqJ2hz1F5xUG9MGapUfK4P-pfLXRasYr-w
expires: Mon, 28 Nov 2022 21:36:39 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2902
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZxHp3hmnZ1Q425xeSdYBKwHdkJujiGAE86jTO0%2BNNNXgvrWVixcohbbbbYlbPTY%2FIJjVwjrJ2wKKvwCoUtRJTqxrgiS0VB8vtr6%2FJNO32adzykvoMJ8gLXL4S9xSPG1jblo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bb88dbfb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/responsive.js HTTP/1.1 
Host: bonepa.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.66.201.42
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 28 Nov 2022 21:57:16 GMT
last-modified: Wed, 02 Nov 2022 13:52:39 GMT
etag: W/"63627627-e32"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /rE9OTncp/Qatarair/?_t=1669672635041 HTTP/1.1 
Host: infcjal.cn
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://otbomks.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         172.67.198.191
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Mon, 28 Nov 2022 21:57:15 GMT
vary: Accept-Encoding
set-cookie: pType=mo; expires=Mon, 28-Nov-2022 22:09:15 GMT; Max-Age=720; path=/; domain=infcjal.cn Qatarair-tthh1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.infcjal.cn Qatarair-tthh2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.infcjal.cn
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YlJBvN4KFuT6Fa4MQLk2o9V6tZZlHXboSQeViBoONZBa81K91k%2FUD9VdonzAMtic4OgJ3dLlKot2EkOk3tEBqlbl62n%2F5ArHUqrrNHu%2B1W23E6o4fzMKfZO8wpbf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77165bb64cfefac4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bnr.php?section=General&pub=593174&format=300x50&ga=g HTTP/1.1 
Host: uprimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.66.200.220
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Mon, 28 Nov 2022 21:57:16 GMT
expires: Mon, 28 Nov 2022 21:57:16 GMT
last-modified: Mon, 28 Nov 2022 21:57:16 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /upload/Qatarair.right.png HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.60.169
HTTP/2 404 Not Found
content-type: application/xml; charset=UTF-8
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycdtWUtgiEa8WV8mLFkG79Hb_rYp4Dy8lsC2bKOZ6xM16QnY6W-AsMwhdjOVxnisFw4owMfwhnQnj01x-VzeyFFbQ7RJTyz_E
expires: Mon, 28 Nov 2022 21:57:16 GMT
cache-control: private, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7IVfYFO2r%2FoF8GiXUg3rs2aoseGytYku1vWJZvrtIebWdm4PSjK5aCFSGKExhUva21oHjzqssGGaixdW2dNWo4VP%2F9JcwtTx5yM22%2Bpak0vmH9Iu6m0uZyAUdIOJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba3fd80b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Mon, 28 Nov 2022 21:33:58 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2902
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6iCpyPrhppH1714SvlB5SSxkzQeEWT%2FXL5SliE9it6T7Tz1NumgaJTCkQ2P4u1HrWiDefWPzxyTs1bthBYFksoDOKLytbILg18AxpwmQF0Q2P8VIRwSv%2FyepcYqFI%2FPy6ck%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bb84d6db51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166967263671457&xtt=1716764 HTTP/1.1 
Host: uprimp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.66.200.220
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Mon, 28 Nov 2022 21:57:16 GMT
expires: Mon, 28 Nov 2022 21:57:16 GMT
last-modified: Mon, 28 Nov 2022 21:57:16 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /upload/Qatarair.left.png HTTP/1.1 
Host: cdnkey.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.60.169
HTTP/2 404 Not Found
content-type: application/xml; charset=UTF-8
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycdu0HOdjxDVtuugIMmP-5kNaOZ7ZmA2HsGw8vMFqHtWbq3lPkaSwR1NaikYF-GU_NKIZY4tjWKg6OTEcX35xEGvpE_o6HR9E
expires: Mon, 28 Nov 2022 21:57:16 GMT
cache-control: private, max-age=0
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uDc18OQ3eSfjG%2BGZJjj41ptzRTMEy%2Fxgh7pRv7M%2B5KzPT%2BFyho8NWdJmj%2BUGL2mKO%2BSU%2B5XJ8KM6I%2FmdYieBc7QIhYWblHzVNEmSymD9%2FFFrsDchwGHkX6XRhFFT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bba3fca0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /4fe48aebd6/4f59451604/?placementName=Adver&is_first=true&randomA=0_7785&maxw=0 HTTP/1.1 
Host: bonepa.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         185.66.201.42
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Mon, 28 Nov 2022 21:57:18 GMT
set-cookie: shown1=0; expires=Tue, 29-Nov-2022 21:57:18 GMT; Max-Age=86400; secure; SameSite=None used_ad2633440=1; expires=Tue, 29-Nov-2022 04:59:59 GMT; Max-Age=25361; path=/; secure; SameSite=None total_impressions=1; expires=Tue, 29-Nov-2022 04:59:59 GMT; Max-Age=25361; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://infcjal.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/css
                                        
date: Mon, 28 Nov 2022 21:57:16 GMT
x-guploader-uploadid: ADPycduCHwg6n53VPzNb_-57qJzhoPJbEBdMgpsWgTX19t4NIh3Tdte6MCXenDGQTAuiJrpSRG3G9WDZErClLNvZVXhXccOSWw
expires: Mon, 28 Nov 2022 21:35:57 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2902
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2FGv73yznGtWJsTl%2BcwXz%2F5qjy317UAPv3Ym2NAH4eXZYzoH31NQ6GUdJ6TSxraXsX45mk1Se8SftVO6HBJViz90VfX%2BzcxujqJrXN4RxXRYLb9FrQntbAokG2XXg2UtyFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77165bb83d41b51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---