mixturecardinal.top/ok/tb.php?_t=16631414131663141889734
200 OK 611 B URL HTTP/1.1 mixturecardinal.top/ok/tb.php?_t=16631414131663141889734
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (516), with CRLF line terminators
Hash c1ae6afa2df34b46818f1826ee08989f
1dc4ad9011a80c5a800e440a76caa10abd318647
949631c34a28cfd24f8ef5a90b3f72d457763134fccc7bef82f2c3453889c947
GET /ok/tb.php?_t=16631414131663141889734 HTTP/1.1
Host: mixturecardinal.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a8Wwjy9c9vBuJRik2bm83wHkBsBMk4evdmK3l0o9E5Ty7C4NWv1iplz8xSzXw%2F1yXkQG1IaS8yS90l5g0TWL74upQLgQy714nW6555BcZdSJMHoeBvbCvlDZWxm5wrOrE%2Fl%2B03t1"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74b2d9b8ccdeb4fa-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 15 Sep 2022 16:10:28 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: c6YWNi-iLUOs6_dhTSGp-rAgC2cScrL9ljpSIPJQboW0BdZj1S_YGA==
Age: 2284
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3145
Expires: Thu, 15 Sep 2022 17:40:57 GMT
Date: Thu, 15 Sep 2022 16:48:32 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 15 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: WJ0-EwZaZ75s5yUQ6Ehs1eJ_Awu3acrABkYWKBw1LaL9UFMY-gRO2w==
age: 43997
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:32 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
mixturecardinal.top/favicon.ico
200 OK 455 B URL HTTP/1.1 mixturecardinal.top/favicon.ico
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 3c5d244b8b6b192c76a2c4331450c235
7e53f5ad871fcd67705eaf77f1ca9ff247143e1e
e0f26b6349453a86cd1f0f87cfd80559ef7edb6d88ff0af9ced7d7e413c548e3
GET /favicon.ico HTTP/1.1
Host: mixturecardinal.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mixturecardinal.top/ok/tb.php?_t=16631414131663141889734
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:32 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2016 03:54:11 GMT
ETag: W/"5861e5e3-1b0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ukt9ZIOqFhcpWYfFM8txr8sIHeIMGfQabPpIsJOCQLjVbWyaJW5pXEqOuKb8M5VCkyahlLKiCKJ7nKQ6p%2FV81MGGSXrWh7wbK4jtv6ZJCmz%2BC2gspQvx75SMgHo2HLC7o5joZXpa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b2d9bb2ac9b4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
mixturecardinal.top/j/og2.js?_t=1663260497351
200 OK 876 B URL HTTP/1.1 mixturecardinal.top/j/og2.js?_t=1663260497351
IP
File type ASCII text, with CRLF line terminators
Hash 2d6350fea6534899c3dbc91efae400fd
8ed4afa3b9c401e2dcc9cd82af8c915ba4859566
5c6048548ed96c7f85dbbe63390ba8e39018f8aec5e922264bcbaf69844414f3
Analyzer Verdict Alert fortinet Phishing
GET /j/og2.js?_t=1663260497351 HTTP/1.1
Host: mixturecardinal.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://mixturecardinal.top/ok/tb.php?_t=16631414131663141889734
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 18 Aug 2021 07:18:25 GMT
Vary: Accept-Encoding
ETag: W/"611cb441-7af"
Expires: Fri, 16 Sep 2022 04:48:32 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=irwXc0XHPSQQ8gSbuxVfP0nicvIOmVKovew8GaVc%2BWdlMPJ%2BWajThuBR1DPSwkO4cQK7CGlzI7xlTfAHAkcDWBTK1miHso7ca1b%2BysWrFFdLpqVn4ZMLJSO%2BReurFwtY7C%2BbHWuW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74b2d9bbebd5b4ff-OSL
alt-svc: h2=":443"; ma=60
mixturecardinal.top/j/og2.php?_t=1663260497465
200 OK 90 B URL HTTP/1.1 mixturecardinal.top/j/og2.php?_t=1663260497465
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 157c20fb3023883ae4c9231ef4b98eb8
9b7c35d41942e377982465ff6fd41e66c82bc498
46e381a3976abf977db74df489fbaa28b425975fe536c17c925c6e2a1dc37504
POST /j/og2.php?_t=1663260497465 HTTP/1.1
Host: mixturecardinal.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 40
Origin: http://mixturecardinal.top
Connection: keep-alive
Referer: http://mixturecardinal.top/ok/tb.php?_t=16631414131663141889734
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:32 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YVbnTBQwG%2BOlA4BcDqObdC46tUt8Pwyyf1nZVAumdU1l6r6yjM9u9iryj7d3F28HeHXYh7Kj8lE6DVteYYz4oF%2FW5LC1n4C8UWspvuAsipOUitZw5vqCQcIRQcfDapXo%2BI98W1Xd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74b2d9bc9cacb4ff-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 15 Sep 2022 16:03:22 GMT
Expires: Thu, 15 Sep 2022 16:03:50 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fGgkhJ6nsFnRTMspfR1Nv5haYrhrwX0D1I_mucGyPISx9yBgP3iFpg==
Age: 2711
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 56b4a90e8be043082aa30d490fe93e47
6c94d4b9610ec757d7e7851ac2e478edff1309f8
c59724a0ece262f497d3f09f4e90ae49a11a3a150134183cc10ef2c47f5fe9b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dbf088fc63bc806e9dff12bf5888d88e
99431befaf577afc83115dd15b2c00502e996e88
d65aa5d3f7bfebb479dca1ace0a280af0ef886caded597f28de9ecde61179c9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dbf088fc63bc806e9dff12bf5888d88e
99431befaf577afc83115dd15b2c00502e996e88
d65aa5d3f7bfebb479dca1ace0a280af0ef886caded597f28de9ecde61179c9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-ZLVHRZ6C3D
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-ZLVHRZ6C3D
IP
File type ASCII text, with very long lines (17807)
Hash fa36cb63f5c9f76fc353a6835df55f69
6525a5e405bf2cacbc6abf0e0ac1c37f90843afe
7d6fb2c98964b369febd89ef67a58d062ebc1f3b441b056edc5094380e873d20
GET /gtag/js?id=G-ZLVHRZ6C3D HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Thu, 15 Sep 2022 16:48:33 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74655
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash dbf088fc63bc806e9dff12bf5888d88e
99431befaf577afc83115dd15b2c00502e996e88
d65aa5d3f7bfebb479dca1ace0a280af0ef886caded597f28de9ecde61179c9c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
200 OK 32 kB URL HTTP/2 cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
IP
File type ASCII text, with very long lines (65446), with CRLF line terminators
Hash 707957c56bf80b92f22614fffddc00c4
c2cbdbfc4194fed479133bde70e2ae4d1c3b82bd
3ff8298933f6ab0609b2280a2c16c49a577401feb5893a6a0dd34a36fd3a1daa
GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdujKqP4OmsICcw4by2ej4M3gF2bmp67KcND5Yd7ZkChGu92L3U7j930k4J7s5KmD98KzStiLKDZt_7_8jjTVv4
expires: Thu, 15 Sep 2022 16:49:36 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nmPrmRvHUcXuD8Ww6V0dqwYlNxi5nAICs73qOHEzDh1Mpe0wxkIZ3YRtDrXfeI%2F35oGt%2FY1%2Ff6yCWHMCWFbmfAwnOTIAivyLquY2frBQotiC5SCcP%2Fjvk6uk6kTyeZbbT20%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b2d9bf0c17b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-YkICnu0MND8/YOmSgYEBdmI/AAAAAAAACNo/lX5TkKBkOXUPD4JeiQEmCiIabMSMSBK9QCLcBGAsYHQ/s16000/box1.png
200 OK 8.0 kB URL HTTP/2 1.bp.blogspot.com/-YkICnu0MND8/YOmSgYEBdmI/AAAAAAAACNo/lX5TkKBkOXUPD4JeiQEmCiIabMSMSBK9QCLcBGAsYHQ/s16000/box1.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash 1508443d4983a4b90f845c046e5844bf
9232bf4891d2297625e0f761bf63d182c7eac2c4
c5cd3b181e174b476eae4fee77535ff4715037a78da544e6d94c21aec6e8a43c
GET /-YkICnu0MND8/YOmSgYEBdmI/AAAAAAAACNo/lX5TkKBkOXUPD4JeiQEmCiIabMSMSBK9QCLcBGAsYHQ/s16000/box1.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="box1.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 8021
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Tue, 13 Sep 2022 23:39:41 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8e3"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Ckf0qrE79iQ/YSJwyFfzj4I/AAAAAAAADfA/0VgRUyoVxIw1zxk8p2GEkgQklYC9vPcoACLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-8.jpg
200 OK 11 kB URL HTTP/2 1.bp.blogspot.com/-Ckf0qrE79iQ/YSJwyFfzj4I/AAAAAAAADfA/0VgRUyoVxIw1zxk8p2GEkgQklYC9vPcoACLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-8.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 290x300, components 3\012- data
Hash 9e374a3051fd244974204d82954fc1ab
931e0199a434498135523da3713762a8efad5e85
32cced06567e4fa1d45f8a7b9d49c783078cd9c6d6e5593a64dc5d31b9a6c314
GET /-Ckf0qrE79iQ/YSJwyFfzj4I/AAAAAAAADfA/0VgRUyoVxIw1zxk8p2GEkgQklYC9vPcoACLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-8.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="___-8.jpg";filename*=UTF-8''%E6%9C%AA%E6%A0%87%E9%A2%98-8.jpg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10644
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Sun, 11 Sep 2022 15:32:13 GMT
cache-control: public, max-age=86400, no-transform
etag: "vdf6"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9a8e7f186187f5ba006b7f674e03e8c8
5d0cbc715849a6c30ce1c7b770657526b9ed00f8
3ba4200c500a026d37b523348ae9e9a006c0117a63f59b991fb3ac4faecc7bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3BA4200C500A026D37B523348AE9E9A006C0117A63F59B991FB3AC4FAECC7BC9"
Last-Modified: Thu, 15 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15699
Expires: Thu, 15 Sep 2022 21:10:12 GMT
Date: Thu, 15 Sep 2022 16:48:33 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3b816941816ca5fed922c0604e9da8dc
94c14ea6c512c6c262479b4299f1cd4dd99ea5cd
a05000788114487ba8b8c661ba1370b29c96a93a16275b3fab497cf75722b51d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d597af1ab2f21a983bf0f0d105b94209
9d5dd938777abde094c89066b539141a02106b88
a614eb7f969544c8040642be7c852625341e2441e757d063d2af1ff465c8c3f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5222
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Last-Modified: Thu, 15 Sep 2022 15:21:31 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 21dff4be7a54275d6fa2d1e8abe81e54
ff9ac400cdc9a1dbc2c778397caaf3fbbafb5e87
a5a45aeea3e30c56305cb9bf85e87741d5fca77fb9262ac489882597482cb20e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-Ge2XxynrSsY/YTPnHq5Z6JI/AAAAAAAAE2U/l-XVs300jHc63Ivwma6CRZLzEtZz7fXZQCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-19.jpg
200 OK 15 kB URL HTTP/2 1.bp.blogspot.com/-Ge2XxynrSsY/YTPnHq5Z6JI/AAAAAAAAE2U/l-XVs300jHc63Ivwma6CRZLzEtZz7fXZQCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-19.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 290x300, components 3\012- data
Hash 28bd6b203b7c7ae17761c6160f5aeddd
56d140432fb8743156104464e9d5847f99b4ef88
992007966321782b471c10a18bb94352050693e9cbd5e5f6a030564559cd7ea2
GET /-Ge2XxynrSsY/YTPnHq5Z6JI/AAAAAAAAE2U/l-XVs300jHc63Ivwma6CRZLzEtZz7fXZQCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-19.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="___-19.jpg";filename*=UTF-8''%E6%9C%AA%E6%A0%87%E9%A2%98-19.jpg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 15449
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:57 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1367"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-yGoyD6utCEc/YUNYJYUN6II/AAAAAAAAGCA/mIsZ1FHksMs_KGGYT8w-_DSzCUiGUIoyACLcBGAsYHQ/s16000/666.jpg
200 OK 60 kB URL HTTP/2 1.bp.blogspot.com/-yGoyD6utCEc/YUNYJYUN6II/AAAAAAAAGCA/mIsZ1FHksMs_KGGYT8w-_DSzCUiGUIoyACLcBGAsYHQ/s16000/666.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x404, components 3\012- data
Hash d4d88c1721b1c225a74a315d59743afc
3856093927bc413f25d540f790fc28b4cb3147f3
92a7bb5600133824bd7904617874135c7405f89ff34a46e4949e94058c56a90d
GET /-yGoyD6utCEc/YUNYJYUN6II/AAAAAAAAGCA/mIsZ1FHksMs_KGGYT8w-_DSzCUiGUIoyACLcBGAsYHQ/s16000/666.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="666.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 59606
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:55 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1822"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-msU0_EOCB-8/YTPnHnWQDiI/AAAAAAAAE2Q/c9M9ag5Nh7wgwnYS7erBIcyzePhIyTHrwCLcBGAsYHQ/s0/170546009_244458764135675_9219053955235565457_n.jpg
200 OK 9.9 kB URL HTTP/2 1.bp.blogspot.com/-msU0_EOCB-8/YTPnHnWQDiI/AAAAAAAAE2Q/c9M9ag5Nh7wgwnYS7erBIcyzePhIyTHrwCLcBGAsYHQ/s0/170546009_244458764135675_9219053955235565457_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 320x320, components 3\012- data
Hash 36af549f3d429aaeea7535a92c199b68
4c786a28cc25864f11983d8210a9874c9d89cd8d
c531543d63e6324374075bc4a280712dcc15c9f2f66dfead80ba20982c0e7978
GET /-msU0_EOCB-8/YTPnHnWQDiI/AAAAAAAAE2Q/c9M9ag5Nh7wgwnYS7erBIcyzePhIyTHrwCLcBGAsYHQ/s0/170546009_244458764135675_9219053955235565457_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1366"
expires: Fri, 16 Sep 2022 16:48:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="170546009_244458764135675_9219053955235565457_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 16:48:33 GMT
server: fife
content-length: 9937
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-51eB84pMWVU/YUNYJS4gDmI/AAAAAAAAGB8/WaGkPjSmLEEf1rH-FLysXZ2Y4p_92GnfQCLcBGAsYHQ/s16000/888.jpg
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-51eB84pMWVU/YUNYJS4gDmI/AAAAAAAAGB8/WaGkPjSmLEEf1rH-FLysXZ2Y4p_92GnfQCLcBGAsYHQ/s16000/888.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 213x126, components 3\012- data
Hash bf9cf1099aa175591dafdc0ae994c455
af0716bc143b65c6cf257d013b564023b58d439c
49435e4de22a178969426fef6184413bbca8403d30af39710681cd36bf29027d
GET /-51eB84pMWVU/YUNYJS4gDmI/AAAAAAAAGB8/WaGkPjSmLEEf1rH-FLysXZ2Y4p_92GnfQCLcBGAsYHQ/s16000/888.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1821"
expires: Fri, 16 Sep 2022 16:48:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="888.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 16:48:33 GMT
server: fife
content-length: 12052
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-5AcZf7kZuH0/YTPmG9ChL8I/AAAAAAAAE18/fmurnYguaVgmPlfzYcNoIBcS1T_zjo6OQCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-4.jpg
200 OK 15 kB URL HTTP/2 1.bp.blogspot.com/-5AcZf7kZuH0/YTPmG9ChL8I/AAAAAAAAE18/fmurnYguaVgmPlfzYcNoIBcS1T_zjo6OQCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-4.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 290x300, components 3\012- data
Hash 84db4def2f19cd114b16fca9cd1124d9
d28c2b430af9907823118cb8b70ac6aef182f898
f1e6203b817e72a90c680bdc461b17b591ee914d3e5e201da5b842331b8b21b4
GET /-5AcZf7kZuH0/YTPmG9ChL8I/AAAAAAAAE18/fmurnYguaVgmPlfzYcNoIBcS1T_zjo6OQCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-4.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="___-4.jpg";filename*=UTF-8''%E6%9C%AA%E6%A0%87%E9%A2%98-4.jpg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 15343
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:55 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1361"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-0OB99oJJv44/YTPmWiECeAI/AAAAAAAAE2I/9bInANTD9MY7Pu-rq4RNTxvdm1PTAYzCwCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-20.jpg
200 OK 14 kB URL HTTP/2 1.bp.blogspot.com/-0OB99oJJv44/YTPmWiECeAI/AAAAAAAAE2I/9bInANTD9MY7Pu-rq4RNTxvdm1PTAYzCwCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-20.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 290x300, components 3\012- data
Hash c3053f2388a511ee65771e1147baf3e9
73d155382a53bbf4d19861d096dfde4e7f045494
003444ed03ef38787d8ccd2ff012b4884eb8fb1b378ef3f37a47158aea834d7f
GET /-0OB99oJJv44/YTPmWiECeAI/AAAAAAAAE2I/9bInANTD9MY7Pu-rq4RNTxvdm1PTAYzCwCLcBGAsYHQ/s0/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-20.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="___-20.jpg";filename*=UTF-8''%E6%9C%AA%E6%A0%87%E9%A2%98-20.jpg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13977
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:55 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1363"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 35676536f3508b6262906c7297667ef7
7911dd266cd2cfba3e382022c35c6da868d87b90
2a3da4b2f4fe740d156ec60dc2d454994aae73f9458f033cc99d552b54051507
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A3DA4B2F4FE740D156EC60DC2D454994AAE73F9458F033CC99D552B54051507"
Last-Modified: Thu, 15 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 15 Sep 2022 22:48:33 GMT
Date: Thu, 15 Sep 2022 16:48:33 GMT
Connection: keep-alive
1.bp.blogspot.com/-SCbjAIdV6-g/YSJwjyQDmwI/AAAAAAAADeM/jXynRq8tW2UjcGrSNmE4FGDcAUVnNOUBQCLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-11.jpg
200 OK 15 kB URL HTTP/2 1.bp.blogspot.com/-SCbjAIdV6-g/YSJwjyQDmwI/AAAAAAAADeM/jXynRq8tW2UjcGrSNmE4FGDcAUVnNOUBQCLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-11.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 290x300, components 3\012- data
Hash 40c2ce65b253770916c20f290ab41b9c
cf882b50ca5c4fc3e6aad6b9ff21450ae0138100
9edeab7e0b683488b2775723e098f02678f7f1580cfec78534c1659d91b312ee
GET /-SCbjAIdV6-g/YSJwjyQDmwI/AAAAAAAADeM/jXynRq8tW2UjcGrSNmE4FGDcAUVnNOUBQCLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-11.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="___-11.jpg";filename*=UTF-8''%E6%9C%AA%E6%A0%87%E9%A2%98-11.jpg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 15402
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Sun, 11 Sep 2022 15:32:10 GMT
cache-control: public, max-age=86400, no-transform
etag: "vdf3"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-sJmDdO2uphE/YUNXR9jXUhI/AAAAAAAAGBw/i2LCsEUItSE0Der1rb3nLatvQDv1gXITwCLcBGAsYHQ/s16000/1.jpg
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-sJmDdO2uphE/YUNXR9jXUhI/AAAAAAAAGBw/i2LCsEUItSE0Der1rb3nLatvQDv1gXITwCLcBGAsYHQ/s16000/1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 117x120, components 3\012- data
Hash 4315d694f3be15de9bfe8e726ba235bf
f86648fc96f0efadc8ec02865f12883e92e65a53
4bae54379d79caf018d4c76b00f1b281f99f0cbdf817490f243cbe423fe64d9f
GET /-sJmDdO2uphE/YUNXR9jXUhI/AAAAAAAAGBw/i2LCsEUItSE0Der1rb3nLatvQDv1gXITwCLcBGAsYHQ/s16000/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="1.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11534
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:55 GMT
cache-control: public, max-age=86400, no-transform
etag: "v181e"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-qwwSJi9h2E8/YUNaT13uHWI/AAAAAAAAGCQ/C0XgFim6QUoBMVQeXj8AuDh47nAl49wggCLcBGAsYHQ/s16000/666.png
200 OK 42 kB URL HTTP/2 1.bp.blogspot.com/-qwwSJi9h2E8/YUNaT13uHWI/AAAAAAAAGCQ/C0XgFim6QUoBMVQeXj8AuDh47nAl49wggCLcBGAsYHQ/s16000/666.png
IP
File type PNG image data, 450 x 450, 8-bit colormap, non-interlaced\012- data
Hash c0e962b83f691a5a32b341db15ca8b9c
a5beb1880d22b7c56af5b4cf405038973a6c0a8c
d702a0eb0b27b0e1b22637443e41541e5e4f1fc617b51d151a91a16f0a4027d0
GET /-qwwSJi9h2E8/YUNaT13uHWI/AAAAAAAAGCQ/C0XgFim6QUoBMVQeXj8AuDh47nAl49wggCLcBGAsYHQ/s16000/666.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="666.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 41739
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:55 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1825"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-9OsLa-2U9IY/YUNaTl1ZgQI/AAAAAAAAGCM/-SOOVHolFUwVWpVx8Vx5b23mInaf0s5pACLcBGAsYHQ/s16000/888.png
200 OK 15 kB URL HTTP/2 1.bp.blogspot.com/-9OsLa-2U9IY/YUNaTl1ZgQI/AAAAAAAAGCM/-SOOVHolFUwVWpVx8Vx5b23mInaf0s5pACLcBGAsYHQ/s16000/888.png
IP
File type PNG image data, 257 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 334d177c001f387dde9258db29f8f809
fe682cb5c0849deaf6f60fe3c83fed0bd13cb6ce
f7ce0fbad51977b0a7b746c500a678c3b7ab8247e57513e59e0b886e2d9fc664
GET /-9OsLa-2U9IY/YUNaTl1ZgQI/AAAAAAAAGCM/-SOOVHolFUwVWpVx8Vx5b23mInaf0s5pACLcBGAsYHQ/s16000/888.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="888.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 14563
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Fri, 09 Sep 2022 13:32:57 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1825"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Fik3eC5Zx-Q/YTPmG7AJ_zI/AAAAAAAAE14/3Hx0rH_1HlgeCPspKl4YT5Lvcr6VLDRCwCLcBGAsYHQ/s320/144682450_213931157146144_1769039669115452262_n.jpg
200 OK 30 kB URL HTTP/2 1.bp.blogspot.com/-Fik3eC5Zx-Q/YTPmG7AJ_zI/AAAAAAAAE14/3Hx0rH_1HlgeCPspKl4YT5Lvcr6VLDRCwCLcBGAsYHQ/s320/144682450_213931157146144_1769039669115452262_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x320, components 3\012- data
Hash f773dd169f50ebd7659ad3a34db3fcb2
27d113e72e351a5de8d2ba44f8f35e4b0f29a171
a5c2c247d210efa19dfb8818a571334267704eee05aaee0036efa514f7c2f14e
GET /-Fik3eC5Zx-Q/YTPmG7AJ_zI/AAAAAAAAE14/3Hx0rH_1HlgeCPspKl4YT5Lvcr6VLDRCwCLcBGAsYHQ/s320/144682450_213931157146144_1769039669115452262_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1360"
expires: Fri, 16 Sep 2022 16:48:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="144682450_213931157146144_1769039669115452262_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 16:48:33 GMT
server: fife
content-length: 29557
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-dlZWmXsBRtk/YOmSgcn-MbI/AAAAAAAACNk/akitNN8HwGk_odCfiBIsjfxiSpCZa_VKwCLcBGAsYHQ/s16000/box2.png
200 OK 1.6 kB URL HTTP/2 1.bp.blogspot.com/-dlZWmXsBRtk/YOmSgcn-MbI/AAAAAAAACNk/akitNN8HwGk_odCfiBIsjfxiSpCZa_VKwCLcBGAsYHQ/s16000/box2.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash fe9e422f3d45f280678bba0606c520b5
c36bf30ea9c15589e176ff2768fbfd5bd95792c8
3e2aced5a4c0dcf5e9f54eb2e71ccdd6df628d8d55807353a9c3316c33c2ef8c
GET /-dlZWmXsBRtk/YOmSgcn-MbI/AAAAAAAACNk/akitNN8HwGk_odCfiBIsjfxiSpCZa_VKwCLcBGAsYHQ/s16000/box2.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="box2.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1597
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Tue, 13 Sep 2022 23:39:41 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8e4"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-jQMURIB-YMs/YSJwmUx9g0I/AAAAAAAADew/lL6-PnU9r1gKe2SCmJv-gSUlJ2aG7eoSQCLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-5.jpg
200 OK 16 kB URL HTTP/2 1.bp.blogspot.com/-jQMURIB-YMs/YSJwmUx9g0I/AAAAAAAADew/lL6-PnU9r1gKe2SCmJv-gSUlJ2aG7eoSQCLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 290x300, components 3\012- data
Hash b7d5a69317bc668bbe2ff1faf9693bbc
5521562af214be1b04aa137ae9128a4a2d0f8df2
b6edfa579017e874bfa3bddf395061e2b84b496bd9f451fa0976619f2ab6705b
GET /-jQMURIB-YMs/YSJwmUx9g0I/AAAAAAAADew/lL6-PnU9r1gKe2SCmJv-gSUlJ2aG7eoSQCLcBGAsYHQ/s16000/%25E6%259C%25AA%25E6%25A0%2587%25E9%25A2%2598-5.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vdf3"
expires: Fri, 16 Sep 2022 16:48:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="___-5.jpg";filename*=UTF-8''%E6%9C%AA%E6%A0%87%E9%A2%98-5.jpg
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 16:48:33 GMT
server: fife
content-length: 16120
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mvD9KEVw4hq9baxOWyKiSQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: TPw2nm3IOCQ1r7JLiFMIRiS/Ya0=
1.bp.blogspot.com/-Ey83XmOz6dc/YOmShEWbJdI/AAAAAAAACNw/h_oUcvOE8b0DQgJ9XOJAa2T1PPoH0bUKwCLcBGAsYHQ/s16000/box3.png
200 OK 1.1 kB URL HTTP/2 1.bp.blogspot.com/-Ey83XmOz6dc/YOmShEWbJdI/AAAAAAAACNw/h_oUcvOE8b0DQgJ9XOJAa2T1PPoH0bUKwCLcBGAsYHQ/s16000/box3.png
IP
File type PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Hash d0c239cab73add49a834f0e896c4a9a5
edf7e76649b3ffa9d0ddde053404dd6f1bda1631
3507d652db2a63e74f933d1f49442d0b7ea8024ed8fada4a6be1e7425d72d17a
GET /-Ey83XmOz6dc/YOmShEWbJdI/AAAAAAAACNw/h_oUcvOE8b0DQgJ9XOJAa2T1PPoH0bUKwCLcBGAsYHQ/s16000/box3.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="box3.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1120
x-xss-protection: 0
date: Thu, 15 Sep 2022 16:48:33 GMT
expires: Tue, 13 Sep 2022 23:39:41 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8e6"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-RHvU_xjJtig/YSJwxQHKi0I/AAAAAAAADe0/B2q8ppbSF3sDYipORpnfD64sZflYzp0tACLcBGAsYHQ/s16000/151655504_267686088055023_53510521785750382_n.jpg
200 OK 1.1 MB URL HTTP/2 1.bp.blogspot.com/-RHvU_xjJtig/YSJwxQHKi0I/AAAAAAAADe0/B2q8ppbSF3sDYipORpnfD64sZflYzp0tACLcBGAsYHQ/s16000/151655504_267686088055023_53510521785750382_n.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 2048x2048, components 3\012- data
Size 1.1 MB (1107802 bytes)
Hash 3d5e2184a172e2df4a4f91b10bc3057b
0af622fd8887a6d4bc8f2e23257ecfdcbb681a61
7980012af86f01df392cdf1a2837017279a3295a9d4ae5e28be37c1549a71f43
GET /-RHvU_xjJtig/YSJwxQHKi0I/AAAAAAAADe0/B2q8ppbSF3sDYipORpnfD64sZflYzp0tACLcBGAsYHQ/s16000/151655504_267686088055023_53510521785750382_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vdf4"
expires: Fri, 16 Sep 2022 16:48:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="151655504_267686088055023_53510521785750382_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Sep 2022 16:48:33 GMT
server: fife
content-length: 1107802
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 5876fc7431a9877e967c8266ff1a1534
91b22a8f575c48309bd80ebd00040666fc3b7ecc
ae2a633259c18027d85da6aa0390ee709dea81e4711b0b211c98176be6463659
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 19 Sep 2022 12:42:04 GMT
ETag: "91b22a8f575c48309bd80ebd00040666fc3b7ecc"
Last-Modified: Thu, 15 Sep 2022 12:42:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1994
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b2d9c4c98db506-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 5876fc7431a9877e967c8266ff1a1534
91b22a8f575c48309bd80ebd00040666fc3b7ecc
ae2a633259c18027d85da6aa0390ee709dea81e4711b0b211c98176be6463659
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 19 Sep 2022 12:42:04 GMT
ETag: "91b22a8f575c48309bd80ebd00040666fc3b7ecc"
Last-Modified: Thu, 15 Sep 2022 12:42:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1994
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b2d9c4dcc6fac4-OSL
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 5876fc7431a9877e967c8266ff1a1534
91b22a8f575c48309bd80ebd00040666fc3b7ecc
ae2a633259c18027d85da6aa0390ee709dea81e4711b0b211c98176be6463659
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Sep 2022 16:48:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 19 Sep 2022 12:42:04 GMT
ETag: "91b22a8f575c48309bd80ebd00040666fc3b7ecc"
Last-Modified: Thu, 15 Sep 2022 12:42:05 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1994
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74b2d9c4d993b506-OSL
region1.google-analytics.com/g/collect?v=2&tid=G-ZLVHRZ6C3D>m=2oe9e0&_p=119850120&cid=7978217.1663260498&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663260498&sct=1&seg=0&dl=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562&dr=http%3A%2F%2Fmixturecardinal.top%2F&dt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-ZLVHRZ6C3D>m=2oe9e0&_p=119850120&cid=7978217.1663260498&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663260498&sct=1&seg=0&dl=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562&dr=http%3A%2F%2Fmixturecardinal.top%2F&dt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-ZLVHRZ6C3D>m=2oe9e0&_p=119850120&cid=7978217.1663260498&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1663260498&sct=1&seg=0&dl=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562&dr=http%3A%2F%2Fmixturecardinal.top%2F&dt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://f7x01k.cyou
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://f7x01k.cyou
date: Thu, 15 Sep 2022 16:48:34 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed1a966e9770807ef8b4f57a5113d29a
d843a3d371ee0424004f68ccc32ce06e6bc6e6c7
4932c01d3db39a9ac2f0f7e2693af95e5a334697edfd8d078fd52e421ba43721
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2396
Expires: Thu, 15 Sep 2022 17:28:30 GMT
Date: Thu, 15 Sep 2022 16:48:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2396
Expires: Thu, 15 Sep 2022 17:28:30 GMT
Date: Thu, 15 Sep 2022 16:48:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9bfbb189fcbbdc76ff274e424f39053
de008d728f2274f08019c97bc969ddd6fe64a65d
a4f07d30f29e785e2ee605aee590ab928c3e1412f4dc61ff163cf32445cc3af4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A4F07D30F29E785E2EE605AEE590AB928C3E1412F4DC61FF163CF32445CC3AF4"
Last-Modified: Tue, 13 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2396
Expires: Thu, 15 Sep 2022 17:28:30 GMT
Date: Thu, 15 Sep 2022 16:48:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a6939786c9343412c9af87efd3f44e0
14131148fda4e8d85b582fd20e76bcc814341bf1
8412c50f0fdc131d9c4422f2d7307fc1ee062c3580a1d754ef71cf84f9727d49
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e9a2626-acb3-4c73-9ff9-e09ad82d489e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8447
x-amzn-requestid: 3237c2fa-bc17-4b8d-8afd-bacfaa90ca71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FypF7KIAMFd7A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63145010-7052273b184685c83569c712;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:13:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wzi_WnjJW5XjIfj8kyVL4LcQEjcuw1_zwrDiJegEZ2r8GOZcQahPEw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:46:45 GMT
age: 68509
etag: "14131148fda4e8d85b582fd20e76bcc814341bf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4833535b1650b0ac875704023b650e66
96ab8cd8e14350f730d26731f3445710324e24e2
d2b5a51e39a4890ba56e819d4d5d1d57d4d3cfc50dde42efdf23b8e9be17d1c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F86bf6a5e-a3e5-479d-a052-fa843c45a3d9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9400
x-amzn-requestid: 8cf35176-18a1-427b-870c-bdae465060c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYM18E-iIAMFcmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ff4f2-427bc0ff6593e71e25b91589;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 03:11:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZVnPAYUOBCRUYD3wEx79lIMjBJCKyVB9CmnTqMJIaFPbQGPoHwB73w==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:37 GMT
age: 73617
etag: "96ab8cd8e14350f730d26731f3445710324e24e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3ef9865421a37eae9a4df04083d27485
c7cf1f6a259cece60a34261ec83ee00736e1d72b
723b65ba660f22281f85d6caceea23e9cd932ee9084dc905a08a585746c4c4cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F706eea65-3ba8-43f4-85c3-967026936660.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9922
x-amzn-requestid: de1e3e45-74ff-41b2-986f-e78473cb6d98
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVc1SGM7IAMFw0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631edb54-2099524d6f2c338b41eea101;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 07:10:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MtgQUzYMa3mT0lxPhQ5ZCp9XVVyBH8T0dlx_0wSLMZlaFEiCikTXMw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:25:51 GMT
age: 66163
etag: "c7cf1f6a259cece60a34261ec83ee00736e1d72b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f50c34bc30a732593e8fe465055a44ff
af100925cba1be716fd2200715d6136bd7f0c5bc
703049736ccc8815945d69634059c4cd39533417e0969107d460c36a6787c761
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1266c973-1bdd-4969-82ca-1106689fe929.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5078
x-amzn-requestid: b6177371-a8ba-4541-a48d-21bd806e866e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0erUHT-IAMFWKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ab15-157ed5b700e0aad5481f5c0f;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:04:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MYJf90B8rX8_nPUl4stpbZcQeQDaZ2Hgyu6GmsfdqUh-0Nx5OJJThw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 20:21:54 GMT
age: 73600
etag: "af100925cba1be716fd2200715d6136bd7f0c5bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
200 OK 9.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1633672fad0b564108cf81ad711dc881
d37ad0f40bc1f3f0022467dd0af2478980bd858a
cc7176a297f6009f07074fb9af796132b4452833be675bf378cc950fe81a582a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb035d64b-46a7-4c49-b95b-e454aa90f817.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9071
x-amzn-requestid: b450f7cf-6cc7-4d1f-aef3-4496f0971727
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeIxuEq6oAMF9jQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632254d7-6912ef8731d81fa43b805e5b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:25:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 6LDUuDX1W8-Q88pDJma0xCAd5QuJ0YV-VpJ_8LVyDHX9YN1k0fQZ8Q==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 22:36:39 GMT
etag: "d37ad0f40bc1f3f0022467dd0af2478980bd858a"
content-type: image/jpeg
age: 65515
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2e5f57ba37fac4e6047a9a321a8ec084
f6b742549ea35a4b1345cffb937a8bbcceee08ef
f8c67c54806e47089b9ba297599e3e4cde1fd2e2e38b76acc9e8de0e99d7b77e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fafb10f81-8409-401c-bd62-3ec01954600c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6770
x-amzn-requestid: b7c9513c-b8ba-41c7-9f9a-0a9d2266172d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X7FlpEVRIAMFygA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63144fbd-7a4408363cdc46c9355a9f47;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fqj5PljprRruE1jwYAVwKoHkjys-RakUjzuV67_Ued6T4et99JPxPg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 21:45:05 GMT
age: 68609
etag: "f6b742549ea35a4b1345cffb937a8bbcceee08ef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?
200 OK 0 B IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hm.js? HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Length: 0
Date: Thu, 15 Sep 2022 16:48:34 GMT
Server: apache
Strict-Transport-Security: max-age=172800
Content-Type: text/plain; charset=utf-8
hm.baidu.com/hm.js?18af5d9426e0e767b998732325589f3c
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?18af5d9426e0e767b998732325589f3c
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (673)
Hash 370b50868a29572fa955b1fe05f9536d
c82af79694ebc11d98537aad33d93feecd00d68e
0d0e395c3de016c40aa6381c4d5df2d3ae6a9655c2e7e8cf4083e6bd82a53388
GET /hm.js?18af5d9426e0e767b998732325589f3c HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11386
Content-Type: application/javascript
Date: Thu, 15 Sep 2022 16:48:34 GMT
Etag: 10afb1ab931a5c2a2acf67fd41bb1577
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=10F745B230903EB8; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?fe2131a30a7eef80970fad70159cd124
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?fe2131a30a7eef80970fad70159cd124
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (694)
Hash 3743f5c641269a1a849a6463f17685f7
6ec2028312d6e09397629e3a665e3507ad1d0d2c
27d2f8cc4b32601059a639c1f6f283b844f45c9b7e0e4562080745b8f07a3370
GET /hm.js?fe2131a30a7eef80970fad70159cd124 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11407
Content-Type: application/javascript
Date: Thu, 15 Sep 2022 16:48:34 GMT
Etag: 8124048f22fd7b9e174b86f66a88c130
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=2D26844D3892716A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=824465075&si=18af5d9426e0e767b998732325589f3c&su=http%3A%2F%2Fmixturecardinal.top%2F&v=1.2.97&lv=1&sn=47735&r=0&ww=1280&ct=!!&u=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562%231663260498611&tt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=824465075&si=18af5d9426e0e767b998732325589f3c&su=http%3A%2F%2Fmixturecardinal.top%2F&v=1.2.97&lv=1&sn=47735&r=0&ww=1280&ct=!!&u=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562%231663260498611&tt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=824465075&si=18af5d9426e0e767b998732325589f3c&su=http%3A%2F%2Fmixturecardinal.top%2F&v=1.2.97&lv=1&sn=47735&r=0&ww=1280&ct=!!&u=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562%231663260498611&tt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 15 Sep 2022 16:48:35 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=BC764ED75A4ABD3A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=233890234&si=fe2131a30a7eef80970fad70159cd124&su=http%3A%2F%2Fmixturecardinal.top%2F&v=1.2.97&lv=1&sn=47735&r=0&ww=1280&ct=!!&u=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562%231663260498611&tt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=233890234&si=fe2131a30a7eef80970fad70159cd124&su=http%3A%2F%2Fmixturecardinal.top%2F&v=1.2.97&lv=1&sn=47735&r=0&ww=1280&ct=!!&u=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562%231663260498611&tt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=233890234&si=fe2131a30a7eef80970fad70159cd124&su=http%3A%2F%2Fmixturecardinal.top%2F&v=1.2.97&lv=1&sn=47735&r=0&ww=1280&ct=!!&u=https%3A%2F%2Ff7x01k.cyou%2Fqa6SC1Jk%2Fok%2F%3F_t%3D1663260497562%231663260498611&tt=%F0%9F%8E%89OK%2020th%20Anniversary!%F0%9F%8E%8A HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 15 Sep 2022 16:48:35 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=670960E79DFAECB7; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c86fc6649c7c512abb52fcd62d51ee26
bf241d6c1779668447df444a239d715b6ed46f6d
822cb499ea058f2c40ce4942048528575fadc172d3669007f5f34fae41c7ea49
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Sep 2022 16:48:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Catamaran:800&display=swap
200 OK 876 B URL HTTP/2 fonts.googleapis.com/css?family=Catamaran:800&display=swap
IP
Hash 0105049ae353c5b4204e1e7d143989f4
b4c5a2149c0aa21ebaa48601cf1ee11af3fa87bb
03372aa3b52031d32e4f3122f24e3e0fb174e6da511106e33076cf8d10153426
GET /css?family=Catamaran:800&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Sep 2022 16:48:36 GMT
date: Thu, 15 Sep 2022 16:48:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5517d50345a39e4b4ea5423d037c1eb
2dfd997fc6f00e185519e1de47103136d02975e2
75e1470d17b8b333ce659640572df343a55dceecee0101440e6f2616954e73ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75E1470D17B8B333CE659640572DF343A55DCEECEE0101440E6F2616954E73EE"
Last-Modified: Thu, 15 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6891
Expires: Thu, 15 Sep 2022 18:43:27 GMT
Date: Thu, 15 Sep 2022 16:48:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5517d50345a39e4b4ea5423d037c1eb
2dfd997fc6f00e185519e1de47103136d02975e2
75e1470d17b8b333ce659640572df343a55dceecee0101440e6f2616954e73ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75E1470D17B8B333CE659640572DF343A55DCEECEE0101440E6F2616954E73EE"
Last-Modified: Thu, 15 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6891
Expires: Thu, 15 Sep 2022 18:43:27 GMT
Date: Thu, 15 Sep 2022 16:48:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f5517d50345a39e4b4ea5423d037c1eb
2dfd997fc6f00e185519e1de47103136d02975e2
75e1470d17b8b333ce659640572df343a55dceecee0101440e6f2616954e73ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "75E1470D17B8B333CE659640572DF343A55DCEECEE0101440E6F2616954E73EE"
Last-Modified: Thu, 15 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6891
Expires: Thu, 15 Sep 2022 18:43:27 GMT
Date: Thu, 15 Sep 2022 16:48:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b391d821b238bb8751f8213bac154e9d
f391d2447ffd7e8a3a12c8ad60c51be7e36f7122
fc8f40fbcf8769f46f362b9dbcc9d5c2317b5c9e411fe6b7bbe3483a688f8461
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC8F40FBCF8769F46F362B9DBCC9D5C2317B5C9E411FE6B7BBE3483A688F8461"
Last-Modified: Thu, 15 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3507
Expires: Thu, 15 Sep 2022 17:47:03 GMT
Date: Thu, 15 Sep 2022 16:48:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b391d821b238bb8751f8213bac154e9d
f391d2447ffd7e8a3a12c8ad60c51be7e36f7122
fc8f40fbcf8769f46f362b9dbcc9d5c2317b5c9e411fe6b7bbe3483a688f8461
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC8F40FBCF8769F46F362B9DBCC9D5C2317B5C9E411FE6B7BBE3483A688F8461"
Last-Modified: Thu, 15 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3531
Expires: Thu, 15 Sep 2022 17:47:27 GMT
Date: Thu, 15 Sep 2022 16:48:36 GMT
Connection: keep-alive
uprimp.com/bnr.php?section=General&pub=995577&format=300x50&ga=g
200 OK 0 B URL HTTP/2 uprimp.com/bnr.php?section=General&pub=995577&format=300x50&ga=g
IP
ASN #201702 skHosting.eu s.r.o.
GET /bnr.php?section=General&pub=995577&format=300x50&ga=g HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: application/javascript
expires: Thu, 15 Sep 2022 16:48:33 GMT
last-modified: Thu, 15 Sep 2022 16:48:33 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
IP
GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycds_5oPtcr3KFpC_u7Lnvdlqz8VeCGxAgHcXFP3zMljDMh6Q0ifyAwrLV7e0dbEbUBwQbF9kY0g0GrHWdqicRh8
expires: Thu, 15 Sep 2022 17:44:02 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7lcgMtaJ9ULkS15048sS3XPOk4%2BBIn1M1h4RwUKkkSfISIPYdYUUuIRNdA7WEWBkmRRyFjPx1oZs7XzhdrblnxBhYbPYwMtyVT0%2Fqp3FD2AGARsQzRaSf8hsbslAPz25HGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b2d9bf0c1eb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
benfly.net//c39aadb942/da1c750f07/?placementName=default&randomA=0_3742&maxw=0
200 OK 0 B URL HTTP/2 benfly.net//c39aadb942/da1c750f07/?placementName=default&randomA=0_3742&maxw=0
IP
ASN #201702 skHosting.eu s.r.o.
GET //c39aadb942/da1c750f07/?placementName=default&randomA=0_3742&maxw=0 HTTP/1.1
Host: benfly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:35 GMT
content-type: text/html; charset=UTF-8
set-cookie: shown1=0; expires=Fri, 16-Sep-2022 16:48:35 GMT; Max-Age=86400; secure; SameSite=None
used_ad2751933=1; expires=Fri, 16-Sep-2022 03:59:59 GMT; Max-Age=40284; path=/; secure; SameSite=None
total_impressions=1; expires=Fri, 16-Sep-2022 03:59:59 GMT; Max-Age=40284; secure; SameSite=None
used_c_58827=1; expires=Fri, 16-Sep-2022 16:48:35 GMT; Max-Age=86400; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/unicorn.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/unicorn.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/unicorn.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:24:51 GMT
vary: Accept-Encoding
etag: W/"5d9da763-20b52"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/ufo.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/ufo.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/ufo.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:25:05 GMT
vary: Accept-Encoding
etag: W/"5d9da771-13b4b"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/fire.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/fire.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/fire.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:26:37 GMT
vary: Accept-Encoding
etag: W/"5d9da7cd-17dc1"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
IP
GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdv0chj5F1Awc6K7Usaiie2qXL87Fxg5kp7mYqQH9s8HWV5Nuv0HuTqJ2hz1F5xUG9MGapUfK4P-pfLXRasYr-w
expires: Thu, 15 Sep 2022 17:47:32 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UttAXDVvKohITNpPIWdIPlllq%2FJ2z849YSCVPzAV5xSBGznCSDYBqh6qBjv6zo3x%2FUtw12l3c04dNDw0AW9QuBFfiuCl%2Bogun8nsmzkDsE8n5zzobtA4xQ9OA1%2F2597esYg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b2d9bf0c1ab4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
IP
GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/css
x-guploader-uploadid: ADPycduCHwg6n53VPzNb_-57qJzhoPJbEBdMgpsWgTX19t4NIh3Tdte6MCXenDGQTAuiJrpSRG3G9WDZErClLNvZVXhXccOSWw
expires: Thu, 15 Sep 2022 17:09:51 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vqkKFbmhLycbhnqlmN4hVDfvepTWQEmwA6LY5NhYTB1YdjsrIlEVwsBx%2BWn2Jm2YXhrfSwkuUjYBQ4k%2BbArptWRWMnsnWmm0MdPk%2FFzEArjacb7LWX8iV4yWRT%2FbzVbpvFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b2d9bf2c36b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
uprimp.com/bnr_xload.php?section=General&pub=995577&format=300x50&ga=g&xt=166326051330813&xtt=8036954
200 OK 0 B URL HTTP/2 uprimp.com/bnr_xload.php?section=General&pub=995577&format=300x50&ga=g&xt=166326051330813&xtt=8036954
IP
ASN #201702 skHosting.eu s.r.o.
GET /bnr_xload.php?section=General&pub=995577&format=300x50&ga=g&xt=166326051330813&xtt=8036954 HTTP/1.1
Host: uprimp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/html; charset=UTF-8
expires: Thu, 15 Sep 2022 16:48:33 GMT
last-modified: Thu, 15 Sep 2022 16:48:33 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/tornado.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/tornado.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/tornado.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:25:36 GMT
vary: Accept-Encoding
etag: W/"5d9da790-a397"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/spider.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/spider.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/spider.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:25:50 GMT
vary: Accept-Encoding
etag: W/"5d9da79e-f2f2"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/monster.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/monster.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/monster.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:26:27 GMT
vary: Accept-Encoding
etag: W/"5d9da7c3-6f44"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/shark.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/shark.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/shark.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:26:04 GMT
vary: Accept-Encoding
etag: W/"5d9da7ac-197f9"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
f7x01k.cyou/qa6SC1Jk/ok/?_t=1663260497562
200 OK 0 B URL HTTP/2 f7x01k.cyou/qa6SC1Jk/ok/?_t=1663260497562
IP
Analyzer Verdict Alert fortinet Phishing
GET /qa6SC1Jk/ok/?_t=1663260497562 HTTP/1.1
Host: f7x01k.cyou
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://mixturecardinal.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sMHsjKHFoJMXYZbg7R7Gy0YF74fym2n1C2m6110rKjYxMMbw2TN7h1qtqSL%2BLMzRmAbsUt7WMJTWNXLP39ZeXEuQ%2BfhVOu1LBHBuOeOOIwcRWL2fQgQQVjNFAfgmHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74b2d9bd89c1b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP
GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Thu, 15 Sep 2022 17:10:54 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YR54AgH39NZYOQD%2FVvq1siVEFRI8D6MO5czvOXWrYfASVZRwYdEEGRkYr8f1I5sU5F6FtjPei2w6oIIbiSXHPBEj51yCkjvrmslsKEs1%2BhhtLaKsttyJy2uPj3y0229Mjc0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b2d9bf2c34b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
200 OK 0 B URL HTTP/2 cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
IP
GET /npm/lazyload@2.0.0-rc.2/lazyload.min.js HTTP/1.1
Host: cdn.jsdelivr.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: text/javascript
x-guploader-uploadid: ADPycdsQwI6S5jC2ZwwNbaEnMvjelWJ3GXYdnwkp6yGGRsWcMv2CGKN45430-s2v57JOsXldQJq3rMwQOTmm_DkHtW4
x-goog-generation: 1647502963816044
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4798
x-goog-hash: crc32c=lted8w==, md5=3G3pgTxxS6mXM8pPtdOh+g==
x-goog-storage-class: STANDARD
expires: Thu, 15 Sep 2022 16:49:36 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:42:43 GMT
etag: W/"dc6de9813c714ba99733ca4fb5d3a1fa"
cf-cache-status: HIT
age: 21
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xSbn9jCvYML4bVman5c%2Fi3If0rFRvrrcGQ0qPEAxgO7zmm%2F%2BOsvkObGTkPmPnVTzeoPlxyno97JAkRGXcK%2BM8tB9Nwyt5PSmmPjpzt%2FzOS2BJs%2FRYkrNUmUMeIDqxfGIJbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74b2d9bf2c39b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/tsunami.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/tsunami.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/tsunami.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:25:19 GMT
vary: Accept-Encoding
etag: W/"5d9da77f-15e0e"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
benfly.net/js/responsive.js
200 OK 0 B URL HTTP/2 benfly.net/js/responsive.js
IP
ASN #201702 skHosting.eu s.r.o.
GET /js/responsive.js HTTP/1.1
Host: benfly.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://f7x01k.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:33 GMT
content-type: application/javascript
last-modified: Tue, 21 Dec 2021 14:23:16 GMT
etag: W/"61c1e354-b1d"
content-encoding: br
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/rocket.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/rocket.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/rocket.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:26:15 GMT
vary: Accept-Encoding
etag: W/"5d9da7b7-160b5"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
aff-a.advertica-cdn.com/genericImages/breaking-news/water.jpg
200 OK 0 B URL HTTP/2 aff-a.advertica-cdn.com/genericImages/breaking-news/water.jpg
IP
ASN #201702 skHosting.eu s.r.o.
GET /genericImages/breaking-news/water.jpg HTTP/1.1
Host: aff-a.advertica-cdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://benfly.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 15 Sep 2022 16:48:36 GMT
content-type: image/jpeg
last-modified: Wed, 09 Oct 2019 09:24:25 GMT
vary: Accept-Encoding
etag: W/"5d9da749-1ac32"
expires: Sat, 15 Oct 2022 16:48:36 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
104.21.49.14
143.204.55.35
93.184.220.29
104.18.20.226
185.66.200.220
23.36.76.226
103.235.46.191