504 B IP
ASN #20940 Akamai International B.V.
Hash 219f59137337a0ee601729cab5ec83f6
85f2e3496820405559fd526b44b9a915e0009a4f
f9701bf0083b06f4a573774d1a4dd491236216bc08f1006a94ce79144df70a21
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F9701BF0083B06F4A573774D1A4DD491236216BC08F1006A94CE79144DF70A21"
Last-Modified: Sat, 17 Aug 2024 00:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9475
Expires: Sun, 18 Aug 2024 19:43:18 GMT
Date: Sun, 18 Aug 2024 17:05:23 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 69a9603269726ce602d708bf57058c4c
8689e9ea81ea9636e7b08c3ed42650553a0c4e3b
1a2339d740b715f3df1900d80114c8376ead57205961a6f896edf37b3ee3a897
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1A2339D740B715F3DF1900D80114C8376EAD57205961A6F896EDF37B3EE3A897"
Last-Modified: Sat, 17 Aug 2024 09:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4782
Expires: Sun, 18 Aug 2024 18:25:06 GMT
Date: Sun, 18 Aug 2024 17:05:24 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 18f75729f3e25e2eb7f12b70dfce3849
479177b92dda7c4e8763c80a15cbc71c3386d06c
0b7da2da1fcba23c5118479e14828f87a605a32af15d0962f216115a9ff1d02a
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0B7DA2DA1FCBA23C5118479E14828F87A605A32AF15D0962F216115A9FF1D02A"
Last-Modified: Sun, 18 Aug 2024 15:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15188
Expires: Sun, 18 Aug 2024 21:18:32 GMT
Date: Sun, 18 Aug 2024 17:05:24 GMT
Connection: keep-alive
GET bliss-u.vip/rode-e-ganhe/images/red-arrow-left.png
200 OK 1.3 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/red-arrow-left.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Hash 92d3e482cacea857c5dfaf9fa3a21dfb
3f12c410c77d763cc4719ec367a18417b8300758
4a688dc66588e8e86e98ccadb318fa2aca3fd6e2444aac783278b982f3e47eef
GET /rode-e-ganhe/images/red-arrow-left.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:24 GMT
content-type: image/png
content-length: 1334
cf-ray: 8b537d126f4d568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "92d3e482cacea857c5dfaf9fa3a21dfb"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KpEwbaJ6Nr66n7zyxJZbTjCly3%2BRvOLKde8%2F5x057iH8kpSIm3SddRoKZCnHA9hY4KFaLnXqiTyDekN8I%2FJvMGtmby5FwV2VC5W%2F1H%2BSuIiHcudVTzFPunSa2ncL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/red-arrow-right.png
200 OK 1.4 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/red-arrow-right.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Hash 881bdc037be8895ba5d8d53456890e7e
4e105c89e2a1475520bb74c9c20bf2f9e906fcb3
9f8160d6380fef91c8eadecc6e8e59e93e3f5c40be7963018c8104bef4354d8f
GET /rode-e-ganhe/images/red-arrow-right.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 1362
cf-ray: 8b537d126f4e568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "881bdc037be8895ba5d8d53456890e7e"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IAthV7KJvQ7yHA4f9jDg8TzDLX7iWxyARo4AO5ytjxUIeKX4FW0bycZ8E7061%2BBTQqR5EhvnJFstIQllJrb7uIewRQXoBx57XpsUdJYln2sNMRY90o2x6tkDq0qy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/slot-spin.gif
200 OK 88 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/slot-spin.gif
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type GIF image data, version 89a, 410 x 279
Hash 617c16c5e04c8603dd7f157862b1c682
1306296f9a666a7fc50f339a2a924ce8a3a18169
7f8e36cf7ac437d7c42440ef5f522c8e27adb06348b573192308038fa7c1dc7e
GET /rode-e-ganhe/images/slot-spin.gif HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/gif
content-length: 87599
cf-ray: 8b537d126f46568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "617c16c5e04c8603dd7f157862b1c682"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ufsifqHVaLkW3QbIJHrhddwsRBdM%2BOX%2Fgm9afyLCLxZ%2BfoFqcfCPlCccvWyGvehqlxCYchlqfkteW840%2Bds0%2Fi0HthF0tQrzTmfE4B2fEJT3tEkkTYo2YnIs6BKc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/slot-result-2.png
200 OK 27 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/slot-result-2.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Hash b6ca0bfea4d0cec334f128f5c2c44cff
f6dc006902542a929187af718d9f6a244e5472b5
b09b477eb93ed896b8e52a2f746e435695dbef2a1259987bae4fbea3c35b5435
GET /rode-e-ganhe/images/slot-result-2.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 26733
cf-ray: 8b537d126f48568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "b6ca0bfea4d0cec334f128f5c2c44cff"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u8XEwW%2BQh%2BMHHBuf3wWI6i69iLdSdqxjWiMT3hbtuDGlxpxcn6q0VboyHU4p2yijZkOb1P0e%2FgBlqW6mMeUcu%2FlZtfqbomzoY2akp5mXJZ1WMTyNUNzWLSqvWNMJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
HEAD bliss-u.vip/rode-e-ganhe
405 Method Not Allowed 54 kB IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (65428), with CRLF line terminators
Hash dba8e2e4bd561ed9bbc677d1c1228d81
97904c115f6436a9c69b7c12b9a3af493e519ab9
84be440e5150ba0ee31afa135cbc4fb27a6ea22a6430dca12ed440c6b9c14131
GET /rode-e-ganhe HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:24 GMT
content-type: text/html
cf-ray: 8b537d0efa66568f-OSL
cf-cache-status: DYNAMIC
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l9AtYHJ5cXpWmKGP5AtrsllM%2FlN%2FaufxFCM0opqa0z7UEOt27xO9IoK5amYvDUzhyi8ci26voUorbI9e9WLY0AxYv7T9SDYEO%2BB1FGQMubnc1sdwLi4aIaZQvGxO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/slot-result-1.png
200 OK 20 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/slot-result-1.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Hash 1fbd2b26e61236d5bcfdfeb6adbd2c8c
c9034272d28dab018b73f1967a679c734f987a1f
c402c36eb8d623b618261d40846e63c130de1e78720ab5578eae1d645198c963
GET /rode-e-ganhe/images/slot-result-1.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 20370
cf-ray: 8b537d126f47568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "1fbd2b26e61236d5bcfdfeb6adbd2c8c"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQ24CQl9UIt4DyMI3ueDcgKGTPtqutW32VERKKKORUjqAbs7OuRb83VHknOyvtmK1WtqCXTeCwj0Op%2Fnt88B6pM26xNYWkVMuB1gYN7ALKR6BPKZwGDWOpOxB3M7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/img/cvryhplba94tez2qfu13.png
200 OK 2.0 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/img/cvryhplba94tez2qfu13.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 50 x 40, 8-bit/color RGBA, non-interlaced
Hash 4ed8569da39640ae49951629db20af80
2def4182a04f00dfce08f07a4beca01fc9c4c707
8fe40d65adc940ade90ab246ee21ef988eb1907d75ca1d729b4d501926485e8d
GET /rode-e-ganhe/img/cvryhplba94tez2qfu13.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 1961
cf-ray: 8b537d126f43568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "4ed8569da39640ae49951629db20af80"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MFM1HkDBbDXek53fP1AOq2i%2FJvvlEK3Q%2B2zURI%2Fi3cDPyh4amwKZ9%2BuHwybnSd5uElYBvo%2Bu0AMNP7XkdSRkWBgX1jQbwjVal%2BQfAjdHo3LZDF45ytJfLdv3cTk5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/slot-win.png
200 OK 14 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/slot-win.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Hash 939b6a73c96383ac0842317037f3a0f0
0654b62431c8ba522833950b8166d7a16e2a6b56
b8f1ec0ac028bd024af2cf57b63b07069b2f4a41e61c1577e968ca5d7ba72837
GET /rode-e-ganhe/images/slot-win.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 14391
cf-ray: 8b537d126f4c568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "939b6a73c96383ac0842317037f3a0f0"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sr5Tp7y6zjWiL7v3%2FDc4%2FZ%2BmBpQoNEmsOrz8HXUI%2FfYCK5ETQjxSfPx1O46p4dngEJKICh5kixYZlqxihDWjWsolloZXquP07owlU6FUPgp0NGIFw6lgmwYRfdZg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
HEAD bliss-u.vip/rode-e-ganhe
405 Method Not Allowed 0 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /rode-e-ganhe HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 405 Method Not Allowed
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/plain;charset=UTF-8
content-length: 24
allow: GET
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=erjyqMI%2FgmhPRgXZsdFUQIwSK7Fa1Hj5s8eroBBFEyeiFzROwc%2FGomsn%2Fsdy%2Bqc3YB8wPWT%2FYxkJr4cZZIhFPYK%2FJ%2F5%2FxmkThOVjiOhamL54SlLg6YEweS5cY5R3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b537d1459ad568f-OSL
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/arrow.png
200 OK 154 B URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/arrow.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 12 x 12, 4-bit colormap, non-interlaced
Hash 4daf12b0677dd9ae8923d3154187d1d8
d20e8f0a0c1a72d20cd421ba5e162ff938896e51
5351d7b058d47812c8a2c74bccef9389a11e3df9cd19874d95b7000c8ab9ea9e
GET /rode-e-ganhe/images/arrow.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe/css/style.css
Cookie: llRequestData={"country":"Norway","city":"Høvik verk","region":"Akershus","postalCode":"1363","browser":"Firefox","operatingSystem":"Linux","device":"Desktop"}; landerlab-abtest-variantId=e8a69bf65aefc23d0f360ab695e9eac7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 154
cf-ray: 8b537d14aa47568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "4daf12b0677dd9ae8923d3154187d1d8"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SuKisPURyDM3MZ%2BWSc81tRGGVHmvvymvn1V1in9Lj7S0VoPrUT8XnBzTTE5sqyDSWJorTtEeYmGgaJM6dDTg8IlvgzlJtRR%2FFBR%2F0uo%2FVgEctO%2BqZBuakWCd5mNq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET omoonsih.net/3bT/27mJf/universal.min.js?v=3.1.548
200 OK 54 kB URL GET HTTP/2 omoonsih.net/3bT/27mJf/universal.min.js?v=3.1.548
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
File type gzip compressed data, max speed, from Unix
Hash 0a3e78b746987be210e4e16cff9953ae
bbdb0a637f957111b28fb7fca3f31baa1dcca1cf
f5a67665e314e64183227997aabb6b6fa439663ddc8b7a1cf0acc68f6b39e1c1
GET /3bT/27mJf/universal.min.js?v=3.1.548 HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: application/javascript
last-modified: Fri, 16 Aug 2024 10:33:11 GMT
etag: W/"66bf2ae7-13e8b"
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
cache-control: max-age=14400
pragma: no-cache
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FL8GOQFcqbRHB8DDmvxZdNWR5ehJibpCr4lZuKwumGAAsTqG%2FXe7py8ufD28IWIkS4IVMV3wUUXtfHNk%2BT4ikBttoO0e7h%2BJv8jBBYZnWx2Q8cwqqUzB%2Bpp9k9%2Bssg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b537d152e1956c4-OSL
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/sounds/alert.mp3
200 OK 8.8 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/sounds/alert.mp3
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
Hash 6d2d3da2ea28ace816fa4a138829dc18
606e0ec3d7fb05c69f16233cfe1ff0a0ee760505
d79bc81189750262716692ade6cc4d6fb6c4fbc4aa01c2b9d0aa67e5788821fc
GET /rode-e-ganhe/sounds/alert.mp3 HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Cookie: llRequestData={"country":"Norway","city":"Høvik verk","region":"Akershus","postalCode":"1363","browser":"Firefox","operatingSystem":"Linux","device":"Desktop"}; landerlab-abtest-variantId=e8a69bf65aefc23d0f360ab695e9eac7; llCountdown={}
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: audio/mpeg
content-length: 8802
cf-ray: 8b537d160c2f568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "6d2d3da2ea28ace816fa4a138829dc18"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=51ZD68wyxy8%2BrhhZRIocR8xmvsXColC5Qs9NXiKIpR5fCwfg%2BHveiQ4IosCPWKvgNtRnFb3S56oX%2BvRlN4tlJ8jKN2kqFwoX59bz32Kx%2BszPaNgST8v3inTcpqw%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/sounds/spin.mp3
200 OK 51 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/sounds/spin.mp3
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo
Hash 390bca8d165546a8097b8951d2f400d4
1385d88b3aeee07bc51e7955fbcb9ed7586ebdec
cdb080d348cd2222fbe1d5b54da2f9db8fdca881570a9c82899082203b000b78
GET /rode-e-ganhe/sounds/spin.mp3 HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Cookie: llRequestData={"country":"Norway","city":"Høvik verk","region":"Akershus","postalCode":"1363","browser":"Firefox","operatingSystem":"Linux","device":"Desktop"}; landerlab-abtest-variantId=e8a69bf65aefc23d0f360ab695e9eac7; llCountdown={}
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: audio/mpeg
content-length: 51290
cf-ray: 8b537d160c38568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "390bca8d165546a8097b8951d2f400d4"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYU0cLW62Pnk47jVe8wu0rK0WgtU4MXJzl0BaSZ4QMzHnKxOCnzy8B64aHaFsq3sWVTBhASAxVgpYnkI5HRt16EwZeplpfL7NeaU3VbrOtrO1RmL%2BKxYL0vj9b1P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET track.landerlab.io/cf/p/64b966d601851a0012f6ed13?lander_id=d12f3b5c457a92abbc87939406df183f&uid=1f0e3dad99908345f7439f8ffabdffc4&variant_id=e8a69bf65aefc23d0f360ab695e9eac7
200 OK 0 B URL GET HTTP/2 track.landerlab.io/cf/p/64b966d601851a0012f6ed13?lander_id=d12f3b5c457a92abbc87939406df183f&uid=1f0e3dad99908345f7439f8ffabdffc4&variant_id=e8a69bf65aefc23d0f360ab695e9eac7
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerLet's Encrypt
Subjectlanderlab.io
FingerprintA5:D4:C8:1A:61:C8:A5:F2:44:77:34:39:B4:0A:B2:5A:C2:7B:C5:DC
ValidityThu, 18 Jul 2024 00:28:45 GMT - Wed, 16 Oct 2024 00:28:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cf/p/64b966d601851a0012f6ed13?lander_id=d12f3b5c457a92abbc87939406df183f&uid=1f0e3dad99908345f7439f8ffabdffc4&variant_id=e8a69bf65aefc23d0f360ab695e9eac7 HTTP/1.1
Host: track.landerlab.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-length: 0
cache-control: no-cache
set-cookie: worker_cookie=N4Igdgpg7g+gFgSwC4wQExALhAVgCxoCcADAEwBmAxgLQCMOARntXgIbkPWu0XUBs7CITwRSAdgDMrPCAA0IAG4IAzslQZstMWlZ8xlVtXJixpFlsMAOWja5jyhBgzF9LEonMUq1SBAFsIZSRWPwAHLBBSMmZiSzpLABUtTGIcTFIcADocUkIALU8lVSQAewAndQjaVgo+clTqUlJqlijmSzEcchYxCEpSNFoGGoYMeQMw1gQAczBK7D48BkI+PjQ+YlpLHGriTdqIQYlPMBK0CBhKOCmwLABtAF15FRhIKCxyVgAbZQgAXyAA==; Expires=Mon, 19 Aug 2024 17:05:25 GMT; Domain=track.landerlab.io; Path=/; SameSite=None; Secure
__cf_bm=f56MuGSMM6NTdBGqnBVU1WMN4rf1DqsRX1pmsKB.1zk-1724000725-1.0.1.1-IMjTtrQLQj7T05WT.PYBHJvCV52OEiKYropV1ruhZFdImmaIEdhHpkb1ubhxfTxKnIO8n1mB10P1j.bqqpJouQ; path=/; expires=Sun, 18-Aug-24 17:35:25 GMT; domain=.track.landerlab.io; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b537d164bddb509-OSL
X-Firefox-Spdy: h2
OPTIONS omoonsih.net/custom
200 OK 0 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VcvBtJaUhDGISIvMmiOISAR4KMHdxqHdnm6VuLQibWqax7Iez%2B5LAYm3LPfVoUWK%2FYDIMsSDH3Pw%2FCEJzwr0sQUUeTmgwShBcVCGxz1mguPeIivkKSZ87q1oX9gCPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d187abd56c4-OSL
X-Firefox-Spdy: h2
GET bliss-u.vip/favicon.ico
200 OK 1.1 kB IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type HTML document, ASCII text
Hash a547d9183088b6f253a2412e866865b2
2be3aa90fe40c116c72d4ad8c061d0c26675486f
e06cbcf48d8c9b416799461d2ea8e5c3fbe7d64e66f306aaefcd17e73d456e5d
GET /favicon.ico HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Cookie: llRequestData={"country":"Norway","city":"Høvik verk","region":"Akershus","postalCode":"1363","browser":"Firefox","operatingSystem":"Linux","device":"Desktop"}; landerlab-abtest-variantId=e8a69bf65aefc23d0f360ab695e9eac7; llCountdown={}
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ig2Ob9clDtISr91FDIyCDoMe1IyjXVxD45QXLBGu7T56W4hCpdis0QE3xFiX1Ocn4QBzV4ft6pyKOYTRHAwitejudu38y2%2Fkmtp87gbOG%2F0e1UHJ7%2FoYvCGHFfaA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b537d17ced0568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
POST omoonsih.net/event
200 OK 0 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SS59YVwrM0iM96K8%2BtOzZlIgSz8SDCDjtVnaKChUlxlSoXXJKToSnerqXhxcVsKTGbpcq58V8%2BHPHafYmuNyxkojW4lgRiYs5LGxzaq2q3CikQKjhVEl93Z%2B7CTXlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d188ac456c4-OSL
X-Firefox-Spdy: h2
OPTIONS omoonsih.net/custom
200 OK 39 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Content-Type: application/json
Content-Length: 372
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: application/json; charset=utf-8
content-length: 39
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B6lUWl9njWiyQtic7R%2Fx1oIPsBOKEKUdk38CgE0mIQVK0XgTH%2BBjaRrWeiRxqscdFuCEPnkXHssdGqiwCD7UknVnlv%2FF1Ary%2FKLPSAWfMYIxPVKxB4Ay94fDk0MOlA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d18bb315695-OSL
X-Firefox-Spdy: h2
OPTIONS omoonsih.net/custom
200 OK 39 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Content-Type: application/json
Content-Length: 749
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: application/json; charset=utf-8
content-length: 39
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=naquWH4rVI%2FKpaRDNl6bYLn9%2BftID7azaqgFbmhsx8MVxw7RjDhf2tGrTuTyY1SGiX0VGYmaQ%2BnXFIK4lmbTZkGGppF4Ye%2BMCUfR9FU%2Bc0jql%2FTPwP8HmVrDv8rn%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d18bb395695-OSL
X-Firefox-Spdy: h2
GET bliss-u.vip/sw.js
200 OK 1.1 kB IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type HTML document, ASCII text
Hash a547d9183088b6f253a2412e866865b2
2be3aa90fe40c116c72d4ad8c061d0c26675486f
e06cbcf48d8c9b416799461d2ea8e5c3fbe7d64e66f306aaefcd17e73d456e5d
GET /sw.js HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/rode-e-ganhe
DNT: 1
Connection: keep-alive
Cookie: llRequestData={"country":"Norway","city":"Høvik verk","region":"Akershus","postalCode":"1363","browser":"Firefox","operatingSystem":"Linux","device":"Desktop"}; landerlab-abtest-variantId=e8a69bf65aefc23d0f360ab695e9eac7; llCountdown={}
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A3woGGO7IO43ZjuxKI59lbLnCX%2FzFUBvbTK5mpnByarvg%2B%2FogQZvrwLNuj1rMYa8J4VvR%2BrEWJbQ4qBlvbogL3gTbA15kj61JVIG%2BGuD6ZoPzBUyPxymkStoEI3f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b537d186f91568f-OSL
content-encoding: br
X-Firefox-Spdy: h2
OPTIONS auchoahy.net/event
200 OK 0 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerLet's Encrypt
Subjectauchoahy.net
Fingerprint3A:DE:56:77:2E:4A:67:9D:EB:BA:DD:AD:1D:1D:00:38:3D:CC:CE:3B
ValidityWed, 24 Jul 2024 08:39:43 GMT - Tue, 22 Oct 2024 08:39:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /event HTTP/1.1
Host: auchoahy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
OPTIONS auchoahy.net/event
200 OK 81 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerLet's Encrypt
Subjectauchoahy.net
Fingerprint3A:DE:56:77:2E:4A:67:9D:EB:BA:DD:AD:1D:1D:00:38:3D:CC:CE:3B
ValidityWed, 24 Jul 2024 08:39:43 GMT - Tue, 22 Oct 2024 08:39:42 GMT
Hash 8602b71ac1de954150a5789712528948
5efd4f448766bd98b9d58effa1db9baa294b2211
88d6316fc0e2157cb12123591ad523d0b28d8984f6f7987e065d9194fd56cf4c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: auchoahy.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Content-Type: application/json
Content-Length: 451
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 18 Aug 2024 17:05:26 GMT
content-type: application/json; charset=utf-8
content-length: 81
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
GET my.rtmark.net/gid.js?pub=0&userId=a6cfc8cf16cf411d9ce1a832c89fb175&zoneId=7527412&checkDuplicate=true&ymid=&var=&source=pusher
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=a6cfc8cf16cf411d9ce1a832c89fb175&zoneId=7527412&checkDuplicate=true&ymid=&var=&source=pusher
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint4B:EF:80:EB:90:B5:8C:01:82:25:B6:92:59:BE:A9:6A:C7:83:75:8E
ValidityFri, 05 Jul 2024 22:30:11 GMT - Thu, 03 Oct 2024 22:30:10 GMT
Hash e3bf7cc71c43795b8366b3c47c3db845
7eb1bb3dd9ab03bc10654a14efbe6e579c8df7e8
abf38c434637c185cecfd127b105b1963d140ecbcddacc3aaa7597c20ff667b0
GET /gid.js?pub=0&userId=a6cfc8cf16cf411d9ce1a832c89fb175&zoneId=7527412&checkDuplicate=true&ymid=&var=&source=pusher HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 18 Aug 2024 17:05:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://bliss-u.vip
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a6cfc8cf16cf411d9ce1a832c89fb175; expires=Mon, 18 Aug 2025 17:05:26 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/js/jquery.min.js
200 OK 35 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/js/jquery.min.js
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type JavaScript source, ASCII text, with very long lines (32063)
Hash 723e11a50995eef960d59451910e2cb4
76e617c6f9bad2602bdea1c20d50ba7c89a55097
ae34fd2197cffa02b5b7a753c262c1bbb3560afb92e403a1d59e935d8a320b41
GET /rode-e-ganhe/js/jquery.min.js HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/javascript
cf-ray: 8b537d126f4f568f-OSL
cf-cache-status: MISS
cache-control: max-age=14400
etag: W/"723e11a50995eef960d59451910e2cb4"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9sS5LaZocLGfHSuPm3dtWhKELQL3Wm1GeMXrCsy4cZK6%2BHwO%2FwPblnAI6ltuysrhzK4jJTDFyV2g%2BjRoBcsPGNCDl3%2FKE3o%2F2ejyshWJQrXBrkrwrK1paFDXgfli"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
OPTIONS omoonsih.net/custom
200 OK 0 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:26 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m5bgqmSMCu2GKf7%2BbSHEQS%2BAIVhXWm3B6zMP4kN65tUTx0ALgYcofEcf0fGjqyYfa053%2Bx5BbzfRdu1bIbLo5IadZawa4SND805acY8G2owHY8hu35JjfSLkckwBOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d1b8f0f56c4-OSL
X-Firefox-Spdy: h2
OPTIONS omoonsih.net/custom
200 OK 39 B IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Content-Type: application/json
Content-Length: 369
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:26 GMT
content-type: application/json; charset=utf-8
content-length: 39
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d8nnpzYd%2B9rJwaaZxZeVPYr9ULyhRgxcl6R%2BiK6pDP0tHEib81iy2GX0uvtQXzJevTd36Aa80icvZl%2F%2FuYjoDAsKNDrHQ%2Fe9gUWP1A8rvw1OG6rlA1fqChHOUOrDAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d1bc8345695-OSL
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash 7944981bcac427aa8d0aa016ec63764d
48bf925b10dc02afa8f597af8d26f5bf5efc0b7e
26bde594c33cd3386f4e65e3eaf0fc048fca46ed4a185f5c2aa70e8deeaffb0a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "26BDE594C33CD3386F4E65E3EAF0FC048FCA46ED4A185F5C2AA70E8DEEAFFB0A"
Last-Modified: Sat, 17 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5636
Expires: Sun, 18 Aug 2024 18:39:22 GMT
Date: Sun, 18 Aug 2024 17:05:26 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 7944981bcac427aa8d0aa016ec63764d
48bf925b10dc02afa8f597af8d26f5bf5efc0b7e
26bde594c33cd3386f4e65e3eaf0fc048fca46ed4a185f5c2aa70e8deeaffb0a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "26BDE594C33CD3386F4E65E3EAF0FC048FCA46ED4A185F5C2AA70E8DEEAFFB0A"
Last-Modified: Sat, 17 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5636
Expires: Sun, 18 Aug 2024 18:39:22 GMT
Date: Sun, 18 Aug 2024 17:05:26 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 7944981bcac427aa8d0aa016ec63764d
48bf925b10dc02afa8f597af8d26f5bf5efc0b7e
26bde594c33cd3386f4e65e3eaf0fc048fca46ed4a185f5c2aa70e8deeaffb0a
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "26BDE594C33CD3386F4E65E3EAF0FC048FCA46ED4A185F5C2AA70E8DEEAFFB0A"
Last-Modified: Sat, 17 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5636
Expires: Sun, 18 Aug 2024 18:39:22 GMT
Date: Sun, 18 Aug 2024 17:05:26 GMT
Connection: keep-alive
POST omoonsih.net/event
200 OK 3.5 kB IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash 584248e6df359952a3b2534618a5e79f
baaf395b56d86f8e9635c491de032d5098d4f654
027cc3edbc00207f345b29635ccb8a6384e2f798a16c987f56d0c15432383b64
POST /event HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Content-Type: application/json
Content-Length: 455
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:26 GMT
content-type: application/json; charset=utf-8
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=flRbwMTMF4oI79zKRbwxrCMWXm103x9yCsR8YDJuUHMWGdgndTZMbexvBpdSZ1JQvvkQwYmHjDoQKbPcukxsLIkO%2BR6QkYsTlmEPWqo%2FX2kWsq1f7qcTSiddt9f17w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d1aff175695-OSL
content-encoding: br
X-Firefox-Spdy: h2
POST omoonsih.net/event
200 OK 7.5 kB IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash 055867cc53f71a040d456066769b3638
04220c4b09f86ba711b6d0c8c11b1402b1befdec
04a87f3571aa38286156121b2e7e97d967f71e7fe6f04d7146c4242b8b0aac78
POST /event HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Content-Type: application/json
Content-Length: 455
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: application/json; charset=utf-8
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TE%2FWSS2J%2BgJEYi4wDNy3wgkmUeMJ0IlYPvcz%2BVb%2F7er4Ofq3uaaoESrTe%2B1XDuzN3NIxNlBzBXsPMq0W0Y%2FMljM6Qf5Hq%2Fy%2FBbcfKtCDf5LHTy835nylZ6smaIPQgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d18cb465695-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/images/slot-start.png
200 OK 26 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/images/slot-start.png
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type PNG image data, 410 x 279, 8-bit colormap, non-interlaced
Hash f491647556e492de92530b48827690aa
6296c44299f5acb17cb2c06e37391a70672b1fd3
efb819d37f19ec7505d9602488ce97868d84e1c7929ce83e308e23f02d97b95d
GET /rode-e-ganhe/images/slot-start.png HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: image/png
content-length: 26084
cf-ray: 8b537d126f45568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "f491647556e492de92530b48827690aa"
last-modified: Sun, 07 Jul 2024 08:18:17 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CvgdwLyfc6gGhQkJ%2BWR9RC4BnYEuke8TTUaBJNcrGdzjGAQfCIuieLQD6dFy1PLU8YwSKZMsY1mar7OBPjrLtlOvBc91mwJ84DvXBUxmkGWGleTEz%2FVbpzma8Kec"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET omoonsih.net/ntfc.php?p=7527412
200 OK 28 kB URL GET HTTP/2 omoonsih.net/ntfc.php?p=7527412
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
File type JavaScript source, ASCII text, with very long lines (28221), with no line terminators
Hash 2819a12e7bdbbb35a3cdcea5afe7a9cc
2c26a92f1232f680ac9d8f9c1a50f5db93d57174
1016938bdef016ca01533ba16cd1a7d8c0a653a5c431e9876bdf7ae4b12014b8
GET /ntfc.php?p=7527412 HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:24 GMT
content-type: application/javascript
last-modified: Fri, 16 Aug 2024 10:33:11 GMT
etag: W/"66bf2ae7-6e3d"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i1Hq2sFZwHsbamcgNOTnJb8jcJZylnuA1R5m3qxih7yVV5V6Axmt9pLwxIqKael0Z2jazAD2axCwfI%2FCTr%2FK8eBAb0w4l2pfWlfzbVzp8AYOvw8Nyy5BG6a%2FZB8Meg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d12f9eb5695-OSL
X-Firefox-Spdy: h2
GET resources.landerlab.io/js/scripts.js
200 OK 20 kB URL GET HTTP/2 resources.landerlab.io/js/scripts.js
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectresources.landerlab.io
Fingerprint0E:6F:9C:45:16:40:89:70:2D:F8:06:7C:C7:E3:2C:E1:62:BD:81:5C
ValidityThu, 18 Jul 2024 03:06:21 GMT - Wed, 16 Oct 2024 03:06:20 GMT
File type ASCII text, with very long lines (1628)
Hash 34af53ec6d659fdc6ebedefcd1bd18f5
b3d7d60326b2f31e19fc585d58e86062bf1886b4
b053bf895136e0c8696f5dcc445717ce6273410f94cb917f34a1f8833c3dd44d
GET /js/scripts.js HTTP/1.1
Host: resources.landerlab.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:24 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=86400, must-revalidate
cf-bgj: minify
cf-polished: origSize=29892
etag: W/"376d8137ac2b17dbda0bc56308d6058e"
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ralmdyi3R%2BRGrD3b4xbvcKSsdCOJg3TDBozZ21N8RaA7HiqMGSeV47vpy6hcmW%2BnyhGzjh15ybTUQGdTH9QblXzBajSe%2FS7UiFc8qmTg%2FLm%2BYDf8HlhHJ0gFtHMKtW4n5ISYsiTKmK5R"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3394
server: cloudflare
cf-ray: 8b537d12ae0b0b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET resources.landerlab.io/css/styles.css
200 OK 34 kB URL GET HTTP/2 resources.landerlab.io/css/styles.css
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectresources.landerlab.io
Fingerprint0E:6F:9C:45:16:40:89:70:2D:F8:06:7C:C7:E3:2C:E1:62:BD:81:5C
ValidityThu, 18 Jul 2024 03:06:21 GMT - Wed, 16 Oct 2024 03:06:20 GMT
File type ASCII text, with very long lines (33465), with no line terminators
Hash 70c415ae5d62397dbe7aa88214dbcb8f
97987b1e77ec170e6998e15e377e5bdda7eca8bc
5aa39aa8dffb067d43bb310544c6db3045e039f218c421c1572458b4274640a5
GET /css/styles.css HTTP/1.1
Host: resources.landerlab.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:24 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=86400, must-revalidate
cf-bgj: minify
cf-polished: origSize=50174
etag: W/"49695a61c0e0b8cf291aa5fb13e6489c"
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gtCZGqFmlADm48N4akLtKoAsKk9nIZAq%2Bf2DhTou%2F4g8r9HDWOC1t4JlSK%2B4xiamU8BEs9o3%2BbOddfBGJ0njz7vZ1A%2F7KPcC1iWEdEUhvlF58raNE5AvOJ1%2FYG6vcab45p4ItxTcfe%2FN"}],"group":"cf-nel","max_age":604800}
vary: Accept-Encoding
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
cf-cache-status: HIT
age: 3394
server: cloudflare
cf-ray: 8b537d128df30b31-OSL
content-encoding: br
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/sounds/win.mp3
200 OK 22 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/sounds/win.mp3
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
File type Audio file with ID3 version 2.3.0, contains:
- MPEG ADTS, layer III, v2.5, 24 kbps, 11.025 kHz, Monaural
Hash c74dca6a3ab16c097234033fec7a8573
a6e73f993b73d589b9688a0679bdac39028017a0
79e8f06f8cb25d13c57d798f7e068d282dd2dfdb026b54aacc8ead2641542a56
GET /rode-e-ganhe/sounds/win.mp3 HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Cookie: llRequestData={"country":"Norway","city":"Høvik verk","region":"Akershus","postalCode":"1363","browser":"Firefox","operatingSystem":"Linux","device":"Desktop"}; landerlab-abtest-variantId=e8a69bf65aefc23d0f360ab695e9eac7; llCountdown={}
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: audio/mpeg
content-length: 22067
cf-ray: 8b537d160c35568f-OSL
cf-cache-status: MISS
accept-ranges: bytes
cache-control: max-age=300, s-maxage=300
etag: "c74dca6a3ab16c097234033fec7a8573"
last-modified: Sun, 07 Jul 2024 08:18:18 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=63TsFwpwnPiUBXm8HcO1gG6RMs3LVgp%2FSK%2BQNNiuJ0git8HH21hGPUf7CBJ%2BngB6C%2BUgbEO%2FIG9Y3mcBkAON5DBxSojqAXHzPCSrYbQrhHfF5dAIbq2Jp8xe7x2X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
X-Firefox-Spdy: h2
GET omoonsih.net/3bT/27mJf/defaultSkin.min.js
200 OK 57 kB URL GET HTTP/2 omoonsih.net/3bT/27mJf/defaultSkin.min.js
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /3bT/27mJf/defaultSkin.min.js HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:26 GMT
content-type: application/javascript
last-modified: Fri, 16 Aug 2024 10:33:11 GMT
etag: W/"66bf2ae7-df7c"
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
cache-control: max-age=14400
pragma: no-cache
content-encoding: gzip
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cN9Bo%2B5Nf3gR%2Bp3APPSLqvw4M9NyUADKkC1sMiYPhTICAW0HH8mYC3sCrxkzLG%2Bp7LKZ0Po5r5uUySzsFvP5%2FEm9Y8xysKLExrilN%2FOs5wP8SeNQiWKm0S5w9%2Fs4MQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b537d1acde856c4-OSL
X-Firefox-Spdy: h2
GET bliss-u.vip/rode-e-ganhe/css/style.css
200 OK 13 kB URL GET HTTP/2 bliss-u.vip/rode-e-ganhe/css/style.css
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectbliss-u.vip
Fingerprint0D:44:D1:34:7B:C4:06:A9:83:48:20:41:81:AD:15:F5:79:EC:4A:8C
ValidityFri, 26 Jul 2024 06:46:20 GMT - Thu, 24 Oct 2024 06:46:19 GMT
Hash 538445a521226e69b9c4231a52ad5e79
113653898486204b16bef699f7202ecbd6439e84
572ba0a7a98f61e3633c7bd3e7108dde51a8053accc6163abedf4302aebf774c
GET /rode-e-ganhe/css/style.css HTTP/1.1
Host: bliss-u.vip
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bliss-u.vip/rode-e-ganhe
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: text/css
cf-ray: 8b537d126f3f568f-OSL
cf-cache-status: MISS
cache-control: max-age=14400
etag: W/"538445a521226e69b9c4231a52ad5e79"
last-modified: Sun, 07 Jul 2024 08:18:14 GMT
vary: Accept-Encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2QcgnjIalO556XPgILBhhcpLfVetkX2084FKX%2BtJqMEEKH0eh6OaSTBVXyRnJWA9B8q7q5Z90UU27haxgC3VGtlYujgXVCSvahdLW6KUoZW%2BUkt55k2ZXhNQ0Kv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2
GET omoonsih.net/zone?pub=0&zone_id=7527412&is_mobile=false&domain=bliss-u.vip&var=&ymid=&var_3=&tg=0&sw=3.1.548&drf=
200 OK 876 B URL GET HTTP/2 omoonsih.net/zone?pub=0&zone_id=7527412&is_mobile=false&domain=bliss-u.vip&var=&ymid=&var_3=&tg=0&sw=3.1.548&drf=
IP
Requested by https://bliss-u.vip/rode-e-ganhe
Certificate IssuerGoogle Trust Services
Subjectomoonsih.net
Fingerprint2E:C6:69:58:9B:60:BE:F8:5F:CF:D7:0E:2D:43:ED:F8:03:8F:93:F7
ValiditySun, 07 Jul 2024 03:01:24 GMT - Sat, 05 Oct 2024 03:01:23 GMT
File type troff or preprocessor input, ASCII text, with very long lines (973), with no line terminators
Hash a81768ed645dd80559b5086ad5c4f133
78ad39d61ca03574dc0406777b3d0bfe88690ba0
a4937dfad233a0dc83afd2f51fd3ad38d5822e2cfc3b19c00c8ef4462e62be40
GET /zone?pub=0&zone_id=7527412&is_mobile=false&domain=bliss-u.vip&var=&ymid=&var_3=&tg=0&sw=3.1.548&drf= HTTP/1.1
Host: omoonsih.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bliss-u.vip/
Origin: https://bliss-u.vip
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 18 Aug 2024 17:05:25 GMT
content-type: application/json; charset=utf-8
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://bliss-u.vip
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ev%2F7X4MWFzsOIrDiPIbtsbi4DSQelOcjiV6ww5%2BHcRZTUyLoiwK9G8QADcg6wdfk6A50X1U9xBXKJ1BYhVwF2wQnkGHgiI3JR5bS9tUX0NwXNfdKXb4iZMPULNImCA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8b537d14fd845695-OSL
content-encoding: br
X-Firefox-Spdy: h2
172.67.75.61
139.45.197.252
104.26.7.66
23.36.76.226