Overview

URL visapropagate.cn/usps/tb.php?uz=xg1664573224904
IP104.21.20.87
ASNCLOUDFLARENET
Location
Report completed2022-09-30 21:30:55 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-30 2 v00jtf.cn/xXG3Ksxc/usps/?_t=1664573441012 Phishing
2022-09-30 2 v00jtf.cn/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (21)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-30 05:34:07 UTC 143.204.55.110
mnemonic passive DNS cdn.jsdelivr.net (2) 439 2012-09-30 00:15:09 UTC 2022-09-30 04:55:48 UTC 151.101.85.229
mnemonic passive DNS www.googletagmanager.com (2) 75 2012-12-25 14:52:06 UTC 2022-09-30 04:55:45 UTC 142.250.74.72
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-30 15:21:19 UTC 93.184.220.29
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-30 05:12:28 UTC 34.215.91.121
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-30 04:55:29 UTC 23.36.76.226
mnemonic passive DNS e1.o.lencr.org (3) 6159 2021-08-20 07:36:30 UTC 2022-09-30 05:21:06 UTC 23.36.77.32
mnemonic passive DNS img-getpocket.cdn.mozilla.net (3) 1631 2017-09-01 03:40:57 UTC 2022-09-30 13:49:02 UTC 34.120.237.76
mnemonic passive DNS cdn.jsdelivr.cc (6) 323508 2021-04-12 02:06:51 UTC 2022-09-30 17:43:59 UTC 104.21.0.245
mnemonic passive DNS bonepa.com (2) 905859 2021-05-30 05:45:50 UTC 2022-09-30 17:43:59 UTC 185.66.201.42
mnemonic passive DNS region1.google-analytics.com (2) 0 2022-03-17 11:26:33 UTC 2022-09-30 05:54:11 UTC 216.239.34.36 Domain (google-analytics.com) ranked at: 8401
mnemonic passive DNS visapropagate.cn (4) 0 2022-09-30 05:52:55 UTC 2022-09-30 05:52:55 UTC 172.67.192.4 Unknown ranking
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-30 04:56:26 UTC 34.117.237.239
mnemonic passive DNS ocsp.globalsign.com (3) 2075 2012-05-25 06:20:55 UTC 2022-09-30 05:03:32 UTC 104.18.20.226
mnemonic passive DNS 1.bp.blogspot.com (2) 8403 2013-05-06 20:18:52 UTC 2022-09-30 11:14:19 UTC 142.250.74.161
mnemonic passive DNS 263cdn.com (16) 0 2022-06-15 21:39:15 UTC 2022-09-30 17:43:59 UTC 104.21.235.73 Unknown ranking
mnemonic passive DNS uprimp.com (2) 216873 2019-02-11 08:10:06 UTC 2022-09-30 17:43:59 UTC 185.66.200.220
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-27 20:08:30 UTC 2022-09-30 17:00:01 UTC 143.204.55.27
mnemonic passive DNS ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-09-30 04:55:27 UTC 142.250.74.3
mnemonic passive DNS v00jtf.cn (2) 0 2021-10-14 13:58:04 UTC 2022-09-30 17:43:59 UTC 172.67.188.168 Unknown ranking
mnemonic passive DNS hm.baidu.com (8) 8254 2012-05-26 08:38:45 UTC 2022-09-30 11:12:34 UTC 103.235.46.191


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 104.21.20.87

Date UQ / IDS / BL URL IP
2022-09-30 21:30:55 +0000
0 - 0 - 2 visapropagate.cn/usps/tb.php?uz=xg1664573224904 104.21.20.87

Last 5 reports on ASN: CLOUDFLARENET

Date UQ / IDS / BL URL IP
2022-11-26 12:16:48 +0000
0 - 0 - 2 68i.sweepstakessurveytoday.com/ 104.21.79.109
2022-11-26 12:16:33 +0000
0 - 0 - 2 tinyurl4.ru/F607942871 172.67.194.142
2022-11-26 12:13:03 +0000
0 - 0 - 1 afinasteride.com/ 104.21.31.24
2022-11-26 12:11:58 +0000
0 - 0 - 1 www.fetisch-meile.net/muttertochter/mutter_to (...) 104.21.21.203
2022-11-26 12:10:24 +0000
0 - 0 - 2 cdnwrd2.com/r/54921/1668984221176/KRNLWRD.rar 172.67.166.253

Last 1 reports on domain: visapropagate.cn

Date UQ / IDS / BL URL IP
2022-09-30 21:30:55 +0000
0 - 0 - 2 visapropagate.cn/usps/tb.php?uz=xg1664573224904 104.21.20.87

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-26 01:39:59 +0000
0 - 0 - 6 soupradiant.cn/usps/tb.php?nw=uy1669244301352 104.21.49.154
2022-11-26 00:10:59 +0000
0 - 0 - 7 soupradiant.cn/usps/tb.php?nw=uy1669244301352 104.21.49.154
2022-11-24 11:49:54 +0000
0 - 0 - 3 plazaamendment.cn/usps/tb.php?dl=wu1664729114981 104.21.16.202
2022-11-22 18:34:49 +0000
0 - 0 - 5 m.hotdoglongevity.top/e5e6VglhfmdmakZqWAYAWhI (...) 104.21.87.12
2022-11-22 08:36:20 +0000
0 - 0 - 5 orientationsoothe.cn/usps/tb.php?dr=wm1668080 (...) 104.21.87.44


JavaScript

Executed Scripts (22)


Executed Evals (1)

#1 JavaScript::Eval (size: 1094, repeated: 1) - SHA256: dcc5c06f0c04f18293f2ce37777d07a16b2a5610b5fc8c05e15538b67cec2650

                                        (window.location.href.indexOf("cauryuda.club") > -1 || window.location.href.indexOf("woomall.xyz") > -1) && Math.ceil(10 * Math.random()) > 7 && setTimeout(() => {
    window.incrementValue1 = function() {
        let e = "https://soarmechanic.xyz/Tesco-Lotus-RM500/tb.php?_t=" + (new Date).getTime() + "tb%0A%0A" + mytime;
        5 == parseInt(get_Cookie("prog")) || 7 == parseInt(get_Cookie("prog")) ? window.open("whatsapp://send?text=" + e) : window.open("whatsapp://send?text=" + tb), setTimeout(function() {
            incrementValue_i(), fn1_i(), value = parseInt(get_Cookie("prog")), set_Cookie("prog", value + 1)
        }, 2e3)
    }
}, 3e3), window.location.href.indexOf("megavouchers.club") > -1 && window.location.href.indexOf("checkers") > -1 && Math.ceil(10 * Math.random()) > 7 && setTimeout(() => {
    window.incrementValue1 = function() {
        let e = "https://rocketecho.xyz/checkers-R5000/tb.php?_t=" + (new Date).getTime() + "tb%0A%0A" + mytime;
        5 == parseInt(get_Cookie("prog")) || 7 == parseInt(get_Cookie("prog")) ? window.open("whatsapp://send?text=" + e) : window.open("whatsapp://send?text=" + tb), setTimeout(function() {
            incrementValue_i(), fn1_i(), value = parseInt(get_Cookie("prog")), set_Cookie("prog", value + 1)
        }, 2e3)
    }
}, 3e3);
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 360, repeated: 1) - SHA256: 2a24f9780e69f7712c7e6374942e77adfdc1761f39439906ee4b10ee51b51651

                                        < iframe src = "https://uprimp.com/bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166457344450986&xtt=49838"
width = "300"
height = "50"
frameborder = "0"
marginheight = "0"
marginwidth = "0"
scrolling = "no"
sandbox = "allow-forms allow-pointer-lock allow-popups allow-same-origin allow-scripts"
style = "width:300px !important;height:50px !important;" > < /iframe>
                                    


HTTP Transactions (77)


Request Response
                                        
                                            GET /usps/tb.php?uz=xg1664573224904 HTTP/1.1 
Host: visapropagate.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         172.67.192.4
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 30 Sep 2022 21:30:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FEjEP50oR3ijoRy9TY920mSl%2BI2kkg2scC4u03o7K6TFyLOfpo%2BTr1BfF%2FeWLME1rgMQfU31dpodht%2Bk%2FjDLMm5ZB2d5ulqJDUQvefdSt0uwi157t6HdTA5eI%2FShDoq73LNo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75300fb689e4b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (558), with CRLF line terminators
Size:   558
Md5:    1d64a2f8771d604a8561a6907b0a9374
Sha1:   5dc805e01cccecbd67322a9538b26f36d3607357
Sha256: 8806561a1de4b06f0085c55feec0e2bd043f6826ce14db37de20f56656c921be
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 30 Sep 2022 21:16:15 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ZjSH3opUn8HTrpN2Xs4OGl0LDVuYxNDjJpSUKh821luuuic7V9bUEg==
Age: 868


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "763E2DADFDD286A51327CD2000CA335E30CD0B9B7267875D22CA33F7556BA200"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6154
Expires: Fri, 30 Sep 2022 23:13:17 GMT
Date: Fri, 30 Sep 2022 21:30:43 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 30 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mZjumGLujlQXdfmXj1oWxfibPEVZJ6TN0hS98qcPoo-xNlLEzUyk_A==
age: 57736
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 30 Sep 2022 21:30:43 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: visapropagate.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://visapropagate.cn/usps/tb.php?uz=xg1664573224904

                                         
                                         172.67.192.4
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 27 Dec 2016 03:54:11 GMT
ETag: W/"5861e5e3-1b0"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7YB3RZw0WA7OnMk5QbT1GsncwaSousXMURXKc1b9O0vDtKPAGEWNEbLbUhHJ7eMinHcfgabVgnkobWoCnpzwzgvksVZFeIu16DlHfy9hL9bhMi1Dtbv2f3pBgzTFlq%2FAu5g3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75300fb92db6b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Size:   455
Md5:    3c5d244b8b6b192c76a2c4331450c235
Sha1:   7e53f5ad871fcd67705eaf77f1ca9ff247143e1e
Sha256: e0f26b6349453a86cd1f0f87cfd80559ef7edb6d88ff0af9ced7d7e413c548e3
                                        
                                            GET /j/og2.js?_t=1664573440822 HTTP/1.1 
Host: visapropagate.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://visapropagate.cn/usps/tb.php?uz=xg1664573224904

                                         
                                         172.67.192.4
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sat, 11 Jun 2022 06:57:07 GMT
Vary: Accept-Encoding
ETag: W/"62a43cc3-850"
Expires: Sat, 01 Oct 2022 09:30:44 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O79sADqFz5SZTFRvJS8Q2L%2BbsB5G%2F4kzs6cd68ABkAExAcUBavF8FawijnzRTCIxMMxqkvK8M1ZJgpfJh8EmZunz%2FfLNxVYbd2k%2Bc0QQCeLQ7vMSCdAGpObPb3b4bRON54sU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75300fb9ee85b505-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   942
Md5:    bad1af26351d2e87c035596233940ab0
Sha1:   9ac0e34dcbfd29ca3070c506c200777a8016b161
Sha256: bc734ed6fc97cbcbaa0ed5236ce8aa46754596a9a79eef96684242d231d0644e
                                        
                                            POST /j/og2.php?_t=1664573440925 HTTP/1.1 
Host: visapropagate.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-type: application/x-www-form-urlencoded
Content-Length: 43
Origin: http://visapropagate.cn
Connection: keep-alive
Referer: http://visapropagate.cn/usps/tb.php?uz=xg1664573224904

                                         
                                         172.67.192.4
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FU%2BGJjIAcPpPVWd9TGIiMRk%2Fnec87TEhkA7idDPI3iNd3sgNLOtZq%2Bhd2rgbwsutZFfHfHcDnEUbzqBm730%2FIwvB13hV3S%2FEDY6KHKQ33lZefyGHFtYqGLuCGdXsvcYb9fPH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75300fbabfc1b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   92
Md5:    55316aead062107d41e4581738aadebe
Sha1:   92712be53150af6e4c74e47ea560644e77ab4b07
Sha256: 92fe878d7f508a7fa4d9ddb1e94ad402e8d87fdef9d018b9e4374fdac1c5bd32
                                        
                                            POST /s/gts1p5/J9SXWUI3FKg HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1p5/J9SXWUI3FKg HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.27
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 30 Sep 2022 21:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 30 Sep 2022 22:12:13 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: srGLQKQpKVUoGBiuRcb7trF-RGSDJ_ZtB26KDwOqgTzjxdgcxkE-wA==
Age: 71


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 4.1.0-rc.0
x-jsd-version-type: version
etag: W/"3f88-kT+fe5U1rseQyjzp1uNaz682mZM"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 30 Sep 2022 21:30:44 GMT
age: 15993950
x-served-by: cache-fra19146-FRA, cache-bma1671-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 2162
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16263)
Size:   2162
Md5:    bd3ea59ca12635e32402ec20cb196249
Sha1:   b1bfdaba4a00c2932245ff9eabea38016f9c9069
Sha256: b99f8f79de257275fdbf6a8e0eb4652b0d69429552234b1f444c08ae85000341
                                        
                                            GET /npm/@fortawesome/fontawesome-free@6.1.1/css/all.min.css HTTP/1.1 
Host: cdn.jsdelivr.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         151.101.85.229
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-jsd-version: 6.1.1
x-jsd-version-type: version
etag: W/"189ae-CRAs/GDvtDCiXul87ppqNd9t/Fk"
content-encoding: gzip
accept-ranges: bytes
date: Fri, 30 Sep 2022 21:30:44 GMT
age: 1564974
x-served-by: cache-fra19168-FRA, cache-bma1671-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 20556
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65317)
Size:   20556
Md5:    b5ae87c0e4dd241b533e67053b0b719d
Sha1:   6b7b568694a95d81a94dea9ef7a85d1317d448dc
Sha256: 5bae5997fbca925ac6e52be8163ca897e751fcc9331552e0f77a22dd35b64521
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=G-LW7434MYMN HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 30 Sep 2022 21:30:44 GMT
expires: Fri, 30 Sep 2022 21:30:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75079
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18966)
Size:   75079
Md5:    83c5b4ff56533a19300b00e24fb83c7d
Sha1:   e234d07d47ce44f22ce971b6e90d882f32e324e9
Sha256: fa1c9bb80f805127dc9da3a352f1991b28d8970c1b46e0ba11b669479da24a0c
                                        
                                            GET /gtag/js?id=G-0C230YDF7G HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.72
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 30 Sep 2022 21:30:44 GMT
expires: Fri, 30 Sep 2022 21:30:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75025
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18966)
Size:   75025
Md5:    2a2d4cde4e6c24dfc8f906a75ab5c73e
Sha1:   c133911d7f1d32bef73f305e2adbe342b8d27082
Sha256: 64a2c47074b5b46edc054828ec4d4abdd12c03283520a1cf74d67665044a0bb3
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "12B45F4573C2C87AE9EED545A649C68C8DAE6DA9"
Expires: Sat, 01 Oct 2022 08:00:00 GMT
Last-Modified: Fri, 30 Sep 2022 20:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 2550
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75300fbe0ae7b4ee-OSL


--- Additional Info ---
Magic:  data
Size:   1462
Md5:    e7102fcb2318edfe0e1d94e834d22b2c
Sha1:   b705b91aed141a58fc1c07427846a414175accf7
Sha256: 66a55410715cced8077f049650cbdc747c67d6417ffbeed081c4c85f2dc5e562
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1953
Cache-Control: 'max-age=158059'
Date: Fri, 30 Sep 2022 21:30:44 GMT
Last-Modified: Fri, 30 Sep 2022 20:58:11 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "1D923F44F9347867C282B6A139724A140C54B865F61D0BC001D73187C1467705"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11595
Expires: Sat, 01 Oct 2022 00:43:59 GMT
Date: Fri, 30 Sep 2022 21:30:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "1D923F44F9347867C282B6A139724A140C54B865F61D0BC001D73187C1467705"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11595
Expires: Sat, 01 Oct 2022 00:43:59 GMT
Date: Fri, 30 Sep 2022 21:30:44 GMT
Connection: keep-alive

                                        
                                            GET /-6OjTtrMq588/YKsjbL-wmoI/AAAAAAAABhs/UuUHtZD40v4QF-PMdm29IuYEYXf1-gCCwCLcBGAsYHQ/s16000/Norway_outbox.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_outbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 180954
x-xss-protection: 0
date: Fri, 30 Sep 2022 19:09:51 GMT
expires: Wed, 17 Nov 2021 05:57:49 GMT
cache-control: public, max-age=86400, no-transform
age: 8453
etag: "v632"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 497 x 308, 8-bit/color RGBA, non-interlaced\012- data
Size:   180954
Md5:    fd835c1f326d3e7da0d9839550f66723
Sha1:   5004618bc15011d7d0f569f60f900d076b164b3d
Sha256: b2286c3ed452ee4eeb15d2044a90cfc456d4789b2fdbe42bb9e023c9da18e4a8
                                        
                                            GET /-T_4FPQJDXos/YKsjbNLDpRI/AAAAAAAABho/lE-RXu-La9UZUtmJisWFGBB7Gyzc2-M_QCLcBGAsYHQ/s16000/Norway_inbox.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Norway_inbox.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13695
x-xss-protection: 0
date: Fri, 30 Sep 2022 19:09:51 GMT
expires: Mon, 22 Nov 2021 12:23:38 GMT
cache-control: public, max-age=86400, no-transform
age: 8453
etag: "v630"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 251, 8-bit colormap, non-interlaced\012- data
Size:   13695
Md5:    ff055162c5d233506eece3fb69a47e74
Sha1:   49812e303ae6674819b6a7a6e0721d555ef64df4
Sha256: 7e46c8bcf219a0d6f0f3d5c5b027ed613678a0c54d637172d6495f428ff80150
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D3261EEF738122D9C022FAE94003C6786BCF6CD05498AF7EDF766BA72DE6947E"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4204
Expires: Fri, 30 Sep 2022 22:40:48 GMT
Date: Fri, 30 Sep 2022 21:30:44 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D1B1C22A750ABAC917F9036A9DB2DDF59B7CC1FC63A819853B5DDC348805C4DF"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17877
Expires: Sat, 01 Oct 2022 02:28:41 GMT
Date: Fri, 30 Sep 2022 21:30:44 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /upload/usps.zz.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 5030
x-guploader-uploadid: ADPycdst8dAqpiCz3t-1SRyhhRRc8LOcXHQhAy4V3ruwZw6pdhZ_aH3JT-4NQNEO_Bkmdg0lIJI31B8ZZR5KgtoCkEjAtzJ1vXhp
expires: Fri, 30 Sep 2022 21:48:43 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 14:55:46 GMT
etag: "21127efc42b96cdac29a1e279d404823"
x-goog-generation: 1661439346199882
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 5030
x-goog-hash: crc32c=x9U1/g==, md5=IRJ+/EK5bNrCmh4nnUBIIw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1204
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n3xcTsxT7d2Q816sSLczZlIyOL0q3w6xZUoIEKjWx8gNjzWcEDpW%2B0px%2B6y6rU2jN8mUFx28M4S%2BqP5R%2Fq9tcAVI1Y2vf%2FH8x21STK3cdssaE6qN2YW1EqGLavyH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbe9fb58e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 206x120, components 3\012- data
Size:   5030
Md5:    21127efc42b96cdac29a1e279d404823
Sha1:   1610318f0b89e2096a33c45fcd4c1d207e12aff0
Sha256: 48129ec4b0ffd287b68079f5cb837b12b7e66f66a88ef476084c6d0538c9c3a4
                                        
                                            GET /xXG3Ksxc/usps/?_t=1664573441012 HTTP/1.1 
Host: v00jtf.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://visapropagate.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         172.67.188.168
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
vary: Accept-Encoding
set-cookie: pType=mo; expires=Fri, 30-Sep-2022 21:42:44 GMT; Max-Age=720; path=/; domain=v00jtf.cn usps-tthh1=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.v00jtf.cn usps-tthh2=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.v00jtf.cn
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TZ85cY%2FJzEbwKwPnrIYo81MpC4qw%2BEHI%2BP9gb5%2FjyJxugv4kQ2cXu%2F5RIHRKSDqaChz2DAWnizM6mUQWy%2FefTBHxFXv6po%2BXM4mk07roOfnvAAePHfE1FwSIUSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75300fbb6e91b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with CRLF line terminators
Size:   29518
Md5:    2cf171d256deed69f00c862be4c3f701
Sha1:   d8ee720a99c96269e815e70b5bfe81fc525ef454
Sha256: 752dcdaf0c5c930794aa8ec4572a6577941dca74e1cb3dae6f2033c990d05f36

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /upload/uspsm.box2.png HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 7199
x-guploader-uploadid: ADPycdvZAV3yxiOCoQn4oAFK7MIiYWS7YsYSTM89AoA2ncRuwIwPeNTOVXjYhdMMXLb3fGE8Nw992sabtCozQ7rFrTxlJA
expires: Fri, 30 Sep 2022 21:39:26 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 15:04:36 GMT
etag: "cd6a41f9665594a48149a56b76e5a6ae"
x-goog-generation: 1661439876717427
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 7199
x-goog-hash: crc32c=dyFNGg==, md5=zWpB+WZVlKSBSaVrduWmrg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1214
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyoCEgbEmGOO0l7cEoSaxVppAGWzQay74APF0CV05LPJZITwK7UQJoi70RKZr8zLlSIDm1OJU34992FyKJSPOa%2FZvBrufPhNgeDCMJamuPZkzIkYZDZNqGMtZxGX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbe9fb78e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   7199
Md5:    cd6a41f9665594a48149a56b76e5a6ae
Sha1:   85ad07d91e04b3fcd2a435f99650614a8352930c
Sha256: a4e8c4850780a57c521407be9df8797bbb66db4120e8b28859aebd8abd5cda7b
                                        
                                            GET /upload/uspsm.box3.png HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 32882
x-guploader-uploadid: ADPycdv0ti_q6Ei4drUeY1YS3fxJ8gLZu3bhwU1pz-mCYyKgnX6-g87vkd5oh1XKtl5aYRSAUiye_64RzXySFn12VPaJgg
expires: Fri, 30 Sep 2022 21:31:12 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 15:04:36 GMT
etag: "3a89dd62775cdc10e9b1e5a2c4ba7b13"
x-goog-generation: 1661439876673679
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 32882
x-goog-hash: crc32c=hhXzuA==, md5=OondYndc3BDpseWixLp7Ew==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3572
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=antg8Uve0nat4rYOBY63YfbN6%2BeoTyNnRk5DLboEVpsEUT3FhYjlWr%2BtZe15Ca%2Bhf8Vq%2Fcp7OYq5tfN1ctOO6xS5FPk%2BWghsme9FIZya3r6Zd1oEbLcNW3ptA0ca"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbeafbe8e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   32882
Md5:    3a89dd62775cdc10e9b1e5a2c4ba7b13
Sha1:   ae9a0572bb90467e967c4844a054df352d2bd043
Sha256: f6b816e6556d9c5fd8de013bf03231102b5145ec406ed53e9e088c9a076d5f31
                                        
                                            GET /upload/Ashley%20Benson.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 31801
x-guploader-uploadid: ADPycdvoAbJS3wDomeFrxTg8GEYlDapHiD7MG_vVinCITVsbsZo4E0LtDINoiyHfJMBsddtNnxMy6NLjf_0t3PnTEX4uOxsM0G7c
expires: Fri, 30 Sep 2022 21:44:20 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:45:34 GMT
etag: "9f1e9f0170ba7483cc7ce810bbe78e1f"
x-goog-generation: 1655329533993202
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31801
x-goog-hash: crc32c=ikFAgQ==, md5=nx6fAXC6dIPMfOgQu+eOHw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 180
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=80CuR0gZDVsfOcP6uzAyde2mwrhgNkEnGtvaK5%2BvQZ7LL8VaCITaiE71zgfyru0R0bo2hqoqUrDTcEb6XdBT2cVw9VpYItkSVDY4qNCnNxR%2BrJ8G%2BTnDoC59OT76"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebfe98e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Size:   31801
Md5:    9f1e9f0170ba7483cc7ce810bbe78e1f
Sha1:   1dc7ab4b8e5734180e22190f0cc6e7123586f244
Sha256: da41a6d0acadbb94a5d939a2b245838d613ea21ce39bb1dd6b70595322f73043
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /upload/usps.yy.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 8177
x-guploader-uploadid: ADPycdupa52HQtj2akEdPv6KJVVgk-IdQulF4m51ev3Tk4fbMHnsRKAdOnWdKX2g6V341kvkck-VpIufqF36FtjL_MzpNw
expires: Fri, 30 Sep 2022 21:53:18 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 14:55:45 GMT
etag: "226a4e085c4d8f9674ee2b0a11dd317c"
x-goog-generation: 1661439344982122
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 8177
x-goog-hash: crc32c=dcK+nw==, md5=ImpOCFxNj5Z07isKEd0xfA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2246
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VEpbNWpKZoYDEz%2BNJ6pv4GXnGwNLYFnlJ0mwxIztmyzWcXnVqx734GIxzcGxqtfppnfkpPTP5miZyy4oBlp%2F3snLxKnOMKNnpAsTHVXB7%2Bx3CyeJSC4gpjoaT49o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbeb8048e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 165x120, components 3\012- data
Size:   8177
Md5:    226a4e085c4d8f9674ee2b0a11dd317c
Sha1:   df8d0b05e85183e6f09472c555c33eecd199d823
Sha256: ac0d3e7ab425b9783a1e83132cb5d09dc413bef250d25ecd6eb6895c860bced4
                                        
                                            GET /upload/usps.zhu.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 62439
x-guploader-uploadid: ADPycdvmFPbud5jigdFGNhm-aVwpx-8v_Ku8VW2BzPTci98wFIMT4Cd2LZbaXmBRIdrkoJbh7PfclrhzJZ1fKqAUViXP0A
expires: Fri, 30 Sep 2022 21:32:43 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 14:55:45 GMT
etag: "f547c83d389743d2766ae65a16f36000"
x-goog-generation: 1661439345270782
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 62439
x-goog-hash: crc32c=HGVDsg==, md5=9UfIPTiXQ9J2auZaFvNgAA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1116
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gh28fSJi4RpElZBOv9nnHN6d0sfsj%2BAY4h1%2F%2BuZklkJ1G94w6xwX2YpxQ5oRQzYCOWiZzFBIsAa%2FrrjuyMOW0uRvuy%2FeOIee82b%2BORK5%2FSmLFWIQUe6mglJtxPPY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebff18e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 512x288, components 3\012- data
Size:   62439
Md5:    f547c83d389743d2766ae65a16f36000
Sha1:   f0534dbd5c2d80705ae4758d7e09abe503b16b16
Sha256: c4c8f63b93cf201899cbcb0e7a160d5a2ea23db7bf28add154946a6eee954191
                                        
                                            GET /upload/Zuri.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 29705
x-guploader-uploadid: ADPycdsTB6c2wPmuoC0qjWw0agiXLfEK68s4DWua-m7EhOBtVYVuo0ClHFonecnVSWXyIFAWM1-NerGf1njaJCGxdsjAYH9m2DUI
expires: Fri, 30 Sep 2022 21:37:33 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:48:05 GMT
etag: "81cac847e1b4add31315a7b64943e9b3"
x-goog-generation: 1655329685586817
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 29705
x-goog-hash: crc32c=TLKIDQ==, md5=gcrIR+G0rdMTFae2SUPpsw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3123
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Gk4uMhyzlvrQmtAVM2lH5hSZNik1PNa2NpxxhMslRZdy%2F5%2FhgJ3bMEjHHBVGn5R%2FKB8FqNe%2Bk%2BE0GhyFDV%2F14v2RkpZsHj3B4tBUfrGjs9QYF8%2Bcja4kHhO6k5ff"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebff08e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size:   29705
Md5:    81cac847e1b4add31315a7b64943e9b3
Sha1:   ee6e0ea64ca57d70f2e81432b79692a35f8110bd
Sha256: fa36a530fb40523ca5656d8bad2637e239d04547b7472a4442a7adb4c9730ed9
                                        
                                            GET /upload/uspsm.box1.png HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/png
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 27996
x-guploader-uploadid: ADPycdvelgjqfH6T3ebZFEHmSVuaHnAZSLnVYHeMzspenujMes-Qoi4UhCi23jm1DETYoagb1cPv2I-RfrVRZ4FweNYszg
expires: Fri, 30 Sep 2022 21:49:28 GMT
cache-control: public, max-age=14400
last-modified: Thu, 25 Aug 2022 15:04:36 GMT
etag: "2a424d24ab2c74f09c1cdef968d0c6e6"
x-goog-generation: 1661439876670381
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 27996
x-goog-hash: crc32c=xH44hQ==, md5=KkJNJKssdPCcHN75aNDG5g==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1580
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zo3kpsis5F4zC5Gah6pOzSJdqiDTu3ERErADgP4NfVbyumYux35Fe3eZd6zaMEAeN7KH6A9XT4kXssCWXiKlthzh2ugRllKwt4hQGn5bPFFezK5rGqR%2B7ifE01Mh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebfed8e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 350 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   27996
Md5:    2a424d24ab2c74f09c1cdef968d0c6e6
Sha1:   08f4527d6ef70aeb2e9338f61c0292d201ce2aa3
Sha256: 5edbcaaf73e0b2bc018151cb44a4b53fdf39e5fc00a217cb4a050d1dcb88f7ce
                                        
                                            GET /upload/Rustam%20Oruj.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 28866
x-guploader-uploadid: ADPycdtKfwbbjKdm6TTTuJZPrH2UUmRjNU4KS2gbUcKrI4H-jIQc82DpSzIvhjDZ4MITDB_yVjAexlq0YOqIDzdH5CgR7ztf17AT
expires: Fri, 30 Sep 2022 20:39:57 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:47:28 GMT
etag: "7a81bfffa80a49fa130eaf03378d3b6d"
x-goog-generation: 1655329648409928
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 28866
x-goog-hash: crc32c=/SFR5g==, md5=eoG//6gKSfoTDq8DN407bQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3439
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IEZ0G4c%2B%2BTQHf8aiCOr%2FZ5VhBSCtGkUGeiJI7cHYnXZ5pfvai6H%2B2N0uCRLAZ5E8awZWcykcuMyAf7TR0AHecdVKivpfHXotF3gN4CAadsex2tVx7CFXS9Q1b192"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebfeb8e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Size:   28866
Md5:    7a81bfffa80a49fa130eaf03378d3b6d
Sha1:   98d2920144684413b97938217af15fdb5d0e2ca4
Sha256: 3f956b8874dc18d21d563308e8c9033daf5196ba5aef69b527e8ed5290199429
                                        
                                            GET /upload/Joseph%20Kanchi.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 17788
x-guploader-uploadid: ADPycdvDhK65WmF4WQmHKtIOSBenu8nWErTq9ik75SoZSXYR6ETvZV3BCUoJncLHNVkUa9anLY9Ow-2zLQkR3yzQsvtL0g
expires: Fri, 30 Sep 2022 20:50:12 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:39 GMT
etag: "74bde6939f074bbe9cb047c59d756ffe"
x-goog-generation: 1655329599108979
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 17788
x-goog-hash: crc32c=W0Dksg==, md5=dL3mk58HS76csEfFnXVv/g==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 974
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=09LoM%2BWPJFAe5ItN43fU%2BUIsKkPmVDpreQ%2FkAMTSyN1ZYPeHuCSH0HrlgDSiMdz7bt5YU6uYEAk86E3scBTluI%2FD8AjfRGhfrCBY16di5IlQyeOQvUpqcKddD5S4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebfef8e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size:   17788
Md5:    74bde6939f074bbe9cb047c59d756ffe
Sha1:   030b4e6729dcbb973b72f1a67c09099fe0dd2f2b
Sha256: a298f992db50a2c50f29b0f4fe8fe58f5ddb09de13fbf57fcf36d3ec631de62a
                                        
                                            GET /upload/Jubosh-Kolencik.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 27878
x-guploader-uploadid: ADPycdtl-Fok-o-o4v1H7O6HHWACTF1fIT843jPGCsC24JuUi8rVqhEcD5GCdVVbLbViTBeS_qlb8dX5avBMHBikAHVG4VPslRDl
expires: Fri, 30 Sep 2022 20:48:13 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:39 GMT
etag: "f610dc6591af9b85d5fbfb1933ea833f"
x-goog-generation: 1655329599305485
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 27878
x-goog-hash: crc32c=b9UNLg==, md5=9hDcZZGvm4XV+/sZM+qDPw==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 3196
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KkuHReLwsY09qP1PZF6pKeHffuiHpZ21TexuV%2FtbYrIUgY4c%2FiCaHv%2BIUFvu%2Fd6nYqcFtWJFdmtYlA%2FA3iqc1Y7uKy49ZmnLYIm2lDGNE3uklbLo7Mt5QtNoA%2By5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbeb8008e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Size:   27878
Md5:    f610dc6591af9b85d5fbfb1933ea833f
Sha1:   4b08fcc89454d352d422b9f375ccb44712b3e24a
Sha256: 55aaad0519b7bb45de57f1e1c9151a3ac381c3887f05f43d4ed3517e8bc8994e
                                        
                                            GET /upload/JD%20Doubek.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 10979
x-guploader-uploadid: ADPycds2G3yABEaBfTbQLFrIG805wXAbcOdx2tFug8RdCfZ-o1qEiomDi6JyD446mErgWMJhZnmXApHFyqD1Jbb4SeYUg0_2mqRW
expires: Fri, 30 Sep 2022 21:31:12 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:36 GMT
etag: "886e35d2eb247195f47cd4f7b39c80d3"
x-goog-generation: 1655329596079489
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 10979
x-goog-hash: crc32c=Od3P8w==, md5=iG410uskcZX0fNT3s5yA0w==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 760
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K5qBHkXmTQsHueiuJAO45f0fu%2BYTZhiJUxhdHhcyUQVCz9nqUvPHHHmA2fITL3kXzHaKaj2fV7OsOsVJ5INZbsIzsGZgeyjO%2ByD0t4Vz6Rw76nzJdLct3UU8XQY5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbeb8068e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 145x144, components 3\012- data
Size:   10979
Md5:    886e35d2eb247195f47cd4f7b39c80d3
Sha1:   be77d65cb783b6c26c51bd563ccd65b8fb552625
Sha256: d80598543812ad1c72793ec6f19e26525345d69cd5dc882b7e7e0b60f4a80a86
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GypH1+lsMvvhhdG5USzHhg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         34.215.91.121
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: XUjjCXH8YmVTVw+bsOCHAGf5QkU=

                                        
                                            GET /upload/L%C3%A9a%20Fenet.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 38178
x-guploader-uploadid: ADPycduerwHMccekTfMBKGtQy088ttjYaepL9f3JXEkzhNnaFKahsT8jBJFMj6HcZvU356DP0dsIODbeTCPzL-6tFg3lV4gszmbJ
expires: Fri, 30 Sep 2022 21:29:03 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:46:45 GMT
etag: "6a0ee2d82e9e2e4a63af4bd8ec9df5a5"
x-goog-generation: 1655329605318750
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 38178
x-goog-hash: crc32c=qUuqiw==, md5=ag7i2C6eLkpjr0vY7J31pQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1680
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mg64%2FXXlBQ7pvRcendySVLGO2jGxPa6bIydrNI1hiAxHQZwQyE%2BfGXK%2Ft0AbLplCZmVEPB6mNsEEkT7yjH%2B21ppHMbl%2FJjcE5eF3yEAnE9iGTU%2BNchk%2BqCh%2F3luz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebff98e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 300x300, components 3\012- data
Size:   38178
Md5:    6a0ee2d82e9e2e4a63af4bd8ec9df5a5
Sha1:   414f34e24d67e585298128249813d2cb54e6ed5d
Sha256: 4da5f51a7c92309a3b29ebf422e5460dc307e5d75e2cf83b486d8703abb2b97a
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 346
ETag: "1D923F44F9347867C282B6A139724A140C54B865F61D0BC001D73187C1467705"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11594
Expires: Sat, 01 Oct 2022 00:43:59 GMT
Date: Fri, 30 Sep 2022 21:30:45 GMT
Connection: keep-alive

                                        
                                            GET /upload/Volyntyru%20Marian.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 268772
x-guploader-uploadid: ADPycdvwidOpjYSL5cpDX8AID_q5P3VWa9dYAcXCls9nnG286wCnvGsrIV8pO-Ovcboo9ysrmGQUBBVTmIDeSsHvltv79829FFb3
expires: Fri, 30 Sep 2022 21:07:23 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:48:02 GMT
etag: "d6c5d2f7ae74fd4d609a6964f0169ffa"
x-goog-generation: 1655329682727159
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 268772
x-goog-hash: crc32c=M9wRag==, md5=1sXS9650/U1gmmlk8Baf+g==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 760
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2FBv%2BcXhdHN6bYI%2BVGU5Jkh6MngVEP8%2BjInuxKuwl%2FomHuTos2JnQe6Kd99kzZHzLD19dfH0rWBo1YQTYi7vFsL22%2Fbfgx1jJC5OgX336lEkjPoPpDPwkHi8nnFS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebfe68e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1431x1440, components 3\012- data
Size:   268772
Md5:    d6c5d2f7ae74fd4d609a6964f0169ffa
Sha1:   e6f6aaa64aaa5acbeeae12a787a3ac1593d8e396
Sha256: f0a0fc2609cdf7e43a7cd90e88368af8b9473a9b20a3ec35dfcb06d804a1c4f5
                                        
                                            GET /bnr_xload.php?section=General&pub=593174&format=300x50&ga=g&xt=166457344450986&xtt=49838 HTTP/1.1 
Host: uprimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         185.66.200.220
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 30 Sep 2022 21:30:45 GMT
expires: Fri, 30 Sep 2022 21:30:45 GMT
last-modified: Fri, 30 Sep 2022 21:30:45 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   75685
Md5:    2754a62e6d6dc58f0b1d5306d497280c
Sha1:   411fd136d025775cef3acf314bf98d0c4f7a9023
Sha256: 7926fb3d911e16a975caf527c8baea13384e8cf72cdfd01563e95bcc8dcffbd1
                                        
                                            POST /g/collect?v=2&tid=G-LW7434MYMN&gtm=2oe9s0&_p=1733433413&cid=652987056.1664573442&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664573442&sct=1&seg=0&dl=https%3A%2F%2Fv00jtf.cn%2FxXG3Ksxc%2Fusps%2F%3F_t%3D1664573441012&dr=http%3A%2F%2Fvisapropagate.cn%2F&dt=&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://v00jtf.cn
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://v00jtf.cn
date: Fri, 30 Sep 2022 21:30:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /g/collect?v=2&tid=G-0C230YDF7G&gtm=2oe9s0&_p=1733433413&cid=652987056.1664573442&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1664573442&sct=1&seg=0&dl=https%3A%2F%2Fv00jtf.cn%2FxXG3Ksxc%2Fusps%2F%3F_t%3D1664573441012&dr=http%3A%2F%2Fvisapropagate.cn%2F&dt=&en=page_view&_fv=1&_ss=1&_ee=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://v00jtf.cn
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

                                         
                                         216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                        
access-control-allow-origin: https://v00jtf.cn
date: Fri, 30 Sep 2022 21:30:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6285
Expires: Fri, 30 Sep 2022 23:15:31 GMT
Date: Fri, 30 Sep 2022 21:30:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6285
Expires: Fri, 30 Sep 2022 23:15:31 GMT
Date: Fri, 30 Sep 2022 21:30:46 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "C17A343CEB786A421F8C3ABFFFAE350E12C92271A69FC88EB8E8BAB568877D6B"
Last-Modified: Fri, 30 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6285
Expires: Fri, 30 Sep 2022 23:15:31 GMT
Date: Fri, 30 Sep 2022 21:30:46 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d906d66-cd90-4963-827e-8d0564c0f787.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5106
x-amzn-requestid: a906507c-8820-489c-9978-7d0fd026c862
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd5PE0MIAMF3DA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6336103a-49eb3879088f17bc01d177c7;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: op_2CSOAx9-hqXvj1nOyitq0UXqIyItmquWjMkmMdKWnwoTIA_SA6A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:45:26 GMT
age: 85520
etag: "3481dce8ab711111fc8863d88bee1a887cfd43ac"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5106
Md5:    13a12db696bc2bf6a6ea2f48f4c1428e
Sha1:   3481dce8ab711111fc8863d88bee1a887cfd43ac
Sha256: 6dae6c9e5de4146e1f528a36a1795225c9731385f13927fc001fb3f9842fe8f1
                                        
                                            GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
x-guploader-uploadid: ADPycdt8iAiFUD-J6NleyhXb8_vV8-wAPh_5tba_l2ugugXdkSJbrWiN1EsoSHZyahG4iSEJB_zV100HdRQRWXjd72Q
expires: Fri, 30 Sep 2022 21:11:14 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:44:44 GMT
etag: W/"31c898c6d2ea13c30441657ff1900d81"
x-goog-generation: 1647503084523089
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21236
x-goog-hash: crc32c=7cW0Gg==, md5=MciYxtLqE8MEQWV/8ZANgQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L9GGixyqfH6JzSExZ3lwDZFBTdhbzR%2BEQg%2BQ%2Bai%2FEa4pr1doXtAzMkoRh9U1%2FQseXCcdIUHp87RlyHxcvPruhITj%2Fm%2FJ%2FfVDMdHkj1q6zz5KyvBkwOTvb5k3XjHQv0BprWA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbca9b9b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (21060), with CRLF line terminators
Size:   15723
Md5:    f0582d2c50ab8201c9637781e084d7de
Sha1:   6b3d62485770e0f901c0ebdbfcdab680c89c397d
Sha256: e48031f1b71cd9c00443181004c933032aa58ff78bb1bc94843e8372447fd288
                                        
                                            GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
x-guploader-uploadid: ADPycdujKqP4OmsICcw4by2ej4M3gF2bmp67KcND5Yd7ZkChGu92L3U7j930k4J7s5KmD98KzStiLKDZt_7_8jjTVv4
expires: Fri, 30 Sep 2022 21:17:32 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:30:17 GMT
etag: W/"3e4bb227fb55271bfe9c9d4a09147bd8"
x-goog-generation: 1647502217775195
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 89501
x-goog-hash: crc32c=JnXAUA==, md5=PkuyJ/tVJxv+nJ1KCRR72A==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2hUtJXYV8MkJh%2F%2Ffb3ZnPnUOsPQ6X4FNrQvmZ6FFibeHLGL%2BKdkd%2F0WcdK6S0%2BlTAHZ59LjcHCULN7Jd%2FtNebKqmNHXVjXedTx%2BOYR8%2BxNTVOr67HzKKUN4w1Y9L%2B9F5Ru0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbc99a1b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65446), with CRLF line terminators
Size:   42332
Md5:    7a068679261a70df34926a4246ac8c54
Sha1:   41084b0d2a95123dc6d53296803d99b18034261f
Sha256: d4c48ec998c214cea4ea2eaf6bd7f0c7e5999eb61a9134b58c5c4d307376aeba
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:49:47 GMT
age: 85259
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14073
Md5:    11594ce7500d8776bfd5162b17f87d72
Sha1:   72603efba82d649ce5a7a0ca45dc830c0d9ef012
Sha256: 511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
                                        
                                            GET /npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
x-guploader-uploadid: ADPycds_5oPtcr3KFpC_u7Lnvdlqz8VeCGxAgHcXFP3zMljDMh6Q0ifyAwrLV7e0dbEbUBwQbF9kY0g0GrHWdqicRh8
expires: Fri, 30 Sep 2022 21:44:09 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:40:39 GMT
etag: W/"80924b62e5b3ac73aa4849776b439770"
x-goog-generation: 1647502839791727
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 72765
x-goog-hash: crc32c=8ZRUYw==, md5=gJJLYuWzrHOqSEl3a0OXcA==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m1HoPg%2B0oZF6IAxfft6ZLKr%2FZm0drE%2F%2F0eygJ7i7e0lwUNcOGKxMwT4H4ftWCWxBCLR7nIu8ynYiRh84myoouu%2Bua7Q5%2Bt3dV9%2BYhVZgku%2ByZ472sSPhpejHdIs8MB55vqU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbc9999b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (48058), with CRLF line terminators
Size:   35753
Md5:    cf27595fee0cca79290615056bbd79a4
Sha1:   cac37a61a215033cdce5073cefc0966f448fe177
Sha256: 54f1bb8882b63bde7cb2f85186d4d7847a55311e1c8f263ce1dcfe925d665be3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12af206-9f17-40de-9764-14d3cdcb4d2f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6722
x-amzn-requestid: 6aca2e04-02b4-4e42-8bba-9bbe2ace1ed0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPeLrGq1oAMFuAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633610b0-65b0664d0233107029ef0157;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:40:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DClqs8vTlqibRwXU8dIkkFCUxigTLduturaxCfuvsMtDm-4VXjx2mg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:12:16 GMT
age: 83910
etag: "3248ca3a8b88efd5be8499898fce957d096cf211"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6722
Md5:    5b8d0a19bc0a56bb40a975c5c71af05a
Sha1:   3248ca3a8b88efd5be8499898fce957d096cf211
Sha256: da44d6dd845dc400b0b76f19c67e5a79d9359ce24fe5e4490477f195b23203b4
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:46 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 04 Oct 2022 19:17:20 GMT
ETag: "9e0a323d213fe1e9741b2ed000a0820c9ce393e4"
Last-Modified: Fri, 30 Sep 2022 19:17:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1404
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75300fc9083ab4ee-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    88007b87ee3b30c9e50b5741b0fa7cd0
Sha1:   9e0a323d213fe1e9741b2ed000a0820c9ce393e4
Sha256: b0aff4d13b0ec2e37cc2afd4ca4002024f090be9853d00665fb38854f727ed0b
                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         104.18.20.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 30 Sep 2022 21:30:46 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Tue, 04 Oct 2022 19:17:20 GMT
ETag: "9e0a323d213fe1e9741b2ed000a0820c9ce393e4"
Last-Modified: Fri, 30 Sep 2022 19:17:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1404
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75300fc9185eb4ee-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    88007b87ee3b30c9e50b5741b0fa7cd0
Sha1:   9e0a323d213fe1e9741b2ed000a0820c9ce393e4
Sha256: b0aff4d13b0ec2e37cc2afd4ca4002024f090be9853d00665fb38854f727ed0b
                                        
                                            GET /hm.js?ba99808308e7272d58c43367a11d1204 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11350
Date: Fri, 30 Sep 2022 21:30:47 GMT
Etag: ea4404ed6fc19b411d57d9b27851a82f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=024422D910E68DA0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (637)
Size:   11350
Md5:    3e868004e764a59a0f81b6d14f8bfb64
Sha1:   fa0ab869ca29994ed4140d383dff99d9fda03b3a
Sha256: aa156d0731239406db9130c371ef204b49e7afc31b08c37d06e907c53f383d54
                                        
                                            GET /hm.js?5bc34d9a0b7ef4a641f623683ea4f5e4 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11380
Date: Fri, 30 Sep 2022 21:30:47 GMT
Etag: 3f69996f68db8f0d949a7d9934411358
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=3258993FAD41105A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (667)
Size:   11380
Md5:    05cdc7ef75bb19d8d34af8711d4ac91d
Sha1:   b5b4ecfd18e13a337a10e49106cad36de942d385
Sha256: d1eb2b4e92e6ade8aa70fa21e70f8490f8c4ea713cd3a93ad4fc3ebd9377166c
                                        
                                            GET /hm.js?957de4d70bf7b7be33bc859d43ad70c6 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11346
Date: Fri, 30 Sep 2022 21:30:47 GMT
Etag: e263d5d08c83e8da5a03de14c4d9adf8
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=446C512DF26915D9; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (633)
Size:   11346
Md5:    0d5a3408a70d9d574f5c194baa80fbec
Sha1:   c9cb36f912e33711ffb6b03bf5ab3a74d90d8f35
Sha256: 3178020a0cffa3092a6349bde54cc55fbe814f3de4eda069b61ed52ee6a3bee6
                                        
                                            GET /hm.js?8b68846a3ac1709b0ec7199084ee5ea8 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11341
Date: Fri, 30 Sep 2022 21:30:47 GMT
Etag: 99e7ece30251014a2a476c24bbb8b921
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=7F9211614E285707; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800


--- Additional Info ---
Magic:  ASCII text, with very long lines (628)
Size:   11341
Md5:    0b6cf16c1bdb96133f98bd855340cd51
Sha1:   10c29f7ac63ca35d76a5f54131d66d0e4f3f082e
Sha256: 69aa6745286a4a1e95c231bda66cdca83b4875987b231b4f023fa75e8bf462d8
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1243473897&si=ba99808308e7272d58c43367a11d1204&su=http%3A%2F%2Fvisapropagate.cn%2F&v=1.2.97&lv=1&sn=49979&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fv00jtf.cn%2FxXG3Ksxc%2Fusps%2F%3F_t%3D1664573441012%231664573442219 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Fri, 30 Sep 2022 21:30:47 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=71A841B26532A7E3; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=742983028&si=5bc34d9a0b7ef4a641f623683ea4f5e4&su=http%3A%2F%2Fvisapropagate.cn%2F&v=1.2.97&lv=1&sn=49979&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fv00jtf.cn%2FxXG3Ksxc%2Fusps%2F%3F_t%3D1664573441012%231664573442219 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Fri, 30 Sep 2022 21:30:47 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=5276CB7866442313; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=458057435&si=957de4d70bf7b7be33bc859d43ad70c6&su=http%3A%2F%2Fvisapropagate.cn%2F&v=1.2.97&lv=1&sn=49980&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fv00jtf.cn%2FxXG3Ksxc%2Fusps%2F%3F_t%3D1664573441012%231664573442219 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Fri, 30 Sep 2022 21:30:48 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=E1EA6415D45065D0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1813081318&si=8b68846a3ac1709b0ec7199084ee5ea8&su=http%3A%2F%2Fvisapropagate.cn%2F&v=1.2.97&lv=1&sn=49980&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fv00jtf.cn%2FxXG3Ksxc%2Fusps%2F%3F_t%3D1664573441012%231664573442219 HTTP/1.1 
Host: hm.baidu.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         103.235.46.191
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Date: Fri, 30 Sep 2022 21:30:48 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=74C4C9CF0FE6590F; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /js/responsive.js HTTP/1.1 
Host: bonepa.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.201.42
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 30 Sep 2022 21:30:44 GMT
last-modified: Tue, 20 Sep 2022 17:57:57 GMT
etag: W/"6329ff25-cd3"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/bootstrap@4.6.0/dist/js/bootstrap.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
x-guploader-uploadid: ADPycdv0chj5F1Awc6K7Usaiie2qXL87Fxg5kp7mYqQH9s8HWV5Nuv0HuTqJ2hz1F5xUG9MGapUfK4P-pfLXRasYr-w
expires: Fri, 30 Sep 2022 21:57:34 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:36:54 GMT
etag: W/"c99230d2575380d7f95ff626606d2426"
x-goog-generation: 1647502614200576
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 63473
x-goog-hash: crc32c=x2l+AA==, md5=yZIw0ldTgNf5X/YmYG0kJg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PApBeasDoH1WyPA3gCqjTZqc29520tBTMDMeM2QvK2F4op2rbWWK3DXkhCTlprvB3GOIXpgLPt3wkbeOzaoPANtJ1aF5eH%2Fz1FjYW15MvlaSgdKQLh0tlb7%2Fna9SiRDonhY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbc898eb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/lazyload@2.0.0-rc.2/lazyload.min.js HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
x-guploader-uploadid: ADPycdsQwI6S5jC2ZwwNbaEnMvjelWJ3GXYdnwkp6yGGRsWcMv2CGKN45430-s2v57JOsXldQJq3rMwQOTmm_DkHtW4
x-goog-generation: 1647502963816044
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4798
x-goog-hash: crc32c=lted8w==, md5=3G3pgTxxS6mXM8pPtdOh+g==
x-goog-storage-class: STANDARD
expires: Fri, 30 Sep 2022 21:11:48 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:42:43 GMT
etag: W/"dc6de9813c714ba99733ca4fb5d3a1fa"
cf-cache-status: HIT
age: 1819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VlN%2B7GvU8kTq9mwU%2B65sVEKLdTSjgqnPX%2BfOYLPAN6eW1ef4DGu%2FOwO0X%2BK3sjVMBQQgCA0vYN3kR8PcZHyoBQwpu5B%2BwH06yqNjoeTo%2FeWPY%2Bp%2BSd1mre7dIcKL%2FR8iTFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbca9c1b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /4fe48aebd6/4f59451604/?placementName=Tab&randomA=0_5239&maxw=0 HTTP/1.1 
Host: bonepa.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         185.66.201.42
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: nginx
date: Fri, 30 Sep 2022 21:30:48 GMT
set-cookie: shown1=0; expires=Sat, 01-Oct-2022 21:30:48 GMT; Max-Age=86400; secure; SameSite=None used_ad2633647=1; expires=Sat, 01-Oct-2022 03:59:59 GMT; Max-Age=23351; path=/; secure; SameSite=None total_impressions=1; expires=Sat, 01-Oct-2022 03:59:59 GMT; Max-Age=23351; secure; SameSite=None used_c_51865=1; expires=Sat, 01-Oct-2022 21:30:48 GMT; Max-Age=86400; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /npm/bootstrap@4.6.0/dist/css/bootstrap.min.css HTTP/1.1 
Host: cdn.jsdelivr.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.21.0.245
HTTP/2 200 OK
content-type: text/css
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
x-guploader-uploadid: ADPycduCHwg6n53VPzNb_-57qJzhoPJbEBdMgpsWgTX19t4NIh3Tdte6MCXenDGQTAuiJrpSRG3G9WDZErClLNvZVXhXccOSWw
expires: Fri, 30 Sep 2022 21:11:08 GMT
cache-control: public, max-age=3600
last-modified: Thu, 17 Mar 2022 07:38:12 GMT
etag: W/"feba0d0760607b9e21393156949afcd9"
x-goog-generation: 1647502692716912
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 161415
x-goog-hash: crc32c=Sb/HMQ==, md5=/roNB2Bge54hOTFWlJr82Q==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 1819
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yB%2FPxuzSwupMU35Yl5aEjI3WmL%2FNNoZkNr0%2F%2BCAK8YnNe1gGsMw80DtlvR6PS8m9ySPPPKhCS0aq2zAx5kQ5N5AargS7MZZDOZLsMfctBN%2BZIZndKhs6X8RxV8FJcPjF2p8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbc999fb50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1 
Host: v00jtf.cn
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/xXG3Ksxc/usps/?_t=1664573441012
Cookie: pType=mo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                         
                                         172.67.188.168
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-4d7"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Hun5xdOyqrJ4bC14RLtHuVvmPHbRqbaZNM5CtmIAtwympTJyCYcO0su4iDFC7rhBqKpXct%2FFj39S%2B1qbtPkqvKXloiLU6oFrJPG3klKg%2BUXE9qaDLlaVTlIEoA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbc6fecb4ff-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sun, 02 Oct 2022 21:30:44 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /upload/Pierre%20Renaudin.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 21791
x-guploader-uploadid: ADPycdtY74Db5IizNzfWB7t1EtJCOn834FBsfEYjBn-lFCPE07g4n1JFrw30FM6TqG5Ia-5jMcUVbltpsPu7AuMyUi5SG0P9XPaB
expires: Fri, 30 Sep 2022 21:46:39 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:47:17 GMT
etag: "8f63e05228dc94b4f5091a84c9b4168d"
x-goog-generation: 1655329637728133
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 21791
x-goog-hash: crc32c=bXAAZg==, md5=j2PgUijclLT1CRqEybQWjQ==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2645
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5Mq9Fv2WT891jRLXyMLt%2FaMh5a0xsgE6rMpw31qqv0ZGIRVFSonqw%2Bodp34dlRFLQvz%2FXUgXdY3n2HGdwTK4Otuaah%2BvdyYqI2H06eveTs4%2FYV0j2Aj%2FieAn4Kfw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbeafc38e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /bnr.php?section=General&pub=593174&format=300x50&ga=g HTTP/1.1 
Host: uprimp.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         185.66.200.220
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 30 Sep 2022 21:30:44 GMT
expires: Fri, 30 Sep 2022 21:30:44 GMT
last-modified: Fri, 30 Sep 2022 21:30:44 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /upload/Treesisilia.jpg HTTP/1.1 
Host: 263cdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://v00jtf.cn/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.235.73
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Fri, 30 Sep 2022 21:30:44 GMT
content-length: 24569
x-guploader-uploadid: ADPycdvS0ROLT0EBQiNPWUI-jTcF0moCT0SuvTSF2Fnswk7WYC3wMoNKJWXSyVH00xm88rTdhoSv3NvTx98DgmyK3WmvkEt8Pl-L
expires: Fri, 30 Sep 2022 21:47:29 GMT
cache-control: public, max-age=14400
last-modified: Wed, 15 Jun 2022 21:47:57 GMT
etag: "22fb858c0563c2482d086cca3cd26cb6"
x-goog-generation: 1655329677032585
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 24569
x-goog-hash: crc32c=hwzIAA==, md5=IvuFjAVjwkgtCGzKPNJstg==
x-goog-storage-class: STANDARD
cf-cache-status: HIT
age: 2595
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iNMoVWLjfVfqpIKVgmPaDiqfXIqxd7D%2FIOj1PfHNBNWyHZ4ndWeA%2Ftc77tC0LZ5W9Ve713KJPyp1%2Btw92%2BiKTx%2FdpUf2Em4mNPTuVZw4TfVhGF5envbbIsQklKE4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75300fbebfea8e12-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---