urlquery - report: role.tongift.shop/Kchgswpdsx/didfruu574dcgsrrbff/usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
ocsp.digicert.com (2)	86	2012-05-21 07:02:23 UTC	2020-05-02 20:58:10 UTC	93.184.220.29
role.tongift.shop (16)	0	2022-11-24 07:09:24 UTC	2022-11-27 16:55:49 UTC	104.21.60.233	Unknown ranking
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-11-27 05:29:57 UTC	34.117.237.239
www.googletagmanager.com (1)	75	2013-05-22 02:07:37 UTC	2022-11-27 06:32:27 UTC	142.250.74.168
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-21 23:36:00 UTC	2020-02-19 04:43:25 UTC	34.120.237.76
r3.o.lencr.org (7)	344	No data	No data	23.36.77.32
content-signature-2.cdn.mozilla.net (1)	1152	No data	No data	34.160.144.191
ocsp.pki.goog (5)	175	2018-07-01 06:43:07 UTC	2020-05-02 20:58:16 UTC	142.250.74.3
push.services.mozilla.com (1)	2140	2014-10-24 08:27:06 UTC	2020-05-03 10:09:39 UTC	54.189.139.67
fonts.gstatic.com (2)	0	2014-09-09 00:40:21 UTC	2022-11-27 05:33:29 UTC	216.58.207.195	Domain (gstatic.com) ranked at: 540
hh360trk.com (1)	0	No data	No data	18.184.38.55	Unknown ranking
www.google-analytics.com (2)	40	2012-10-03 01:04:21 UTC	2022-11-27 07:15:06 UTC	142.250.74.174
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-11-27 05:29:56 UTC	34.102.187.140

Scan Date	Severity	Indicator	Comment
2022-11-27	2	role.tongift.shop/Kchgswpdsx/didfruu574dcgsrrbff/usG1LvO8eIeQZGP5pf9giX8C18 (...)	Malware

Date	UQ / IDS / BL	URL	IP
2023-03-12 18:34:01 +0000	0 - 0 - 2	sandbest.xyz/	172.67.202.31
2023-02-04 11:47:43 +0000	0 - 0 - 2	steamcommunlte.com/get/765632235866	172.67.202.31
2022-11-27 17:16:16 +0000	0 - 0 - 1	role.tongift.shop/Kchgswpdsx/didfruu574dcgsrr (...)	172.67.202.31
2022-11-24 15:19:16 +0000	0 - 0 - 1	role.tongift.shop/zshhlxuhdi/Zjnbomjy1mYqKXMs (...)	172.67.202.31
2022-10-06 18:18:01 +0000	0 - 0 - 4	hipflatter.cn/usps/tb.php?vu=dp1665078223504	172.67.202.31

Date	UQ / IDS / BL	URL	IP
2023-03-31 09:26:40 +0000	0 - 1 - 0	41gold-spin777.com/update/GOLDSPIN.exe	104.21.8.100
2023-03-31 09:26:32 +0000	0 - 0 - 20	bji1m9q4ujutwjsqe77yxs8bw.lspower.xyz/usps/ve (...)	104.21.64.71
2023-03-31 09:26:29 +0000	0 - 0 - 18	or8azzq.lspower.xyz/usps/verification.html	188.114.97.1
2023-03-31 09:25:12 +0000	0 - 0 - 7	ezavh.orweb.yachts/Y06nblrkz/WVsVn1U9z8U3W7N5 (...)	104.21.78.47
2023-03-31 09:25:09 +0000	0 - 0 - 7	ezavh.orweb.yachts/Y06nblrkz/WVsVn1U9z8U3W7N5 (...)	104.21.78.47

Date	UQ / IDS / BL	URL	IP
2022-11-27 17:16:16 +0000	0 - 0 - 1	role.tongift.shop/Kchgswpdsx/didfruu574dcgsrr (...)	172.67.202.31
2022-11-27 07:43:18 +0000	0 - 0 - 1	pest.tongift.shop/Ogkrb/MPUjGt5lUTr_tyP6GLcwZ (...)	104.21.60.233
2022-11-26 09:16:23 +0000	0 - 0 - 1	pest.tongift.shop/ykklhldmal/mrejta572tidb/Xa (...)	104.21.60.233
2022-11-24 15:19:16 +0000	0 - 0 - 1	role.tongift.shop/zshhlxuhdi/Zjnbomjy1mYqKXMs (...)	172.67.202.31

Request	Response
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=10208 Expires: Sun, 27 Nov 2022 20:06:13 GMT Date: Sun, 27 Nov 2022 17:16:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: cdbad2434b7d127a4fc769807a9dc3e7 Sha1: fa98cd9fc2309ab4423f33f683d17bdb17d76713 Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2009 Cache-Control: max-age=150517 Date: Sun, 27 Nov 2022 17:16:05 GMT Etag: "63833c71-1d7" Expires: Tue, 29 Nov 2022 11:04:42 GMT Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT Server: ECS (ska/F717) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 64b2a23eab6e5ae8c010ec7242be930c Sha1: 0673e4385ba01a5a245711bab96cafc34f765793 Sha256: 64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Sun, 27 Nov 2022 16:19:23 GMT cache-control: public,max-age=3600 age: 3402 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: d130218d0e2841f39c99610fe1a2ab90 Sha1: 29fbe1e177ee55c7a61ae0a206afff271cf5f945 Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786" Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=15806 Expires: Sun, 27 Nov 2022 21:39:31 GMT Date: Sun, 27 Nov 2022 17:16:05 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 71f9c681a82440fd55e76c780a20e55d Sha1: 3147768cfbcdd06e0c6e69684292e68e99917a80 Sha256: 5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
GET /Kchgswpdsx/didfruu574dcgsrrbff/usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: role.tongift.shop/Kchgswpdsx/didfruu574dcgsrrbff/usG1Lv (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 3353002e94eddfb6d043dce4eccb1804c1e8bd2c02f599175c023e980bfcfe9d 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 27 Nov 2022 17:16:05 GMT Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fxqRIE7NUSkncMRWiN%2FCVi8Or2nL1BHUrHNi65JyW4h32P%2B8T4oAlyuTUFyJskosTpOf2WFKLnF1tf4DLrm13VqGTxgaOxwQ1uY1%2FAOGUOMFEA%2BMOwUMG0%2FWWDsXwymU%2Bfektg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 770c8275eb030af6-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (336) Size: 595 Md5: 637eb7d41b2d1ca367cd092f07a4a878 Sha1: 9fdb6bc70f1c694eff2d56aef704eaa3db7a5c14 Sha256: 3353002e94eddfb6d043dce4eccb1804c1e8bd2c02f599175c023e980bfcfe9d Alerts: Blocklists: - fortinet: Malware
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: ASRW9HCCZSradJTbRT/X/NmdW7jC5AdQLeRKlR3sPA3G0KVmndktr8KWuS7PXAJI07T4rnkzTfYf1yroQLvPwA== x-amz-request-id: 5YV0FXC9Q9E3JTF8 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Sun, 27 Nov 2022 16:41:42 GMT age: 2063 last-modified: Thu, 10 Nov 2022 09:21:27 GMT etag: "9ebddc2b260d081ebbefee47c037cb28" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 9ebddc2b260d081ebbefee47c037cb28 Sha1: 492bad62a7ca6a74738921ef5ae6f0be5edebf39 Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sun, 27 Nov 2022 17:16:05 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 27 Nov 2022 17:16:05 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 0ee1d1a60ec1770ec3e880a25c257f5d Sha1: 015b05feff63bdcf8fae4d1a8c0c83c923a2ca67 Sha256: b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
GET /gtag/js?id=UA-22484186-3 HTTP/1.1 Host: www.googletagmanager.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://role.tongift.shop/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.googletagmanager.com/gtag/js?id=UA-22484186-3 FQDN: www.googletagmanager.com IP: 142.250.74.168 HASH: 3256183a3925819919ed3259f53b45068da71f4fa1962487888f1777f127b73b 142.250.74.168 HTTP/2 200 OK content-type: application/javascript; charset=UTF-8 access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Cache-Control content-encoding: br vary: Accept-Encoding date: Sun, 27 Nov 2022 17:16:05 GMT expires: Sun, 27 Nov 2022 17:16:05 GMT cache-control: private, max-age=900 last-modified: Sun, 27 Nov 2022 15:00:00 GMT strict-transport-security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin server: Google Tag Manager content-length: 43614 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1921) Size: 43614 Md5: ed24443f51f43328abe9463923c269a3 Sha1: acad07c026e525590438578b46336ee20387eb98 Sha256: 3256183a3925819919ed3259f53b45068da71f4fa1962487888f1777f127b73b
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 27 Nov 2022 17:16:06 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 0ee1d1a60ec1770ec3e880a25c257f5d Sha1: 015b05feff63bdcf8fae4d1a8c0c83c923a2ca67 Sha256: b6845619444a37f322c044933a44cf3fd283a18a54d03bad4f76a2ed8c2cbaf6
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 34.102.187.140 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 34.102.187.140 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Sun, 27 Nov 2022 17:08:54 GMT cache-control: public,max-age=3600 age: 432 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /jquery-1.11.0.min.js HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/Kchgswpdsx/didfruu574dcgsrrbff/usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/jquery-1.11.0.min.js FQDN: role.tongift.shop IP: 104.21.60.233 HASH: e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16 104.21.60.233 HTTP/1.1 200 OK Content-Type: application/javascript Date: Sun, 27 Nov 2022 17:16:06 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 08 Nov 2022 07:16:06 GMT ETag: W/"636a0236-1787d" Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lh9rwTYU4B68DoWMCqlKy2scF6Z1NLksWNS%2BjIampwQVTxixKK%2FV6Lxvck0DGkn12%2BOKfNO2EHBT6VxGL1WMkseMxxr2H1O%2FVNDSbnVVWS8aWVKWMeIICNRw0aPBCXZ00apjMQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c8278ae000af6-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (32341) Size: 33436 Md5: 95fe3f4dd117c33f6015e1c3d6df1d0d Sha1: d5b8856932d1ea63f51824de0bb50670d2e960bc Sha256: e6945ac3f1927f242a9fd7a5cf67720f7763888127a7427eb24ffc52019d4b16
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 1262 Cache-Control: max-age=144708 Date: Sun, 27 Nov 2022 17:16:06 GMT Etag: "638328ac-1d7" Expires: Tue, 29 Nov 2022 09:27:54 GMT Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT Server: ECS (ska/F717) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: a6fee11dfe1b88cd768a0ca3e2bd0c89 Sha1: 59cec9a44a4a92467678afe65f347f68641a2174 Sha256: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f
GET /offer.php?id=383&sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/Kchgswpdsx/didfruu574dcgsrrbff/usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o Upgrade-Insecure-Requests: 1	URL: role.tongift.shop/offer.php?id=383&sid=999752&h=usG1LvO (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 35a1e35e8c47d3c61931128f6be3a68233acb6c63d51a80abb0e2538c595bb11 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 27 Nov 2022 17:16:06 GMT Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vrGCM5CucNF66KJxrvbWSLd4j8%2Bwvxg5gVAGQsaCz2E3m0I2P4etod%2FJ8NIJBkpASinCX9atCcB1l7a5fHmGV5%2Fq4K8Hb%2FuYJBvlXLu4djmv%2BnvM1GVHEjwVhEWA8vL%2Be6X5XA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 770c827cdaa20af6-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (357) Size: 382 Md5: 41e5018e80efb6bacd10f2bcbbf02ae5 Sha1: 61b9193bb60834bbfee14d7d77d86591acc19d5c Sha256: 35a1e35e8c47d3c61931128f6be3a68233acb6c63d51a80abb0e2538c595bb11
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: 39HY/C60NwaUk4h3xCLMSQ== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.189.139.67 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.189.139.67 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: +FukYyTY85TBhIZyqn35vGPUqW4= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: role.tongift.shop/clicks/NerveControl911.php?sid=999752 (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 1218e8ae7e55a0867c4f32baed20b76951e56be99791249007783284e0799b70 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sun, 27 Nov 2022 17:16:06 GMT Transfer-Encoding: chunked Connection: keep-alive CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xq0hE1hjNZ3e7XZfYYRCP2lKgnIHkaICermiLUTsUahOcwvw7jD%2B%2BXhS%2Bl9LPJ%2Fr1RyGXlt4dckCmsoRmBxGIwHzM99F7R6A6690TO7xqHbT99tOWfo4w8XZjAruIb%2FZHuX%2BKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 770c827e7c880af6-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (528), with CRLF line terminators Size: 3163 Md5: d8b42d6b0ae7f4eada4c23c9283f72d6 Sha1: f3ecfc8ed638d487097d0d211d9c89be794d2c6c Sha256: 1218e8ae7e55a0867c4f32baed20b76951e56be99791249007783284e0799b70
GET /clicks/NerveControl911php_files/style.css HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/style.css FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 62c4c7bc831153bc2729d5c53d3098708bc1bebf824890c99dfa38fc071d5949 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: W/"63655dc3-106e" Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oTzkYpopK0Mj15qGC1%2FKLFgiu%2FL6uvGT3nPocSTYCFfRlQuSUioW4AKwFZyGv9Zjp20BxYp8isz2YPtQwqibK%2BOPyrk54rH%2F1aZWPa7FQjEmKJ2E%2FE5AOTxCtO31iMSSbEzcAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c827faf130b4d-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 1075 Md5: 72245d1f6d9bb7f6522ca951d9d04b10 Sha1: e8085e012da62c1a30f690906118edf3b437baee Sha256: 62c4c7bc831153bc2729d5c53d3098708bc1bebf824890c99dfa38fc071d5949
GET /clicks/NerveControl911php_files/a.htm HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/a.htm FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 206b8e36d4343d9329e7258f52c6889204c0fe1a2a013c5c396bba1ed48fd115 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 27 Nov 2022 17:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dy6tJjr0WoYlZPTIqOsynqS27C%2FzDGdMFT4%2B0xPA2RfcDzk0QpoidYNa%2F4mVpriqbWEncQW22VogjATBoA5gAqhHDu%2FJGUjX7FxiJyoxhjD5uZM56BSPwEgtjBVPKdIxY5BQ7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 770c827faae70b41-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Size: 125 Md5: d03273d564c7cd40452a269c942d8efd Sha1: 748c085bf91801c086022e812141451d2af912f0 Sha256: 206b8e36d4343d9329e7258f52c6889204c0fe1a2a013c5c396bba1ed48fd115
GET /clicks/NerveControl911php_files/css2.css HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/css2.css FQDN: role.tongift.shop IP: 104.21.60.233 HASH: e5e2118369fc58239521af08af6798a79a2e2689d5c91cfdc98cfa8134a2db44 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: W/"63655dc3-73e1" Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fg8FoCx4mTATTDKN%2Fi7Ndq0fEWadFBghCyr0OFUXO7SNgwaP1%2B1c0xqThW9sy9sGofJWOWnWCNr368GIOXELcGADNOchgLSPQkkP3g%2BCEtATPk794yxme1axExbNUvsdxNYY%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c827fadb20af6-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text Size: 1102 Md5: 8a219262aed854c1d2a6c306d04e0e3d Sha1: 48d50c03d68a51e04e1b24d44193f85473998b4d Sha256: e5e2118369fc58239521af08af6798a79a2e2689d5c91cfdc98cfa8134a2db44
GET /clicks/NerveControl911php_files/js HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/js FQDN: role.tongift.shop IP: 104.21.60.233 HASH: d71071d3eac7b93201fded2f394afe04258fb87487159cd02292e33e4df6d3fd 104.21.60.233 HTTP/1.1 200 OK Content-Type: application/octet-stream Date: Sun, 27 Nov 2022 17:16:07 GMT Content-Length: 92256 Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: "63655dc3-16860" Accept-Ranges: bytes CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gUbilpFbrW05O7z%2FJao79jcDibxOS7crmt1DCzxI51ZV8Elx9Z72fq78CkJbg4Co48AdHeVdjgC0nG41vplbx3%2FiR2nMtcgoR7mzxlWrV076f35xZd6M%2FzpdeX584aZac15KnA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 770c827fafceb4f4-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (1567) Size: 92256 Md5: 5e3ca14d60bd3eedcb35b3d81366e1fa Sha1: efa0c8deb3fb36dc14ee4023a58bc33e66af3fea Sha256: d71071d3eac7b93201fded2f394afe04258fb87487159cd02292e33e4df6d3fd
GET /clicks/NerveControl911php_files/font-awesome.css HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/font- (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 13de46b403869629f28eb7e5c1403f714372b09b5eb8ecbe3a5955ba94debf16 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: W/"63655dc3-7918" Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=03plhv4DjPT%2Bjo0ZnPygQwbYDpGpmvxmGtdHNs2%2F0Nvy4uhPVEVfJsFgHVZItBQycn8SZxUUpHHng1lJCyx325dQw2nbfjMVwjfpY%2Bnw1i2ATDttkViKEhNhGsSebinD591Jdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c827fa81f1c02-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (30837) Size: 6875 Md5: d6c8c1428db744943001ade348510e65 Sha1: 83e16acc875a5e3559526ac3c3f31c471dc77d4c Sha256: 13de46b403869629f28eb7e5c1403f714372b09b5eb8ecbe3a5955ba94debf16
GET /clicks/NerveControl911php_files/bootstrap.css HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/boots (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 7f089afa20be1b81973430aff8e7211a7bd003efca24bb10f4d53c330c31c479 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:16:07 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: W/"63655dc3-2722e" Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GzQnEtfN%2BU61NEIbpfRLdA6nGsDjgtQNKn6khc53%2FbT1sCedFu%2Fgv%2Bl4NjDkSlbYGhUEU0DHayamUeNXOgf1nmA%2FlFHN%2BVDuc3h99TXBz9jY6vFEpTVVcMPpv0DSsAjb%2F5wkQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c827fae9f0b61-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with very long lines (65326) Size: 23831 Md5: e8e4147584ddb44d10ecebefa911d038 Sha1: 67212408bad1ba17893ca5beb7cacb078bc6ae86 Sha256: 7f089afa20be1b81973430aff8e7211a7bd003efca24bb10f4d53c330c31c479
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 27 Nov 2022 17:16:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: e9895464b828d538dc654c678c82b181 Sha1: af5791cd48761cb3f3f979b481c23e1508692823 Sha256: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 27 Nov 2022 17:16:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: e9895464b828d538dc654c678c82b181 Sha1: af5791cd48761cb3f3f979b481c23e1508692823 Sha256: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
GET /s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://role.tongift.shop Connection: keep-alive Referer: http://role.tongift.shop/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWb (...) FQDN: fonts.gstatic.com IP: 216.58.207.195 HASH: cce577471c2586f3e0c2518fff84a970d33f61491fb8c629341b86f238cf07c0 216.58.207.195 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 16692 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Fri, 25 Nov 2022 23:18:25 GMT expires: Sat, 25 Nov 2023 23:18:25 GMT cache-control: public, max-age=31536000 age: 151062 last-modified: Thu, 28 Oct 2021 00:32:10 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 16692, version 1.0\012- data Size: 16692 Md5: d65113b6da7ba4bd0a59dbda5a7e24d4 Sha1: 929ecf3ad6ab03123a7bad0609b4b8ba1623d4e8 Sha256: cce577471c2586f3e0c2518fff84a970d33f61491fb8c629341b86f238cf07c0
GET /s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1 Host: fonts.gstatic.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity Origin: http://role.tongift.shop Connection: keep-alive Referer: http://role.tongift.shop/ Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: fonts.gstatic.com/s/opensans/v27/memSYaGs126MiZpBA-UvWb (...) FQDN: fonts.gstatic.com IP: 216.58.207.195 HASH: a61d67250a5c36640e22099937af31613e68d6134439d5d4329efea0372aea79 216.58.207.195 HTTP/2 200 OK content-type: font/woff2 accept-ranges: bytes access-control-allow-origin: * content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="apps-themes" report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} timing-allow-origin: * content-length: 16408 x-content-type-options: nosniff server: sffe x-xss-protection: 0 date: Thu, 24 Nov 2022 07:06:39 GMT expires: Fri, 24 Nov 2023 07:06:39 GMT cache-control: public, max-age=31536000 age: 295768 last-modified: Thu, 28 Oct 2021 00:30:39 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: Web Open Font Format (Version 2), TrueType, length 16408, version 1.0\012- data Size: 16408 Md5: 875ba54801f7cf83ea70abf613fab665 Sha1: a747343db86c1ba5d10d6cb1814fd6ac6db42b65 Sha256: a61d67250a5c36640e22099937af31613e68d6134439d5d4329efea0372aea79
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sun, 27 Nov 2022 17:16:07 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: e9895464b828d538dc654c678c82b181 Sha1: af5791cd48761cb3f3f979b481c23e1508692823 Sha256: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0
GET /clicks/NerveControl911php_files/Neuropathy.png HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/Neuro (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: db3bf27182a095ce8eb5721b4547730034b6cf3751c11a32e43e3c0864424813 104.21.60.233 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:16:07 GMT Content-Length: 6693 Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: "63655dc3-1a25" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0wGAmp0ca%2BQ7%2BOZ4EFqlnKl%2Bkg5qWvjsnR%2FC1MlgSmqIWqTK9YUY9DUkks58cp4rtx%2FzrzCUWiRbiYhTmzhPUuRmrtI7XFcSUKQ6HalZlcOOv1ci7KXQE29slleW0HopDRz6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c82848c830b4d-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data Size: 6693 Md5: 3fc866dd424beaf246da4671122aa5cc Sha1: 01867e9939dea33d74abf8603200d3afa0965ec9 Sha256: db3bf27182a095ce8eb5721b4547730034b6cf3751c11a32e43e3c0864424813
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13161 Expires: Sun, 27 Nov 2022 20:55:28 GMT Date: Sun, 27 Nov 2022 17:16:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13161 Expires: Sun, 27 Nov 2022 20:55:28 GMT Date: Sun, 27 Nov 2022 17:16:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13161 Expires: Sun, 27 Nov 2022 20:55:28 GMT Date: Sun, 27 Nov 2022 17:16:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13161 Expires: Sun, 27 Nov 2022 20:55:28 GMT Date: Sun, 27 Nov 2022 17:16:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=13161 Expires: Sun, 27 Nov 2022 20:55:28 GMT Date: Sun, 27 Nov 2022 17:16:07 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: aebda342a81ad83f60d2523f54ccda67 Sha1: e590d9326e4a283e0929a8ffccb13cc4308af0e6 Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F34752db1-0be8-4784-9fa0-41e828e40e06.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 13049 x-amzn-requestid: 2755f206-af23-4597-b4b9-7dae5001d6be x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cBsvpHDJoAMFhFQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637d5b30-600008f573bd7e0024585eb1;Sampled=0 x-amzn-remapped-date: Tue, 22 Nov 2022 23:28:48 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: MA_O50Lu6RRAFJpzXmVXhkxvYazdX5Lhk2Qa5k9fYUhBta-IWpVT1g== via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 01:46:48 GMT age: 55759 etag: "3b0ec6a7188dadf986f72fda8110296d9abd6f35" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 13049 Md5: 1db6041a0bdb2319ae85afcc30caaeec Sha1: 3b0ec6a7188dadf986f72fda8110296d9abd6f35 Sha256: 05f1f9b7834e7268dc34e3233434217f58cb68ee43a403cd08d0bb0ab4f37815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4374 x-amzn-requestid: 16fa9401-4b57-4300-9377-3a7d96de3a38 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cGB7uFWJIAMFfTg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-637f16b1-3386c7b54d828c3b1393b9ce;Sampled=0 x-amzn-remapped-date: Thu, 24 Nov 2022 07:01:05 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: v8Bdyk4SLN0eSy5Ogkr2SbQAHWnbvRZJg7CD6-Xdzv3RDNlBwfoBHQ== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google date: Sun, 27 Nov 2022 08:10:48 GMT age: 32719 etag: "4770f56d4d9489df43f33952e4bfa84d8e46414e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4374 Md5: 514b4077fad50ba782e4bbb2c95c6852 Sha1: 4770f56d4d9489df43f33952e4bfa84d8e46414e Sha256: a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4803 x-amzn-requestid: 80f7f1c8-0316-4181-83ac-2787b1ae825f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iFHoIAMF2-g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-2c0a081b07e0785b4350c10c;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: AVwDLlKoy5pc9NNuR_OakMB0ONGAoO-k2AKwV--b2sjiaqYSKAWlZg== via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:51:37 GMT age: 69870 etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4803 Md5: cc0a257323f882caff067adb86d906e4 Sha1: cedf2f21be7cd366bd46055b62b5513db3011dfc Sha256: c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7380 x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iEegIAMFeuQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA== via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:50:08 GMT age: 69959 etag: "97a135335f5b1b042adeb385718f8808cb78528b" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7380 Md5: 76c00eceed956377d7469ef58b0815cb Sha1: 97a135335f5b1b042adeb385718f8808cb78528b Sha256: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F297e7532-86f8-4631-9062-cdd6a291b40b.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5099 x-amzn-requestid: 57648043-7820-453d-9549-0f743b6c2557 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4jFBvoAMFl1w= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-53b59d607b82c264180f469d;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: VsdLWuh4rCawI5V0YYGaHxEMl2YEVNgsbjfCwzDsrnCZhRK2FkCkVw== via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:51:41 GMT age: 69866 etag: "f2129466436cbbdd58abe42a47fb7af19eba58e6" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5099 Md5: 433875a1b1fef34e45f2d8ac344c07e3 Sha1: f2129466436cbbdd58abe42a47fb7af19eba58e6 Sha256: ab1e7b46f3804640c7dd94d70c8c31ec2dfc3e2f0f015a8556d04d9d9089c450
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10199 x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cOo4iF1VIAMF09g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0 x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ== via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google date: Sat, 26 Nov 2022 21:51:41 GMT age: 69866 etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10199 Md5: 2cd887044e91d7ed0f1a8d7119ff7dd0 Sha1: ae8aa4ce6ddaccba771fe65446926b60fc5628da Sha256: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
GET /d/.js?lpref=&lpurl=http%3A%2F%2Frole.tongift.shop%2Fclicks%2FNerveControl911.php%3Fsid%3D999752%26h%3DusG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE%2F42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o&lpt=Wellness%20Insights%20Today&t=1669569367461 HTTP/1.1 Host: hh360trk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://role.tongift.shop/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: hh360trk.com/d/.js?lpref=&lpurl=http%3A%2F%2Frole.tongi (...) FQDN: hh360trk.com IP: 18.184.38.55 HASH: 0605685efb44dd3decd77517436c575731b61f807247587de67080c579ffa2d4 18.184.38.55 HTTP/2 400 Bad Request content-type: text/html server: nginx date: Sun, 27 Nov 2022 17:16:07 GMT content-length: 152 cache-control: no-store, no-cache, pre-check=0, post-check=0 expires: Thu, 01 Jan 1970 00:00:00 GMT pragma: no-cache X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Size: 152 Md5: d9bacc468aa23334526933389545e120 Sha1: e26288b4bada404ce340ca72989f9f1193dc649c Sha256: 0605685efb44dd3decd77517436c575731b61f807247587de67080c579ffa2d4
GET /clicks/NerveControl911php_files/play%25204.png HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/play% (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: f9f64a212a52593a30f35ff918fa97cde2436353bdf12058310db5794c7d9abc 104.21.60.233 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:16:08 GMT Content-Length: 439847 Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: "63655dc3-6b627" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BDHlmzA9Pe%2FUL1V2IuVO43J2p%2BslQLsKnWzypMuDCD0XyEq82Ig76qNT5%2B7lBLdciXJzxzSG%2Bdc%2F9rpqsnK5GEVWu8vp9bXmVvIKTSo61mzSk2DevMDbWHbbckahhlT6osjyYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c82847e87b4f4-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: PNG image data, 760 x 507, 8-bit/color RGB, non-interlaced\012- data Size: 439847 Md5: c885a201f801bc863a75f090c0ba1bdb Sha1: 99ee2e54ad853835421af33b4fe39c6468eab847 Sha256: f9f64a212a52593a30f35ff918fa97cde2436353bdf12058310db5794c7d9abc
GET /clicks/NerveControl911php_files/watchNowBtn.png HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/clicks/NerveControl911php_files/watch (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: d53c90d42129da5d8d15cf2c75e827e5b2391ba5571d91e71ff1d3c5b9a95fde 104.21.60.233 HTTP/1.1 200 OK Content-Type: image/png Date: Sun, 27 Nov 2022 17:16:08 GMT Content-Length: 10933 Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: "63655dc3-2ab5" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oP36oBSkARdoQb0wFbHVeT2Y9JSzrI4sZl63f%2FeYh7PYicgtDInf5bGpBMkm%2BnuCwBcC2PYD8Aqg%2FfErK3JrRxZhRv6WYJBKlgBjR%2F7wXgpj0PBbA4lKFFcz%2FPksC9%2B%2BeEVRvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c82847c921c02-OSL alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: PNG image data, 341 x 111, 8-bit/color RGBA, non-interlaced\012- data Size: 10933 Md5: e84a44453f05a728fbef6a7a3393831f Sha1: b937e6c8a51201b61ed132b3bbefea67cd43c4c2 Sha256: d53c90d42129da5d8d15cf2c75e827e5b2391ba5571d91e71ff1d3c5b9a95fde
GET /clicks/NerveControl911php_files/blank.htm HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o Upgrade-Insecure-Requests: 1	URL: role.tongift.shop/clicks/NerveControl911php_files/blank.htm FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/html Date: Sun, 27 Nov 2022 17:16:08 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tno%2FDjCmPpZDBs5oIhK15pQvs42cm%2FWURRceaRM3%2Bk4y%2BHWt2CcUuY3KvdRHPAbVCFdmN70mX5Yuo7d5H8osLQzXrQyeiJRuerNYf9HonnubFFK4ll7kOck0lfEJIYHN2itBvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 770c8284bc7e0b61-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators Size: 548 Md5: 0a16aec008013f053a922381dee71f9d Sha1: 13a69b2e43a426ce54f9a47146955ec0bb169172 Sha256: 4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae
GET /analytics.js HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://role.tongift.shop/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: www.google-analytics.com/analytics.js FQDN: www.google-analytics.com IP: 142.250.74.174 HASH: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e 142.250.74.174 HTTP/2 200 OK content-type: text/javascript strict-transport-security: max-age=10886400; includeSubDomains; preload x-content-type-options: nosniff vary: Accept-Encoding content-encoding: gzip cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 20039 date: Sun, 27 Nov 2022 16:41:08 GMT expires: Sun, 27 Nov 2022 18:41:08 GMT cache-control: public, max-age=7200 age: 2100 last-modified: Tue, 27 Sep 2022 22:01:05 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (1325) Size: 20039 Md5: 47e6f374ca946fddd5b59871b325736c Sha1: baa9282efc8785e84d247c3bff518eaa45f101c4 Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
POST /j/collect?v=1&_v=j98&a=956642956&t=pageview&_s=1&dl=http%3A%2F%2Frole.tongift.shop%2Fclicks%2FNerveControl911.php%3Fsid%3D999752%26h%3DusG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE%2F42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o&ul=en-us&de=UTF-8&dt=Wellness%20Insights%20Today&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=830727655&gjid=854659325&cid=2146613738.1669569368&tid=UA-71193211-13&_gid=960782007.1669569368&_r=1&gtm=2ou1q0&z=722971395 HTTP/1.1 Host: www.google-analytics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: text/plain Content-Length: 0 Origin: http://role.tongift.shop Connection: keep-alive Referer: http://role.tongift.shop/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site TE: trailers	URL: www.google-analytics.com/j/collect?v=1&_v=j98&a=9566429 (...) FQDN: www.google-analytics.com IP: 142.250.74.174 HASH: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b 142.250.74.174 HTTP/2 200 OK content-type: text/plain access-control-allow-origin: http://role.tongift.shop date: Sun, 27 Nov 2022 17:16:08 GMT pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT cache-control: no-cache, no-store, must-revalidate last-modified: Sun, 17 May 1998 03:00:00 GMT access-control-allow-credentials: true x-content-type-options: nosniff cross-origin-resource-policy: cross-origin server: Golfe2 content-length: 1 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: very short file (no magic) Size: 1 Md5: c4ca4238a0b923820dcc509a6f75849b Sha1: 356a192b7913b04c54574d18c28d46e6395428ab Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
GET /favicon.ico HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o	URL: role.tongift.shop/favicon.ico FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 8aec3412c7c37feacec2dc9d7b2f3560a2e0af0af573085665a57e1d09ab397d 104.21.60.233 HTTP/1.1 200 OK Content-Type: image/x-icon Date: Sun, 27 Nov 2022 17:16:08 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Tue, 08 Nov 2022 07:16:01 GMT ETag: W/"636a0231-57e" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ibT1jmpdugXlPecm4cFT%2FTvtkKjOm9QhKuDbPcBZNJZodZ1wajJFvAv%2FyTsW17uxZIWU6sraJ9IqbA78LiuiIKTUDHTP1Tngbq%2FxOH5d27x0WjWd%2Bq%2BaFFKuagOcVMTvMV0bcA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c828669dfb4f4-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: MS Windows icon resource - 1 icon, 16x16\012- data Size: 69 Md5: f12fb6edbda074603f749a028770f49a Sha1: 419983c6073469bac7fb8535a847b8f78c2040ce Sha256: 8aec3412c7c37feacec2dc9d7b2f3560a2e0af0af573085665a57e1d09ab397d
GET /clicks/NerveControl911php_files/blank_data/inject.css HTTP/1.1 Host: role.tongift.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://role.tongift.shop/clicks/NerveControl911php_files/blank.htm	URL: role.tongift.shop/clicks/NerveControl911php_files/blank (...) FQDN: role.tongift.shop IP: 104.21.60.233 HASH: 93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc 104.21.60.233 HTTP/1.1 200 OK Content-Type: text/css Date: Sun, 27 Nov 2022 17:16:08 GMT Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT ETag: W/"63655dc3-f28" Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zJkxdVFthTE4AdeO8XsQ9f7pwVPrGWFIFsRSzJOGlwgWFHVqnli9wXM6sxrCRdVR8q7bh9HE0l1Xwa9rVg2jJ15v3qZ3qYHt11mTRVSEaHAPYMS6jq1Q7Z1ZGkew%2FjWC9NjMmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 770c8286ae7c0b61-OSL Content-Encoding: gzip alt-svc: h2=":443"; ma=60 --- Additional Info --- Magic: ASCII text, with CRLF line terminators Size: 928 Md5: e1c22e631b7cce42e3ef13cd9bb02ff5 Sha1: 6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae Sha256: 93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=10208 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:06:13 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:05 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    cdbad2434b7d127a4fc769807a9dc3e7

                                                Sha1:   fa98cd9fc2309ab4423f33f683d17bdb17d76713

                                                Sha256: 560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 16:19:23 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 3402 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    d130218d0e2841f39c99610fe1a2ab90

                                                Sha1:   29fbe1e177ee55c7a61ae0a206afff271cf5f945

                                                Sha256: 6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sun, 27 Nov 2022 17:16:05 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /gtag/js?id=UA-22484186-3 HTTP/1.1 

                                        
                                            
Host: www.googletagmanager.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/ 

                                        
                                            
Sec-Fetch-Dest: script 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.168

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/javascript; charset=UTF-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
access-control-allow-headers: Cache-Control 

                                        
                                            
content-encoding: br 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
date: Sun, 27 Nov 2022 17:16:05 GMT 

                                        
                                            
expires: Sun, 27 Nov 2022 17:16:05 GMT 

                                        
                                            
cache-control: private, max-age=900 

                                        
                                            
last-modified: Sun, 27 Nov 2022 15:00:00 GMT 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Google Tag Manager 

                                        
                                            
content-length: 43614 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (1921)

                                                Size:   43614

                                                Md5:    ed24443f51f43328abe9463923c269a3

                                                Sha1:   acad07c026e525590438578b46336ee20387eb98

                                                Sha256: 3256183a3925819919ed3259f53b45068da71f4fa1962487888f1777f127b73b

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.102.187.140

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 17:08:54 GMT 

                                        
                                            
cache-control: public,max-age=3600 

                                        
                                            
age: 432 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 1262 

                                        
                                            
Cache-Control: max-age=144708 

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:06 GMT 

                                        
                                            
Etag: "638328ac-1d7" 

                                        
                                            
Expires: Tue, 29 Nov 2022 09:27:54 GMT 

                                        
                                            
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT 

                                        
                                            
Server: ECS (ska/F717) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    a6fee11dfe1b88cd768a0ca3e2bd0c89

                                                Sha1:   59cec9a44a4a92467678afe65f347f68641a2174

                                                Sha256: 50870c499aae4d5dfd6df25a36cd04b6d185b66ef0590e46933984bf52e2483f

                                        
                                            GET / HTTP/1.1 

                                        
                                            
Host: push.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Sec-WebSocket-Version: 13 

                                        
                                            
Origin: wss://push.services.mozilla.com/ 

                                        
                                            
Sec-WebSocket-Protocol: push-notification 

                                        
                                            
Sec-WebSocket-Extensions: permessage-deflate 

                                        
                                            
Sec-WebSocket-Key: 39HY/C60NwaUk4h3xCLMSQ== 

                                        
                                            
Connection: keep-alive, Upgrade 

                                        
                                            
Sec-Fetch-Dest: websocket 

                                        
                                            
Sec-Fetch-Mode: websocket 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache 

                                        
                                            
Upgrade: websocket

                                         54.189.139.67

                                        
                                            HTTP/1.1 101 Switching Protocols

                                        

                                        
                                            
Connection: Upgrade 

                                        
                                            
Upgrade: websocket 

                                        
                                            
Sec-WebSocket-Accept: +FukYyTY85TBhIZyqn35vGPUqW4= 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            GET /clicks/NerveControl911php_files/style.css HTTP/1.1 

                                        
                                            
Host: role.tongift.shop

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o

                                         104.21.60.233

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT 

                                        
                                            
ETag: W/"63655dc3-106e" 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oTzkYpopK0Mj15qGC1%2FKLFgiu%2FL6uvGT3nPocSTYCFfRlQuSUioW4AKwFZyGv9Zjp20BxYp8isz2YPtQwqibK%2BOPyrk54rH%2F1aZWPa7FQjEmKJ2E%2FE5AOTxCtO31iMSSbEzcAw%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 770c827faf130b4d-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   1075

                                                Md5:    72245d1f6d9bb7f6522ca951d9d04b10

                                                Sha1:   e8085e012da62c1a30f690906118edf3b437baee

                                                Sha256: 62c4c7bc831153bc2729d5c53d3098708bc1bebf824890c99dfa38fc071d5949

                                        
                                            GET /clicks/NerveControl911php_files/css2.css HTTP/1.1 

                                        
                                            
Host: role.tongift.shop

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o

                                         104.21.60.233

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT 

                                        
                                            
ETag: W/"63655dc3-73e1" 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Fg8FoCx4mTATTDKN%2Fi7Ndq0fEWadFBghCyr0OFUXO7SNgwaP1%2B1c0xqThW9sy9sGofJWOWnWCNr368GIOXELcGADNOchgLSPQkkP3g%2BCEtATPk794yxme1axExbNUvsdxNYY%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 770c827fadb20af6-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   1102

                                                Md5:    8a219262aed854c1d2a6c306d04e0e3d

                                                Sha1:   48d50c03d68a51e04e1b24d44193f85473998b4d

                                                Sha256: e5e2118369fc58239521af08af6798a79a2e2689d5c91cfdc98cfa8134a2db44

                                        
                                            GET /clicks/NerveControl911php_files/font-awesome.css HTTP/1.1 

                                        
                                            
Host: role.tongift.shop

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o

                                         104.21.60.233

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT 

                                        
                                            
ETag: W/"63655dc3-7918" 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=03plhv4DjPT%2Bjo0ZnPygQwbYDpGpmvxmGtdHNs2%2F0Nvy4uhPVEVfJsFgHVZItBQycn8SZxUUpHHng1lJCyx325dQw2nbfjMVwjfpY%2Bnw1i2ATDttkViKEhNhGsSebinD591Jdg%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 770c827fa81f1c02-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (30837)

                                                Size:   6875

                                                Md5:    d6c8c1428db744943001ade348510e65

                                                Sha1:   83e16acc875a5e3559526ac3c3f31c471dc77d4c

                                                Sha256: 13de46b403869629f28eb7e5c1403f714372b09b5eb8ecbe3a5955ba94debf16

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    e9895464b828d538dc654c678c82b181

                                                Sha1:   af5791cd48761cb3f3f979b481c23e1508692823

                                                Sha256: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0

                                        
                                            GET /s/opensans/v27/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1 

                                        
                                            
Host: fonts.gstatic.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: identity 

                                        
                                            
Origin: http://role.tongift.shop 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/ 

                                        
                                            
Sec-Fetch-Dest: font 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         216.58.207.195

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: font/woff2

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="apps-themes" 

                                        
                                            
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]} 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
content-length: 16692 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Fri, 25 Nov 2022 23:18:25 GMT 

                                        
                                            
expires: Sat, 25 Nov 2023 23:18:25 GMT 

                                        
                                            
cache-control: public, max-age=31536000 

                                        
                                            
age: 151062 

                                        
                                            
last-modified: Thu, 28 Oct 2021 00:32:10 GMT 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Web Open Font Format (Version 2), TrueType, length 16692, version 1.0\012- data

                                                Size:   16692

                                                Md5:    d65113b6da7ba4bd0a59dbda5a7e24d4

                                                Sha1:   929ecf3ad6ab03123a7bad0609b4b8ba1623d4e8

                                                Sha256: cce577471c2586f3e0c2518fff84a970d33f61491fb8c629341b86f238cf07c0

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    e9895464b828d538dc654c678c82b181

                                                Sha1:   af5791cd48761cb3f3f979b481c23e1508692823

                                                Sha256: c93a71d276aa3f386bef66ed2b4d69e041cccc9a4df5024b14d54ce2569948f0

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13161 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:55:28 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13161 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:55:28 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB" 

                                        
                                            
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=13161 

                                        
                                            
Expires: Sun, 27 Nov 2022 20:55:28 GMT 

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:07 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    aebda342a81ad83f60d2523f54ccda67

                                                Sha1:   e590d9326e4a283e0929a8ffccb13cc4308af0e6

                                                Sha256: bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F597d0b25-8af2-425a-be32-195ac8e4bc00.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 4374 

                                        
                                            
x-amzn-requestid: 16fa9401-4b57-4300-9377-3a7d96de3a38 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cGB7uFWJIAMFfTg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-637f16b1-3386c7b54d828c3b1393b9ce;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Thu, 24 Nov 2022 07:01:05 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: v8Bdyk4SLN0eSy5Ogkr2SbQAHWnbvRZJg7CD6-Xdzv3RDNlBwfoBHQ== 

                                        
                                            
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sun, 27 Nov 2022 08:10:48 GMT 

                                        
                                            
age: 32719 

                                        
                                            
etag: "4770f56d4d9489df43f33952e4bfa84d8e46414e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   4374

                                                Md5:    514b4077fad50ba782e4bbb2c95c6852

                                                Sha1:   4770f56d4d9489df43f33952e4bfa84d8e46414e

                                                Sha256: a97ce7c911625345342731b96cf423ee36182e101e3039694a666d6508a702ef

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0b2959f-9d1d-41c7-a7c1-b9f52a7766ac.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7380 

                                        
                                            
x-amzn-requestid: 18589644-299c-4a39-9376-db1bd1472009 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cOo4iEegIAMFeuQ= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63828836-23990acc0fdc599a75a534e3;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: RqsZxAtbOkWBGbXJ3sZHxcS-ZvWOw7Yg2Qd4zj0QLhrp3wAXC8w6jA== 

                                        
                                            
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 26 Nov 2022 21:50:08 GMT 

                                        
                                            
age: 69959 

                                        
                                            
etag: "97a135335f5b1b042adeb385718f8808cb78528b" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7380

                                                Md5:    76c00eceed956377d7469ef58b0815cb

                                                Sha1:   97a135335f5b1b042adeb385718f8808cb78528b

                                                Sha256: 81fb72ab752b2eb39ab6ee015055304490b3b6c3259968703fd07c2a2eed1e61

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 10199 

                                        
                                            
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cOo4iF1VIAMF09g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ== 

                                        
                                            
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Sat, 26 Nov 2022 21:51:41 GMT 

                                        
                                            
age: 69866 

                                        
                                            
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   10199

                                                Md5:    2cd887044e91d7ed0f1a8d7119ff7dd0

                                                Sha1:   ae8aa4ce6ddaccba771fe65446926b60fc5628da

                                                Sha256: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67

                                        
                                            GET /clicks/NerveControl911php_files/play%25204.png HTTP/1.1 

                                        
                                            
Host: role.tongift.shop

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o

                                         104.21.60.233

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:08 GMT 

                                        
                                            
Content-Length: 439847 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT 

                                        
                                            
ETag: "63655dc3-6b627" 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: REVALIDATED 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BDHlmzA9Pe%2FUL1V2IuVO43J2p%2BslQLsKnWzypMuDCD0XyEq82Ig76qNT5%2B7lBLdciXJzxzSG%2Bdc%2F9rpqsnK5GEVWu8vp9bXmVvIKTSo61mzSk2DevMDbWHbbckahhlT6osjyYQ%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 770c82847e87b4f4-OSL 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 760 x 507, 8-bit/color RGB, non-interlaced\012- data

                                                Size:   439847

                                                Md5:    c885a201f801bc863a75f090c0ba1bdb

                                                Sha1:   99ee2e54ad853835421af33b4fe39c6468eab847

                                                Sha256: f9f64a212a52593a30f35ff918fa97cde2436353bdf12058310db5794c7d9abc

                                        
                                            GET /clicks/NerveControl911php_files/blank.htm HTTP/1.1 

                                        
                                            
Host: role.tongift.shop

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/clicks/NerveControl911.php?sid=999752&h=usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o 

                                        
                                            
Upgrade-Insecure-Requests: 1

                                         104.21.60.233

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:08 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT 

                                        
                                            
CF-Cache-Status: DYNAMIC 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tno%2FDjCmPpZDBs5oIhK15pQvs42cm%2FWURRceaRM3%2Bk4y%2BHWt2CcUuY3KvdRHPAbVCFdmN70mX5Yuo7d5H8osLQzXrQyeiJRuerNYf9HonnubFFK4ll7kOck0lfEJIYHN2itBvQ%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 770c8284bc7e0b61-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1254), with CRLF line terminators

                                                Size:   548

                                                Md5:    0a16aec008013f053a922381dee71f9d

                                                Sha1:   13a69b2e43a426ce54f9a47146955ec0bb169172

                                                Sha256: 4686bf42f5ae452ed851ee0e084ece44ceccef9bc2fde5eee10a33a6c92461ae

                                        
                                            POST /j/collect?v=1&_v=j98&a=956642956&t=pageview&_s=1&dl=http%3A%2F%2Frole.tongift.shop%2Fclicks%2FNerveControl911.php%3Fsid%3D999752%26h%3DusG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE%2F42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o&ul=en-us&de=UTF-8&dt=Wellness%20Insights%20Today&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=830727655&gjid=854659325&cid=2146613738.1669569368&tid=UA-71193211-13&_gid=960782007.1669569368&_r=1&gtm=2ou1q0&z=722971395 HTTP/1.1 

                                        
                                            
Host: www.google-analytics.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: text/plain 

                                        
                                            
Content-Length: 0 

                                        
                                            
Origin: http://role.tongift.shop 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/ 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site 

                                        
                                            
TE: trailers

                                         142.250.74.174

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/plain

                                        

                                        
                                            
access-control-allow-origin: http://role.tongift.shop 

                                        
                                            
date: Sun, 27 Nov 2022 17:16:08 GMT 

                                        
                                            
pragma: no-cache 

                                        
                                            
expires: Fri, 01 Jan 1990 00:00:00 GMT 

                                        
                                            
cache-control: no-cache, no-store, must-revalidate 

                                        
                                            
last-modified: Sun, 17 May 1998 03:00:00 GMT 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
server: Golfe2 

                                        
                                            
content-length: 1 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  very short file (no magic)

                                                Size:   1

                                                Md5:    c4ca4238a0b923820dcc509a6f75849b

                                                Sha1:   356a192b7913b04c54574d18c28d46e6395428ab

                                                Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

                                        
                                            GET /clicks/NerveControl911php_files/blank_data/inject.css HTTP/1.1 

                                        
                                            
Host: role.tongift.shop

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://role.tongift.shop/clicks/NerveControl911php_files/blank.htm

                                         104.21.60.233

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Date: Sun, 27 Nov 2022 17:16:08 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Last-Modified: Fri, 04 Nov 2022 18:45:23 GMT 

                                        
                                            
ETag: W/"63655dc3-f28" 

                                        
                                            
Cache-Control: max-age=14400 

                                        
                                            
CF-Cache-Status: MISS 

                                        
                                            
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zJkxdVFthTE4AdeO8XsQ9f7pwVPrGWFIFsRSzJOGlwgWFHVqnli9wXM6sxrCRdVR8q7bh9HE0l1Xwa9rVg2jJ15v3qZ3qYHt11mTRVSEaHAPYMS6jq1Q7Z1ZGkew%2FjWC9NjMmg%3D%3D"}],"group":"cf-nel","max_age":604800} 

                                        
                                            
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
Server: cloudflare 

                                        
                                            
CF-RAY: 770c8286ae7c0b61-OSL 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
alt-svc: h2=":443"; ma=60 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with CRLF line terminators

                                                Size:   928

                                                Md5:    e1c22e631b7cce42e3ef13cd9bb02ff5

                                                Sha1:   6c6c2b15c56e776d9eac10babf3a6c4a2bd964ae

                                                Sha256: 93950a736308fe62073a44a76b8ec05b9a651062f6ecee4782059d0718aab6dc

URL	role.tongift.shop/Kchgswpdsx/didfruu574dcgsrrbff/usG1LvO8eIeQZGP5pf9giX8C18M0HPRTyte9DI7tyvE/42TBpdEXVnz8SrJEijKG0dP6Scm4Sy20DRt_TbuJzoIe7lQqfsaZdY1NVJxFDO0EiJs8TzL36YzWgf2eWpSLAMfYxKFTxcdieOcOviIlA6D5B2RdI2tHdR79EMq2BgirNJeB-MxKvEquZ11hYHW_z3CBK4PIz3ASBd-0HCDwCef9myGkWf49jHRZeosKwl3o
IP	172.67.202.31 (United States)
ASN	#13335 CLOUDFLARENET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-11-27 17:16:16 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	1
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (13)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.202.31

Last 5 reports on ASN: CLOUDFLARENET

Last 4 reports on domain: tongift.shop

No other reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Overview

Domain Summary (13)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.67.202.31

Last 5 reports on ASN: CLOUDFLARENET

Last 4 reports on domain: tongift.shop

No other reports with similar screenshot

JavaScript

Executed Scripts (7)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (47)

Network Intrusion Detection Systems