firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 21:36:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: T1D_f0A-OEcuGJNuiyUTBn9Vs0r7sHu3eo-biE_jWTEY-IUexRbcqQ==
Age: 271
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13814
Expires: Sat, 03 Sep 2022 01:31:05 GMT
Date: Fri, 02 Sep 2022 21:40:51 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.110200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.110:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: M7HkObJaJWYhXO1RCyKZZyO3OIvc23VEezL10ZjfknVh3iy-3djlew==
age: 73534
X-Firefox-Spdy: h2
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/
104.21.51.181200 OK 645 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/
IP 104.21.51.181:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 651cf6e291a4d1ea2dbc7d97266eb285
233e2c666f25391844f6d80f883321e254ea8684
2e958d8c4ef69c31c41ea24ba644c02f72d0ed322d5bb445f4af2a37a7ced79a
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/ HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.6.40
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x%2FzH7mXiif1ES69JCzfn7CodmA%2BF5l2xO3cHjffYmFSm2WIN3rD8ptSaY6rM5iMsoZzBcrDZfmQpuIRbH3HiZ8qjiMQ1P%2BTE4poIuMajr7FxI6R56Rq5fl7xZLtUNg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7449680ce8650b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 21:40:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
104.21.51.181200 OK 9.5 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
IP 104.21.51.181:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18458)
Hash 4e99720b6fc95c45d6d5834a45224cf9
0f0c45e1354d6795f1e174a64d14bc183dea6f9b
57cf63544b871e3fe6699b7739009b26f0a1eef697bd23bf6dc9902e5d9537a0
Analyzer Verdict Alert urlquery Scam / Cryptowall detected
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1= HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.6.40
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gtWjgUTlgj%2BpJBKImUhe7wOgbCpabIUq2d3dVO%2FrOOr%2BZH3ZzXbl%2FZKBSJqNo16PbsoRvz5ptAdGoR9rRqv%2FR6NFC27TyMYdOsWQF7JWwcB5FDGZE7nZozVeRRCumQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7449680f6ba30b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
104.17.24.14200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
IP 104.17.24.14:0
File type ASCII text, with very long lines (32180)
Hash b1e4b2a99336201b37fb8cea5d57abb9
d57980f0d0eaaf57ec33ddc9ed027274cfa86027
c805bfd991983f57b5b7878b998f7529e9b7e2df4bc2d39ba493934e23ba3f8a
GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 21:40:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 26660
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-14983"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7601640
expires: Wed, 23 Aug 2023 21:40:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IZlFTW51xcLhnVyA5V9EHjHpasOoPCo89BdDWc3r3%2FgLg7b5EAM1iC7sWhWTeHX4hKYc8IKIaszS6GhbLp9mOurTIB88izTlFB5L%2Bx7mOJfYINz3KcsOpvavHgNMQjFa0hUhJjPd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 744968113e770b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
104.17.24.14200 OK 1.4 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/froala-editor/2.8.5/css/froala_style.min.css
IP 104.17.24.14:0
File type ASCII text, with very long lines (7048)
Hash aa3b4ed7478b3a40f2409188a0c9fdab
1b4efc2536689dde7205f6eb81766b6ad54ada8f
80db261e2480e9541813923e022ea7d0dceece776b3aa606216545a1ba272d26
GET /ajax/libs/froala-editor/2.8.5/css/froala_style.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 21:40:52 GMT
content-type: text/css; charset=utf-8
content-length: 1380
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e6a-1c28"
last-modified: Mon, 04 May 2020 16:10:18 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 7441716
expires: Wed, 23 Aug 2023 21:40:52 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WQDjw7isl1b55x4bfgd%2Fe5I1uKo8aOCNFuL1sGO0hBpQhIHp6TWX%2BjiRCfPjKy6EhYGfz0M%2FWhGCeudjJPe47FQ9F8BJK%2Filg7bqWkbcNK4CJdUQTVybf%2FV4nH8ADgg3LhJEMd3x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 744968113e780b49-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b69e4ee589f24deef7c8a3004daae9d1
e96ab184083a5084569b86b8846a6fa0c3b6af9a
7560417294eeb0f5c955d68bcc9b9eae40d69d1ff4b717a115ca1c614b1f4a17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=UA-xxx-x
142.250.74.72200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-xxx-x
IP 142.250.74.72:0
File type ASCII text, with very long lines (1615)
Hash ae2604ec961d746a19ff763ea8bf1a95
dcce6444de73cb17949683b9433b0d357d23255f
6852c10ec8fca1f19d99cfc77b820d069aa82c703dfbdb95a14660480c28fe82
GET /gtag/js?id=UA-xxx-x HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Sep 2022 21:40:52 GMT
expires: Fri, 02 Sep 2022 21:40:52 GMT
cache-control: private, max-age=900
last-modified: Fri, 02 Sep 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41909
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash b69e4ee589f24deef7c8a3004daae9d1
e96ab184083a5084569b86b8846a6fa0c3b6af9a
7560417294eeb0f5c955d68bcc9b9eae40d69d1ff4b717a115ca1c614b1f4a17
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 02 Sep 2022 21:38:16 GMT
Cache-Control: max-age=3600
Expires: Fri, 02 Sep 2022 22:21:50 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 7hZZNJbEMq-DssMTNWqygHCP7mOSXxyEVyJ0LOg8J2W6uF1uey7eMg==
Age: 156
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb74a5eb_v.css
104.21.51.181200 OK 4.5 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb74a5eb_v.css
IP 104.21.51.181:0
File type ASCII text, with CRLF line terminators
Hash c3cd9afb1fb6aa08650225a0aa9896d2
0faac748e7a65aeee33b77f310c4964a8c6b9460
e7ee41020d81777f6e5f56ef2f29faca0e1d626fec99ff58c6adaf00cba82364
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb74a5eb_v.css HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:10 GMT
Vary: Accept-Encoding
ETag: W/"5f83e7c6-61df"
Expires: Sat, 03 Sep 2022 09:40:52 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OCuQAhn55Ol8nIB8oGeuHFE51AjHAEErU94NdHyi7rME2oNizrpCxzrtoGUo9Ms9HstVZ32bG%2FJLXDAV1Th3%2FOpiX1ZjgHu2YUgmXXnfxGfG154YagYBzEJOklLecg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74496810ed390b4d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc497791_v.css
104.21.51.181200 OK 67 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc497791_v.css
IP 104.21.51.181:0
Hash 63b00463b943556bac81bdcfc377dfc3
7f51e39070eb10fa13181a72f39275cf3f549f9b
155b548ccf8efe104619bd351c8ee01421b5e70c40e2b4ad3e5b43fb913f9ead
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc497791_v.css HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:31 GMT
ETag: W/"5f83e7db-4b"
Expires: Sat, 03 Sep 2022 09:40:52 GMT
Cache-Control: max-age=43200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fx5YU5KM5M2rAsGNNkPwv%2Fwf%2BJV1r4u947pr84M52o%2FT%2FWxPfhuAqXM2PKcC10UfCbzHpgSeosiRBPvh9QIuNPGdMV3GUBjyOwREqYVyR7kNNfWtGvQX2stY1wj5ng%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968111a1cb527-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb63ccd2_v.css
104.21.51.181200 OK 0 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb63ccd2_v.css
IP 104.21.51.181:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb63ccd2_v.css HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: text/css
Content-Length: 0
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:26 GMT
ETag: "5f83e7d6-0"
Expires: Sat, 03 Sep 2022 09:40:52 GMT
Cache-Control: max-age=43200
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1z2%2FFfRtpXSr8xA2RkU277TqFNk2iPoy%2FogpOdekGmY6ePgODyEud20ksLjJJYS6uwas6gK7%2BAUh4JpGWfb9rBl6vcdosGMoyyiQB5yNJgyDb2GNaQ%2FX%2FM4DclycSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7449681118bb0b3d-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 20cc30f2a41f9c5e824ea46460548950
c153b447d44cbbe8f30d7f490605d1a430af20a1
0f8bb96e7dfd8a6bb3d7eae1a958195cb8ca9f20e0ad8cd952c34267ff0625f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 20cc30f2a41f9c5e824ea46460548950
c153b447d44cbbe8f30d7f490605d1a430af20a1
0f8bb96e7dfd8a6bb3d7eae1a958195cb8ca9f20e0ad8cd952c34267ff0625f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5712
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Last-Modified: Fri, 02 Sep 2022 20:05:40 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 7ce90d6fafa13d92fcf445b688f0389f
480461a46fc291cbcdf6218c7743779d7e862788
dd33483769f6c715aeb257c2955147c1a5a47b0af1684190247701465af8af6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 7ce90d6fafa13d92fcf445b688f0389f
480461a46fc291cbcdf6218c7743779d7e862788
dd33483769f6c715aeb257c2955147c1a5a47b0af1684190247701465af8af6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
104.18.11.207200 OK 16 kB URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
IP 104.18.11.207:0
File type ASCII text, with very long lines (59765)
Hash 208ea39021fae1a4d4d9e5948dc23204
3fb3351029c253c53869ba87a2709bd637d932a6
89a8a455f47d1ed368809bf15721130e471e65208eae59eca3ea5ea1792c805b
GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://wchp0gfu.ga
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 21:40:52 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"02d223393e00c273efdcb1ade8f4f8b1"
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 08/20/2022 02:35:31
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: b69f912673f72cfc0ec3c89e6e88e0b2
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74496811397ab50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
142.250.74.163200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://wchp0gfu.ga
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:32:09 GMT
expires: Thu, 31 Aug 2023 19:32:09 GMT
cache-control: public, max-age=31536000
age: 180523
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
142.250.74.163200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://wchp0gfu.ga
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:30:58 GMT
expires: Thu, 31 Aug 2023 19:30:58 GMT
cache-control: public, max-age=31536000
age: 180594
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
142.250.74.163200 OK 8.0 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://wchp0gfu.ga
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 31 Aug 2022 19:30:59 GMT
expires: Thu, 31 Aug 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 180593
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/cut.png
104.21.51.181200 OK 1.2 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/cut.png
IP 104.21.51.181:0
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash e526e4ff50594a6c4a5d05c18474d6e7
705609a2bd21c1e3e13666451c75d2c51436c83e
d25cf2403704d5208d662af4ef703d424cedeac253a43a1aec6e60e0db43837f
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/cut.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/png
Content-Length: 1192
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:29:06 GMT
ETag: "5f83e9a2-4a8"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DBxGpQ1zOVvVG8wMsxd0DgiUYaSC16ur5dfvDKV1r6M7WD3h4PNZjwr%2FUoZTk4u2uxiwygLf6hXOeq8loY7KuFETx2FiFuijm54IZqHFR8CWe2ZGS1F70oGhh%2FaGVA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968131a880b3d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbb6fc7d_v.gif
104.21.51.181200 OK 102 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbb6fc7d_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 24 x 9\012- data
Hash ef14d57c065fdbd3c66d017a729ca91f
2e7b72d674361a9c2b41767ccfbed2486e6695dd
6fcbfcda8a36536a0f9b0bc8c4a6ca451d9bafd4a879d56697e48e209691ba36
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbb6fc7d_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/gif
Content-Length: 102
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:42 GMT
ETag: "5f83e85e-66"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Qm5UgFIumLCzTnQ8etq6%2FHyRuJWOJ%2FqfPh0b3HBu1mbFCQ3%2Buk7sQpiFFP3UhIPwgkL0sSSCp0xQadr8xb%2FoCo2KobhzpfmFhD3OBCkeGDiwLQjSciMU9weiNmGXw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968131d1bb527-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc2379ac_v.gif
104.21.51.181200 OK 377 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc2379ac_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash c10bdec858cb0cf9e6cc5865d5925746
697c095ed5509e5a5af0c5ebf2380662aeffc531
b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc2379ac_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/gif
Content-Length: 377
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:54 GMT
ETag: "5f83e7f2-179"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zn3Ys3Vdl4IfvAazlWGnuG8VS8tfhyqdp9SmZ8vbMEJCwhMQlTeWVh%2B6qtzA5FL9cfSJXvoqEOFdAwj7N0u97M5LLyUS6qqnSTfPoOBhmL6ZlaT%2BNG6uOdK26d0XQg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968131f45b4ee-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/microsoft.jpg
104.21.51.181200 OK 2.0 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/microsoft.jpg
IP 104.21.51.181:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 47x46, components 3\012- data
Hash 513307d24832cc64115e69c57dd4f69a
ba2e4718f5dec696d5e1e9ab95361f5dfb337f23
f70249b342aecd9e3d2367aea39df606e92562f9d7945ad8849b36cd3e3a85a1
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/microsoft.jpg HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/jpeg
Content-Length: 2004
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:28:59 GMT
ETag: "5f83e99b-7d4"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HCC%2Bt31JG6o9vE049r6zOZprUQzaBDtTJpIHoeccMlRXEhzxEj6igssBTRb0Xea31Jim10AI28k8VAuzQ3BZw6jmtwWKUTJLgKoWRXo%2BhrVKDXBWE2mht9PPr0ExiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968131fad0b4d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbc8a6e3_v.gif
104.21.51.181200 OK 1.5 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbc8a6e3_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 65 x 80\012- data
Hash af52e51f42fd0c55bc3cf2c8ece71492
016f83da68ff461a5c6aebcc2a45668317b2f24c
e91f304cf7409723968740e6363dda01b50acb8e94b5ca05b4a4617666ff095c
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbc8a6e3_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/gif
Content-Length: 1547
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:34 GMT
ETag: "5f83e856-60b"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DMC1bgnuHo6bPlwY7nQDvhLUACYl4iF9btK6oLBU%2BYbbzarwedCzN9nO1FomXda6PZAlGe9pQIRSms4ZQqejnxaESmYTz8oBXEMpRqc7b7OXA9wHlSPQ8MDHfwOfwg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968131da9b521-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 7ce90d6fafa13d92fcf445b688f0389f
480461a46fc291cbcdf6218c7743779d7e862788
dd33483769f6c715aeb257c2955147c1a5a47b0af1684190247701465af8af6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 21:40:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbe46967_v.png
104.21.51.181200 OK 293 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbe46967_v.png
IP 104.21.51.181:0
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash 9eb68d2ce05c151bda542a7a6356e22c
baeeefe4a7ac657c10a5f081841015de1bcf90dd
2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbe46967_v.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/png
Content-Length: 293
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:33 GMT
ETag: "5f83e7dd-125"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2YgX6uXyZNOI%2BHvBqSiKekGsxm4Ihp8NjyTfGpjJ7k7xGUPw4eZeoab9l5XKv%2B8olf9Z5Vm0l9UY%2BvbYvQSq%2Fvux7rwJSI8a3eNVJAYauzzP1IR2C5NqpqrHelnt4w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968131b630b55-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bba58587_v.png
104.21.51.181200 OK 128 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bba58587_v.png
IP 104.21.51.181:0
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash 0bb86caf792dd7d24731c18cd37bb68e
dda1e433a0eaf785b2aa2c6214d5e48cb82a3a25
2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bba58587_v.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/png
Content-Length: 128
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:16 GMT
ETag: "5f83e844-80"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fNlglIXtBRZcv10A%2BTKXm%2BSy1BNkUPE4LllWpa%2BeXm9U2PQx%2BqEM7uPZO4Vn3buvYSPSlUwUjiwP5GeXOMaRQrAFSpWAJgOHPrNnGjeoxZNVxHBGSoCwsPnUtsnGUw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496814d861b521-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
52.39.57.61101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.39.57.61:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: C2oVSEkXWSI/vi128rUL+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: sgEo/AKMaq+TsMHYGBe0q+pbyFU=
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/0wa0rni0ng0.mp3
104.21.51.181206 Partial Content 8.4 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/0wa0rni0ng0.mp3
IP 104.21.51.181:0
File type Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural\012- data
Hash 8618fbb0911e3b8fc96725dee8bfd81f
1bbcb78922946d0cf18fbf3a9e092e36453eb767
0589be7715d2320e559eae6bd26f3528e97450c70293da2e1e8ce45f77f99ab1
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/0wa0rni0ng0.mp3 HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 206 Partial Content
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: audio/mpeg
Content-Length: 8405
Connection: keep-alive
Last-Modified: Sat, 05 Oct 2019 23:07:18 GMT
ETag: "5d992226-20d5"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Content-Range: bytes 0-8404/8405
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QpLBYV6CMPMHbgg0yTn%2F8mXnyt4qcKCcAlrzvXq95rOCO0m5wUIvCx%2BauCaBGx%2F%2FyNXZ2devyHhlA3RUird9XGf6AxUUBzb5%2BXyHAhBZKrdZZCSj1%2BEyOvABZe37rQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74496814ac190b3d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/microsoft.png
104.21.51.181200 OK 1.0 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/microsoft.png
IP 104.21.51.181:0
File type PNG image data, 47 x 46, 8-bit/color RGBA, non-interlaced\012- data
Hash bf2b460590fbb9d8e9611a6e9006b816
561e1dab259d61e798b3ce380527b71b61074ff3
ee4bc5fe81fa7c1e8497d79c9c8a96485df217092d334e9b48fa8840fed11d03
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/microsoft.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/png
Content-Length: 1045
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:25 GMT
ETag: "5f83e84d-415"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JuZA8DHJVux2gi7kSg2zrJ70cuOIS52heESZ1xSFmpfmVK91tluhUafAr10jmceIu416oeJ5ApGcd6qUvInPcH7vHU5sJYjQ5vV%2B9BulZ1mHyysWasr85jmNxaA5qw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496814d9800b4d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbdae210_v.png
104.21.51.181200 OK 364 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbdae210_v.png
IP 104.21.51.181:0
File type PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash e144c3378090087c8ce129a30cb6cb4e
59da5466551de941d0215e45c54aa2ceaf436be1
b13a03e0db893734298cbe203bf264407636ffe5dab0a141f83c492d0034dd6a
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbdae210_v.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/png
Content-Length: 364
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:37 GMT
ETag: "5f83e7e1-16c"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=goqLfE5NdsKD1aa4Fbm5lAWQw46JmeDImK7uLEJhekq5OGj5NzPWWVflIAetFIRHRC2gtzsHrI4gi8IEU2qBjGGtOxTX%2FJub4Fcv59Q9aq1amX0r9jEcihCv4iZd3w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496814dd120b55-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbae3ed9_v.png
104.21.51.181200 OK 349 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbae3ed9_v.png
IP 104.21.51.181:0
File type PNG image data, 13 x 13, 8-bit/color RGB, non-interlaced\012- data
Hash 7454c652e0733d92de6c920c2d646ae0
34a5bd8c7401f95e346895b0e5ccffbf0e9ad638
44f752b0bd2e48052d538bc6aca5379f3630ca64da945f794690ddf47e8eaef7
Analyzer Verdict Alert urlquery Scam / Fake AntiVirus
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbae3ed9_v.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:52 GMT
Content-Type: image/png
Content-Length: 349
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:41 GMT
ETag: "5f83e7e5-15d"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LYZgdMD7tNktJVjLbx0lLKPFtDCdYZeCGGmYNPalITHl86jieiNefTM7ECyrsPHCHpVUzU7rbET9AnzQVYHL1KklL76eGRFBzzMsH7%2FJFDEwMmq%2BpDbyAL0IczlN3g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496815a9eab521-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb9bf55a_v.gif
104.21.51.181200 OK 1.8 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb9bf55a_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 120 x 97\012- data
Hash 8806694db55d271b6c836433d103afcd
a532ae846499ffa93bd6ed8baafcbdabb2cc8da1
989f955c24583be00defab08c4cf80b17fe4c12756686359367144f0506eb8b8
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bb9bf55a_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 1776
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:45 GMT
ETag: "5f83e7e9-6f0"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G7cmqQyZlxJGukX58QmfHwHmVKomu3bHi1%2BkYQZWJ77okqyOS3bqHepd8GPpmko8G2%2FU%2Bqag578V1B7ak2qrMC9ig5iHXbXap%2FKBaz7n2sO19JEDzYKNBkStw%2F0Qyg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968164d690b3d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbbf25aa_v.gif
104.21.51.181200 OK 1.5 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbbf25aa_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 80 x 65\012- data
Hash 0d3c4efabb6072ec3312574009be3ef8
02d319a4e46538bcadcc5122883e1a0c3e94c123
45a676a0eb476e7706e0187d975b612f51f3bb4c26596f991d55f5e68fbef3e3
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbbf25aa_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 1506
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:37 GMT
ETag: "5f83e859-5e2"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lg1TtA53txYGZNVjq5MguCNJzsKA7xPRPtw2Pj4SpHtrz%2BhrV4wuwWahlbSS9c%2BQNHpAbMbKF1zwhvrhXl6pL180OOswJ3ll3ClOOT7by%2BFC2LPiL8rbM%2BfkE1xBFw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968167ae70b4d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc00090f_v.gif
104.21.51.181200 OK 949 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc00090f_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 78 x 68\012- data
Hash da9d153375da51a616a7663f1504e3a5
bd81fe60fe017bfe79be8c1afed88b659ff166d9
9bb88049c3d3f3c172d97246fa148bb725e727847c37e28c3be156be240a0c04
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc00090f_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 949
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:30 GMT
ETag: "5f83e852-3b5"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlUte5wUrgHllCrjr0Qf4797aONQF0aOcRKK%2BBZJF7Zo07xHyJpI6OgBCjvChNNAYEuNiNmCbk6h0Y2DRc9xmD%2Bm1iLFPvHlqW5QByrEMcDrR%2By%2B5qKzgzNmXWFsIA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968168eaa0b55-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc1a74d5_v.gif
104.21.51.181200 OK 69 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc1a74d5_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 3ae573d079dcd1d2da4086f2c0c72c45
e7c9dabec81379373476ed23168dcecb9b8c56aa
9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc1a74d5_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 69
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:58 GMT
ETag: "5f83e7f6-45"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eeeEHmthPjjQFF9wxh6hd8xs5ZWumquvHhwXfmS%2F4cD9lS1jtGlMXftXSAnvIU%2BXOJCCELpAxVMCQG3NeopPdIYhZ6GPLs4JxSXaJu3oRg4r8mzlZRIhJkSCJvBDnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968174c3fb521-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbece31e_v.gif
104.21.51.181200 OK 1.5 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbece31e_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 30 x 29\012- data
Hash 1834c112f6e54f620d2ef8f8c037d450
b911b12717fc708c9418b4a2a0d72f79c5c53be3
81a5f62c155d307316d16a11e5a907a99fcfa3f70dce41d01d9f65518206734e
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbece31e_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 1509
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:23:00 GMT
ETag: "5f83e834-5e5"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FAb9jzO8Ti7EwUpNQ1uWbYwLxiqbuvXOsiZbIu7axjzcxvtGpAbtI%2FVURtY1svuKt9%2FtzH8BUojvj60nOTrrSVGsTAl0WzGi%2F5yCCCvXlkebvNmMbRKGuCsgsROH5A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496817df3f0b3d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/background-2.png
104.21.51.181200 OK 387 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/background-2.png
IP 104.21.51.181:0
File type PNG image data, 1920 x 1126, 8-bit/color RGBA, non-interlaced\012- data
Size 387 kB (386648 bytes)
Hash db2c775d2583118bf4464dd65a58535b
45413378bf16997decf585915931305788e55328
de9fbe2de348e17bd4948011260ef297c4102b69068692daaba02bf632acd291
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/background-2.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/png
Content-Length: 386648
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:29:49 GMT
ETag: "5f83e9cd-5e658"
Expires: Sun, 02 Oct 2022 21:40:52 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EsTUNtoAoh7NtZGyRUxQWYT5vNfoG2IZRXGOp19IIZklgWRVBv7l5xK6vT5dyom4EIRjmB5UGSH5qufQQfC3c7wboRG6Rzn2YrfULhu6KLS48Sd7u8M60Sj7Kyaxiw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496814c99fb4ee-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc2c1b4b_v.gif
104.21.51.181200 OK 234 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc2c1b4b_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 16 x 16\012- data
Hash 9ce99ec458daf212f9812a90f3fadd13
9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1
b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bc2c1b4b_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 234
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:21:49 GMT
ETag: "5f83e7ed-ea"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6vFA0mmDcY0LGB%2Fb9KoBoBZrqWzWSvV52pjkXBd7OY4pqTMAFgkKEh%2BjV%2BEZTA43R9pYzXnCfuf1ucAqRu%2FzvAX6tZ4dnmFN1EfOKT9f4iojJHaTk8Pde0nivs%2BPGg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496817dd82b4f7-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/minus.png
104.21.51.181200 OK 945 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/minus.png
IP 104.21.51.181:0
File type PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash e6eb3d938f3ebebd85c71307b38a3bf3
387223165f8e86f861a09adb1e3c10a8f2ec7006
2b6c8e23b2a2c49ac71393cb3e1740b7e2fccaa310ee06b68ca27b693d133f8e
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/minus.png HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/png
Content-Length: 945
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:29:11 GMT
ETag: "5f83e9a7-3b1"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GKJOnd4l7EO5Dzbwht04cduo5wchdtT1uz%2F%2FM07epPAqrB8YwMWjJCVJF8im%2FRRvKFQeNZnhAUEY%2FJ%2BkWlrZj6Ck83XK2oahYj5mtLMIFxxzTWTsMxmyH3RHVzIuLA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968180c7c0b4d-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbf6a050_v.gif
104.21.51.181200 OK 1.2 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbf6a050_v.gif
IP 104.21.51.181:0
File type GIF image data, version 89a, 29 x 29\012- data
Hash 6d0c71ad95c413318e0946960a597318
297fa9d7797afcb90cb49adb045b673672b360ec
f2b1758e4d68018096355641f5e7163b0df07efc85e9c3513e51949a75c0446d
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/5f205bbf6a050_v.gif HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: image/gif
Content-Length: 1245
Connection: keep-alive
Last-Modified: Mon, 12 Oct 2020 05:22:53 GMT
ETag: "5f83e82d-4dd"
Expires: Sun, 02 Oct 2022 21:40:53 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gie83uOtxgHHJ%2FGv8nMFnhE4Of5UH5I3r1ADVBAn00vNOoqsg8AwZcCMnM3vrizU%2FjDhXUqjADdsjF8hVCYgVFI84P5krmjD9v%2Fu0gekLgwTzXlhTbraRMydgewNPw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744968182ffe0b55-OSL
alt-svc: h2=":443"; ma=60
www.google-analytics.com/analytics.js
142.250.74.174200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Fri, 02 Sep 2022 20:41:12 GMT
expires: Fri, 02 Sep 2022 22:41:12 GMT
cache-control: public, max-age=7200
age: 3581
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/a0ler0tm0s.mp3
104.21.51.181206 Partial Content 39 kB URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/a0ler0tm0s.mp3
IP 104.21.51.181:0
File type Audio file with ID3 version 2.3.0, contains:\012- MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural\012- data
Hash 7f33edf443a7dcc5dce42f609929df4b
419a23775f695720fbd89405756f21c73522bee2
515cc5fbb0583021b2827de6cbf6ef9bfebc45db99d661e4eb212471658ff3d0
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/a0ler0tm0s.mp3 HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 206 Partial Content
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: audio/mpeg
Content-Length: 200832
Connection: keep-alive
Last-Modified: Sat, 05 Oct 2019 23:07:17 GMT
ETag: "5d992225-31080"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Content-Range: bytes 0-200831/200832
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fHjtck84k2Qxgb0YQHG69m1rM00aJBwUj8tLwatq0CtMDHa6Nld2mdlmgBm%2FTQdKrKqnAF2M1i1uNoUpQsonrOOv3bAzmMCoeclAlc3tKHqUT7nKEepwdn5NkILKXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74496814af10b527-OSL
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/favicon.ico
104.21.51.181404 Not Found 109 B IP 104.21.51.181:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /favicon.ico HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
HTTP/1.1 404 Not Found
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VnYr4%2F7zPZLFPX2TBMdHWkdXcYjOPRz%2B1pUOLl%2BdQNk2x2RFkebFS8MKaasG3PFNTXF2mXALTRIWeVLh0VngGZWfRKgEA%2FMvtTIN8DBaeJyi9M7rZx940rghCLxduA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74496819bf65b4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/IOED100_101000D8.php?n_b=
104.21.51.181401 Unauthorized 84 B URL HTTP/1.1 wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/IOED100_101000D8.php?n_b=
IP 104.21.51.181:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 52bf3ccddb64ba07d5d6d79fdfba4765
f369871f7f1efa470a92ebb8ab98ad26b6754965
11359d75d1ccf8ead98ba93030fb3e9050157c154ac53255f9dda71f1465c3d7
Analyzer Verdict Alert urlquery Scam / Cryptowall detected
urlquery Scam / Fake AntiVirus
GET /cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/IOED100_101000D8.php?n_b= HTTP/1.1
Host: wchp0gfu.ga
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wchp0gfu.ga/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/?n_b=&s_1=
Cookie: _ga=GA1.2.1907083337.1662154852; _gid=GA1.2.9213553.1662154852; _gat_gtag_UA_140514612_1=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 401 Unauthorized
Date: Fri, 02 Sep 2022 21:40:53 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40
Set-Cookie: PHPSESSID=mu8bi14ahs23h3drvsvrl0lqp2; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
WWW-Authenticate: Basic realm="Microsoft Security Helpline + (Toll Free)."
Refresh: 0; url=/cm_ht--uFLnH_lg/_c_-_Z___bjqe_m/-_cnd-_Vj_kIOpd/F__v_lDFl-F_PWs/-JVrXObTSDM_P-_/IOED100_101000D8.php
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FIbq8tbtJndScpHYmKOkyyGtHY0egXAVWZBQrTTrMwaXyAza3N3I4mqlIi490dgp2VTexo7Zg6wX0Awckz6drN4%2F3RdzV1P1bAZYMbJ94lkkSg0Rx5n3Qg5FFQDlBw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7449681a69e50b3d-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8531
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 21:40:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8531
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 21:40:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8531
Expires: Sat, 03 Sep 2022 00:03:04 GMT
Date: Fri, 02 Sep 2022 21:40:53 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
34.120.237.76200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12756903aaa74164feb5f8525398ca36
9fef9b071daea6793cbbdfe391254ac4326b1aa2
6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: 6950a3c5-2cdc-4a21-854c-10d925e32ecd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XiYLvHRSIAMFotQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630a6d7e-6e98b9a77e592bd01afb1d97;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 19:16:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3eBLhLH4APXLyj9kLHXNCFT9ccS_bnBp5INvMI93IFvOuBMERe_GgQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 13:36:12 GMT
age: 29081
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ba50b2fd1814c5ffc95aef40c69ce8c
cbb4546228115cccc122b16209e70171bef5c1f2
de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:48:18 GMT
age: 82355
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e05660322f0368dd2bf8067d7e4554d
ec65cb47d86488f734c945a210d5f636a40fea2c
98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qAMCgNpYR80vXSDyHFOFcbT8VukBemR2AGoGNaCfYaszKshu-gv6zg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:54:15 GMT
age: 85598
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955f2a35bd6b3802670e7fa8a7cda833
4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 21:37:26 GMT
age: 207
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c3b7580a37e6eb7e5bd18491f1d4dd6
288b82ad8f924eb9570ae1c55da84d041f862366
046d1ef76448c53446068ef5f8315b7299484996cdebfd9d1e749b4ded9c7d3c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F141f656b-9191-4cf5-a05b-891ed5c9656f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5079
x-amzn-requestid: 3b19c77a-2e9b-499f-890b-36fc4ee72ba7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XslOVEtZIAMFv1w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630e825b-01b7b71617b59f7414a0e5e5;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 21:34:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: zYT0vF7Bxa5m84D12jI2w_A-MzR3wIMBOb0ubTEdNMlpYUes5aYdlQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:44:27 GMT
age: 86186
etag: "288b82ad8f924eb9570ae1c55da84d041f862366"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg
34.120.237.76200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d848f7606889b048b6334e70d8a5e0
85239ef4f2fee8d3345e599bc942cab63ff3aaf6
da6cf33b440b51f72a70f309d62fd581aed246b6a78b8f329fa3899db15ff86d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffd1bf889-bcbe-4ad4-950a-a32b2f875537.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5889
x-amzn-requestid: 42237574-f86e-4ece-b986-6d0c5910fcc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzMVgHajoAMFmXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112756-48ff9d98464cf3c9680d97b4;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:42:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _7BBSlQQucoO5poncTYuX4fcmS4WFg3UcVFXalckGCCNFKJ0h5UpsQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:31:42 GMT
etag: "85239ef4f2fee8d3345e599bc942cab63ff3aaf6"
content-type: image/jpeg
age: 83351
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
104.18.10.207200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
IP 104.18.10.207:0
GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 21:40:52 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 19:04:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e9a84d03a1f7c6aa17012c712a6e5dd5
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 7599100
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 744968112cfd0b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
104.18.11.207200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
IP 104.18.11.207:0
GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://wchp0gfu.ga
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 21:40:52 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"816af0eddd3b4822c2756227c7e7b7ee"
last-modified: Mon, 25 Jan 2021 22:04:11 GMT
cdn-cachedat: 08/20/2022 02:39:44
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 632
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: fac599ea047c1f307b7f278226c54f0b
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 744968113971b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP 142.250.74.10:0
GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wchp0gfu.ga/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 21:40:52 GMT
date: Fri, 02 Sep 2022 21:40:52 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2