firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 21:05:27 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: og9xJZMjgKsyW6H-eGJpZFGNXqR2kaKHsSgpJePcCVQgm__FsqvJ2Q==
Age: 3031
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5974
Expires: Thu, 08 Sep 2022 23:35:32 GMT
Date: Thu, 08 Sep 2022 21:55:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: uuNiXSZZP341rLF_fcJ_-q8nFxnhn4LbFuxkO5Bmfi8EHNbkj3m5eA==
age: 65364
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 21:55:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.jvvrb.top/
200 OK 72 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (30716), with CRLF, LF line terminators
Hash 0bd15e4acd0594a8fa4fcdba0969c258
674727131aab917eb293e2fef54831150d1c76f9
9867a033b238af44f149d090f9cfbdfc30694f7c8bdff5e973cb17ed0dd2dd78
GET / HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sDg8zjp%2BjJMiQJFh3I%2BFlOLd6wIVaAAnfCoTCNIIQXNwmhd1PtqGxJU0Gi95gBAoIk60hylnGWrqas64BHmTOUkinBNkF1ed5xtJQAzbQrD5IABXh9IaLz6vjpj9Cj2z"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747aee72dd60b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/css/swipebox.css
200 OK 1.1 kB URL HTTP/1.1 www.jvvrb.top/template/2381/css/swipebox.css
IP
Hash e2a951e1f9d0dcaba0eb02b723e086a4
67765ec7effd1c9edec0450645a8de40f27fc8df
ef75eaf403ac2b973515e627ea30dd765493928b84d4f151b465c75c5e92fad6
GET /template/2381/css/swipebox.css HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
Vary: Accept-Encoding
ETag: W/"5da5666c-1008"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uJnlgJQFC2vu9KixyzFdh1LXxBhEMlDXklDeh6hLoyWyZyyC99jwlxgzgl0LyArda5ZkglK60OKz4Fyuz9HnxQrifu0XSi2a8JR36VqADUCTgP6t9JOyrHXyHmhbyVTH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747aee75ca0b0b61-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
200 OK 655 B URL HTTP/1.1 www.jvvrb.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
File type HTML document, ASCII text, with very long lines (1238)
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 17:30:56 GMT
ETag: W/"631783d0-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GKexv47G4M2%2BVZo3wUzcTsURMiI6caeOj6VojWUsz7diTQJcoMIfHpZr3dwefrSj84cYxL29urarWKuOfX5j6TJ8EGOM06HjmmTDr5vLh7W7tJA7ANQeCvBW6whUrvEm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee779ba50b61-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sat, 10 Sep 2022 21:55:59 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.jvvrb.top/template/2381/css/iconeffects.css
200 OK 2.6 kB URL HTTP/1.1 www.jvvrb.top/template/2381/css/iconeffects.css
IP
Hash 74db06a577356ec9025bcbee6a4a0bda
04d974337ad7d6ce8713cfad3200525f1b170b79
03c890cc358273edc25230e98b933c117e5431a4f564a10a7491f7762a74620f
GET /template/2381/css/iconeffects.css HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
Vary: Accept-Encoding
ETag: W/"5da5666c-3dd0"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sj4KXFMjh%2Fk2qN2RWgjmTWCQtclZQ057gK0FGKypXHqjGmeGP90ym4osIPXSAWlNeDpmonlYxJATT0KJ0OQCveSle3A5XZ1rO1qRfIBL4R3rPhcTh%2BkuQPRMxi87SJX2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747aee75c894b505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/css/style.css
200 OK 9.7 kB URL HTTP/1.1 www.jvvrb.top/template/2381/css/style.css
IP
File type assembler source, ASCII text, with CRLF line terminators
Hash dfc16bed424eb9a81583b60dc3ef0233
2bd4e583b0db585506f0bfd4d7b3d738554ed7da
4a0d141d8229a15ed4dec4ec99babeafde896925147b7c8f51ade8a6a7f921de
GET /template/2381/css/style.css HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
Vary: Accept-Encoding
ETag: W/"5da5666c-a227"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i9NBnU8FS8BTt5p11J8IpSjzWxqZawjn2BJF9XQRlkaDdE72uwsBZ1Qw67SVng1IbJ826ntUfPAEUnVj8RZp14NnPvqqlFZ4THgnGsG7IHjpn6UPL%2B3IYXmzb9azGPSm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747aee75cbf9b523-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/css/animate.css
200 OK 5.8 kB URL HTTP/1.1 www.jvvrb.top/template/2381/css/animate.css
IP
Hash d52c2f11cf1bbdaae06fb4fcb9f7b689
85741d52357d6cee00ce12106f904417abcb0467
fae736bc56030bc9484a11f1262782e982ded3dc22c0948219a696c9fde4d412
GET /template/2381/css/animate.css HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
Vary: Accept-Encoding
ETag: W/"5da5666c-11a43"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3W4z8pw7JSwFOoLwsKR1E%2BPA%2F1sL4%2FN5a6XoT7imRrjOsdn16yohXaWYF%2FocXKROiAYXf%2BHU3N2ZzDrt2yrHzAFFrv1bY%2F%2Fcayaqd%2BhBJYI5lqZOaRV2tFufVEXAA6%2Fq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747aee75cac90b3d-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/Aquery.js
200 OK 377 B IP
File type ASCII text, with very long lines (540)
Hash 5ff54247e189ae98152189f3fdb2538a
e7495f26c2147a134bfee401c209647f8d813596
577b2e4758e97ece4d80bd193a58a5def9dea0339f1f5bc82cb71563c9e63220
GET /Aquery.js HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Mar 2022 08:13:56 GMT
ETag: W/"623c2844-21d"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XICfLo9ylRiNUnPbAwMT%2BhsPMWi64bni3etKHRTjok%2BugKf237V5x7sOcbsY%2BfgwwVgWolQTV3OCrvbDxVq6MV6GAHrzFx7BoywYlLd0nLZTEZBKRuyEicDRCveu3TyF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee768985b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/css/bootstrap.css
200 OK 23 kB URL HTTP/1.1 www.jvvrb.top/template/2381/css/bootstrap.css
IP
File type assembler source, ASCII text, with very long lines (540)
Hash 72691c9b54ff7efb03647f0ffe2314a2
388c6414b1d99eef40e3dd2d7cda79c4998eda24
865b57f89980ef8908b6e232ab69432cbb5838644392f25f3a8b87d9a2c15b68
GET /template/2381/css/bootstrap.css HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
Vary: Accept-Encoding
ETag: W/"5da5666c-1d9ad"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yJtABcPyG0FBN8e2o3o3SwKYblF4KGkQRGoitaREcu049ZZgyOcMCniRmzhLzZ1mgtWDRyUQhdpxe3e0RAtoexcCp6KXz1sEJQT09SPiJ6G0dxYhTZl32EIHz6D71g7K"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 747aee75c9c41c0a-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 08 Sep 2022 21:38:18 GMT
Cache-Control: max-age=3600
Expires: Thu, 08 Sep 2022 22:15:17 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: i0clNkS0OAHWu5qxcwUuQk4bpELQE50yEuno2KNbXnGwDU35KJxrKw==
Age: 1061
www.jvvrb.top/template/2381/images/left-quotes.png
404 Not Found 109 B URL HTTP/1.1 www.jvvrb.top/template/2381/images/left-quotes.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /template/2381/images/left-quotes.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 404 Not Found
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PgLLaYiFlwKaz7C%2BO20%2FfrO0L2n9qDgcC31kewbh45qvsXzCI%2FX7exMUpJSmdn1O0cAKtdq0rTOR3aC5HQPZm1l64qgUZBaL3AGu0P4DCLL57ayryeK9Q2w8a%2BDXLKng"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee788c760b3d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.jvvrb.top/Baidu.js
200 OK 110 B IP
File type HTML document, ASCII text, with no line terminators
Hash 1f7a741a3590430094f199f12c3fafe5
df33c587b160239ebdfa2142aa9ba0a560d761d6
8099260dd05b783b500085227292032d26e018d6712e86d087f2e2823bbddfdf
GET /Baidu.js HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 22 Aug 2022 06:54:32 GMT
ETag: W/"63032828-66"
Expires: Fri, 09 Sep 2022 09:55:59 GMT
Cache-Control: max-age=43200
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uiZqnu4jgLyCwyPAEHkq7KgyDmliZniRIG2OgWZq6kWjhZy8wT6ZPdGfpqA%2BtXgnDlzhPmG6ynUPDgFonJnv2X5%2B1sn5hKvhVH91A8HmdsSckLJMsGb8NiIGPzt7%2FL1q"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee779bae0b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash 042105f89c8d64b470d84e052cd412d1
a26c7e2559b3760ea2765b16a3f8d1be27f5dcf4
fadb8cdd22f4d7773d5c20d576f6400ab25e20e1efe3e3fe50d2ae39ca6f2725
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3580
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 21:55:59 GMT
Last-Modified: Thu, 08 Sep 2022 20:56:19 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.jvvrb.top/template/2381/images/down.png
200 OK 4.7 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/down.png
IP
File type PNG image data, 146 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash f461e7b186581c62017653078bd02d85
53abd7511c376f57c4cbd3714ac0d9d730cba265
344696cee836fc0767e1249b77b64665a40e134a8a1cfb4ed7458be11c2a72f4
GET /template/2381/images/down.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: image/png
Content-Length: 4725
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
ETag: "5da5666c-1275"
Expires: Sat, 08 Oct 2022 21:55:59 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cot4AfxlbLlehIL5JycnS3XAXOPSKleDv3vpvKmLPFPiZlwGiItCLiXkTD7AmiPirwywwdOL0ZsqFisR%2FO0YCfxz%2BBlLXE3SZX7yQJCvzXRVlaT%2FciwumuPeGnQJWt7H"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee788b5eb505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/fonts/glyphicons-halflings-regular.woff
404 Not Found 146 B URL HTTP/1.1 www.jvvrb.top/template/2381/fonts/glyphicons-halflings-regular.woff
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
GET /template/2381/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.jvvrb.top/template/2381/css/bootstrap.css
HTTP/1.1 404 Not Found
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iRuhrGRmQtlcK%2BrkOk2TQrrZl%2FoTXyeY71CNgiTekFaU8M2rfvCiT4zIOXkt1VHTs%2B8PMSyQn93Tvdlc%2Bv%2Bp1HH7vYlS9kJs5PvvS78dbUlWKqwQpbumNxnLdFhoAB6D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee797d420b3d-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/right-quotes.png
404 Not Found 109 B URL HTTP/1.1 www.jvvrb.top/template/2381/images/right-quotes.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /template/2381/images/right-quotes.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 404 Not Found
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ku%2FVgJC42tg4FJKf9YV41jcoh2OVRls%2FdPy92VASHUaoYnTp3vBYpK6Cui0MUL5U%2F4I7DeoZqaF%2FaATjrhOj%2F56VjZ0Pp%2BPwDwQMAQOK0vdbWvAYagPi5NOnNeoFf4os"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee788b5db505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/serve4.png
200 OK 2.0 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/serve4.png
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 9f55e93a509f50e39fd5187c646d540c
dfbce46cdef99421e872da94fc1cd06969fbfc20
6f5ebc94466746a774266236eeabf23a3d931f28c47fe6fa65d199658a75ac83
GET /template/2381/images/serve4.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: image/png
Content-Length: 2037
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
ETag: "5da5666c-7f5"
Expires: Sat, 08 Oct 2022 21:55:59 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=50VNB4lzXYRb3bFauI8arO%2FtmQ1RTInPb7VkF0bjEghCtiVmOlK9r4OPaA2BKbD3OiboYs9qpmQU32PITjBaA8GeNnz7mhSqYbHh1gUBsI521xG2FX0yFFLpcNI7GA9T"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee788f52b523-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/b1.jpg
404 Not Found 109 B URL HTTP/1.1 www.jvvrb.top/template/2381/images/b1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /template/2381/images/b1.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 404 Not Found
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vPytCnDdq17Jd2YEdsLx%2B1pV%2BzdZAYaToQg%2FtXLxs4x680b6NjklNT3IGbhSRyH4UAdhAHRZLj9WYYLcVzqGRp6ekBjV5l00wdUZBGIT5%2Bo2u1qqK8cgY3RJ7gx08eOw"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee797d150b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my1.jpg
200 OK 24 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x326, components 3\012- data
Hash f64a4731952e47bb1751ff0a23cd0779
e8659a52591f76c4728af463a304cf0ef61529ec
e4e2eebbaee6e59b3cf96707019e1bc7036e2a7c131c44bee2d731f2ac6b844e
GET /template/2381/images/my1.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:55:59 GMT
Content-Type: image/jpeg
Content-Length: 23822
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-5d0e"
Expires: Sat, 08 Oct 2022 21:55:59 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kHAeXqX%2BBaTSngITofM0Gnj2w9gTlNE7oFRaM%2FtsRyJpcKzx%2B5MUOcxcU52p8oINuhX7jYrnGiYZqypPDZUgwcOtpofrCRUKiyKsmLK7BFeqUoYJ97%2FPtX39WwSz6W7g"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee788bb61c0a-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +rz9ldPh3xwiqkuF2VP7Ng==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: C2CicTZKQ7mhT6q7vulhRHp4jos=
www.jvvrb.top/template/2381/images/b2.jpg
200 OK 12 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/b2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x500, components 3\012- data
Hash b19e37eee9c9441d86ebf1bd92419a5a
7f14c74c0107a7199bdfe8fcc33e82dc4e5f4617
b66bec59df6f190749cb9c1635395dc81daf5d7076201b902f93074b9be84e67
GET /template/2381/images/b2.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 12287
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-2fff"
Expires: Sat, 08 Oct 2022 21:55:59 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uMaN%2BgrCX2FmE4zj7u%2F0nh%2BYoQ3Euk2VuHzqhRMqn7hzRVCCl4ar8jSrqgW3Lkv7a5Jq91aVGm1UyNsp9yJEHmF2mxDEfTX921hW9LQ7cyXQoA2l%2BbMr13EBr24beaET"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7a7d2ab505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/banner.jpg
404 Not Found 109 B URL HTTP/1.1 www.jvvrb.top/template/2381/images/banner.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /template/2381/images/banner.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/template/2381/css/style.css
HTTP/1.1 404 Not Found
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VAILQf%2FAkxWvYQzsik3c88BMdRZURc9H6wa2GsxrZHDBBB4IyIPKr5tfVq90vBa00CEvaKzhMyKjFEO7eZjnTpg9fBH9%2Bhrt%2BJksMyWhp7NrRWL5ZCYwx35pOVzm3DiK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7a4cedb505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.lelifi.com/app/app.js?t=shang&c=google&mb=1
200 OK 1.1 kB URL HTTP/2 www.lelifi.com/app/app.js?t=shang&c=google&mb=1
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (318)
Hash 0dfb0545a666aabdf20370b1ec1919b3
bf159223c48ecc3a017433ec4ce2c3d8dbe4055c
c7fc7671ef5565e096b56df476091dd07c0215a4f61541229561bda9904639f5
GET /app/app.js?t=shang&c=google&mb=1 HTTP/1.1
Host: www.lelifi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.jvvrb.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 21:55:59 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 07:53:14 GMT
vary: Accept-Encoding
etag: W/"6315aaea-f46"
expires: Fri, 09 Sep 2022 09:55:59 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3q7d%2BMTDCbwHtw6iGk%2Bm8uAKLkUXwQmjSPtwxLkVUXtkTfrSAmBfRUmTy9bFgFnAyoRxn0cNOwxdE%2BSu%2F%2B474LGpA9nKdbwV44mtc6FqR5vUC470saR%2BBUFUYuXCMEwrjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 747aee78dfe90b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.globalsign.com/gsgccr3dvtlsca2020
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsgccr3dvtlsca2020
IP
Hash 4632bef838cf9f744f3d84633465d3cb
2ecdb3a047479e335948e686f593e43c3ec995a0
3535368f8ed4d1d0ee75c4d73417071cbd98194c07757100a6926f69d54d2948
POST /gsgccr3dvtlsca2020 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: application/ocsp-response
Content-Length: 1414
Connection: keep-alive
Expires: Mon, 12 Sep 2022 20:42:56 GMT
ETag: "2ecdb3a047479e335948e686f593e43c3ec995a0"
Last-Modified: Thu, 08 Sep 2022 20:42:57 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 58
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7cfe171c0e-OSL
www.jvvrb.top/template/2381/fonts/glyphicons-halflings-regular.ttf
404 Not Found 109 B URL HTTP/1.1 www.jvvrb.top/template/2381/fonts/glyphicons-halflings-regular.ttf
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3bf8e5b194e806e33f65dfafeb99b824
e47321a5ce2bd7d63c3981c10dff614b0a449ba7
10dbaa1586440560d323e0d6aae3dd0d915e3be05b4975518b61190657827a3d
GET /template/2381/fonts/glyphicons-halflings-regular.ttf HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/template/2381/css/bootstrap.css
HTTP/1.1 404 Not Found
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JvSPzWaerAvwGImAy%2FY4X4ZWqzSN3QEbbxbnR5k4%2FO5If0k%2FktM7nAXCInj2UOfivLq3U95v5ZRm%2FK%2B9hfquT9t0jwYA6hzqH8QFvbNzrkg0AsE6u0kxK4vDpbTN64Zm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7b3e8f0b61-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/serve3.png
200 OK 4.1 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/serve3.png
IP
File type PNG image data, 64 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 6a66c16fc50883bd9c52f7a7ad0f031e
2ca39d6a2ba9e3d4c808c301626bed1b134e05fe
2a9a3834672e4cd60f6ce634e44e46a7021e764e91046e83e4270259bf1b12b5
GET /template/2381/images/serve3.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/png
Content-Length: 4142
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
ETag: "5da5666c-102e"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6S65JOwzxM1ccR6jvQy%2BpYN9rYO2UeG6Ka7%2Bkmoc1p83AdqQDPZYYeZaEze0%2BKE5PeHDWAL30PYxi82WJl7XHkh4YdnQCuwiF2eQsD615d%2BM5V13Zo3nWCe8qO0PvAPt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7c3ee4b505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/serve2.png
200 OK 3.1 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/serve2.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash dd09c62be52e05826a7b9a996fbf5876
e894d6784a803d328f2b1a105f27205f728145e3
9ad64fcb1534b53f62d2825f4ecbf5262e6c48775f6cbd83ca7e6473b168d925
GET /template/2381/images/serve2.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/png
Content-Length: 3144
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
ETag: "5da5666c-c48"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kEpJKi%2BITJRxIiPYEjBY7pw7JhGc7QW%2BS152Nu6WTGy6DCht2Y88ksXUuc1hrMUuAEnxXEtlMTioqvIRfgHe7N1ZOsr9s7ofOmCuGuKAgL44XGyy9042BPOkxAi6Jj5D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7c2edeb505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/b3.jpg
200 OK 26 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/b3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x500, components 3\012- data
Hash 5f4666cbda47a1f94ca8094978e3c6b2
f9046531d48aec2d84e6420bf67c1bfa16208c32
60f1a7ae43c5a715a28a155ac90ba01c9e20059d1b351f8a9d75ecf06f107858
GET /template/2381/images/b3.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 26020
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-65a4"
Expires: Sat, 08 Oct 2022 21:55:59 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GZ23fReCGVoWKzWFu9pT1EeBJBDI5qQRexZ6GlPGvqF7i0RSWwg1PcEk2N19KYoTi6uyCKCwv%2BO4H%2BCckDjgHI3eVVKr4L7zdnbQRtZYDyMRS1MapQm3x0Gwhftb%2F25q"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7a7989b523-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/serve1.png
200 OK 3.2 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/serve1.png
IP
File type PNG image data, 64 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash e398906bbd3e34927cf67bb950058f8a
35bed642b7d01121b91c021c087aeec9ad109386
72a4eef32bfad7382e9f2ff9a7aeb7118b8d21ae0a6cb9781f641de840f30234
GET /template/2381/images/serve1.png HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/png
Content-Length: 3177
Connection: keep-alive
Last-Modified: Tue, 15 Oct 2019 06:25:48 GMT
ETag: "5da5666c-c69"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bTqmIv20fwRvIx6WLJpkIPqKi5YwBd9H5gfcLei%2BR4CpC4MSQzTFVSOtjq9cB%2ByU3pxIU0hO5dsco7VaOISTl4ENoo4UAZynbHcX5rwTVtDRBlfDU%2BJOY9SY3MSm7OPH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7b8d901c0a-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my5.jpg
200 OK 12 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my5.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x350, components 3\012- data
Hash a2142d85fe7a094146ce133280c0d588
b1604558d6c91cd360eefc180ab9561d564ff3d7
262982929f7ace357cab4262c606c163658d610efe87bce1f4763b508477e2c9
GET /template/2381/images/my5.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 11500
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-2cec"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZLX5Uu%2F1nMG%2FsZU%2F7wq234oFReSDKSZJbNDxJvPIYHYftCAJgCkPTLgSc7TEPRGaez9HXItVadOk2PtTbHXIqj1C2Q7iiwM543Rl%2FKTSR9LvFjOLm2dAUAF6gKfOkcch"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7d2ff6b505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my4.jpg
200 OK 11 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my4.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x350, components 3\012- data
Hash 5754cfa45ca1d9e8d6a776ad95cf6cb9
3639d1da13115a4696c17221d9b7f8b8d32ed42a
97506a20a75562cbb27c060f0e8bb6f26af7c0703782ec01a834cfa145c6aa94
GET /template/2381/images/my4.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 11361
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-2c61"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JdieaBbN67uPFGsoS78CmGcJX3YBVDbe%2FOXREX2yAQC6OPZKEpQ%2B%2FBZRqDVk4ixK62O%2BPeCi4OAmm1ZnGoQBEaWAkVpWClRWCu8dT2hokPO4Mob8YQ7pVmQ0ShyR%2FGgH"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7d08440b61-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my2.jpg
200 OK 15 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x350, components 3\012- data
Hash 8437fcff39d6e8be31d37958a1603fbc
87bd24e915c28d37e66e6239c4b1fceac9eb724a
e674600863cfda93c890641b56a48606c447cb4c45553f8aa2e477e632ee399e
GET /template/2381/images/my2.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 15071
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-3adf"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M%2B7iO8qmrMGxWVQfD%2BCbR2PCgAUAfEu%2F1f8FieasRHGQadeolISL4jS%2B1Ks2o47QIpZcMUKcPX5DXQjX%2F4B3hG%2F5tUntVzdMwRv3GGC5GtBSQ6WgRIlf9LUroQy47RPg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7c3f450b3d-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my3.jpg
200 OK 22 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x326, components 3\012- data
Hash e06c2213d27f7c8bbc2fdd71d48800d9
e3a69a50cab2ae463551e27b61b46004ae6834a8
a7485b003eb38ac0afdf70813d9b791146389b9bc2645e91037e813e608a3fde
GET /template/2381/images/my3.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 22018
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-5602"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0tiec5xeR4YP7jYR0eUmuOgBDenRJN4qSDro%2BKVneE1%2B87kDgKFDg%2Fy9PFiF5C2iEzoHKtUKl9gQgHZGFM2r%2BpJLtzUBJb2ggmjXCbtUZmK8QXS9H2hHDpPrpqC5YYei"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7d2ff4b505-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my6.jpg
200 OK 9.7 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x350, components 3\012- data
Hash 83557790caa53347fd020636c6825668
72e212fd7f093570c6f805b9343cb6e9325a2297
2b6bfd8b41e6c10432d92c047a9ca62c1fc60b24dcfe76974ccadd8e94e002e5
GET /template/2381/images/my6.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 9699
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-25e3"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BiWH2FgtWOaeWBfJLCIoqBs4dL3sm%2FKU0St8Z4UYQtx4aGRqrIU6gPOGYVGHCh6JcDQ51W5p3WIYZcSC8Varto2YHOXN5SEccXv3vaH2kmQF9uDbVENlfukpZdftA%2BcK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7d4ce7b523-OSL
alt-svc: h2=":443"; ma=60
www.jvvrb.top/template/2381/images/my7.jpg
200 OK 17 kB URL HTTP/1.1 www.jvvrb.top/template/2381/images/my7.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x350, components 3\012- data
Hash aebb6ad42e285935b017b103e1afb3e8
455dc399cec79545d7f75fa55a65af2fa593573c
3c6c7332e35e03956717b686dec0fdecea9ef9f31c8340915e117ee711abd5ae
GET /template/2381/images/my7.jpg HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/jpeg
Content-Length: 17268
Connection: keep-alive
Last-Modified: Wed, 16 Oct 2019 06:05:18 GMT
ETag: "5da6b31e-4374"
Expires: Sat, 08 Oct 2022 21:56:00 GMT
Cache-Control: max-age=2592000
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vqIE%2F9vwFBA2xlySIrmHabyFPkeWsbb7WAyfHgWIDTBMHDXEUjwFWW%2FgNVoxFWeT7BQm5WYcZf1Yu%2FRzURSNatEbMOQDq%2FQXdWi80xGWj1yUXgww0rfr8Y4VNd63v3Zb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee7d7ede1c0a-OSL
alt-svc: h2=":443"; ma=60
js.users.51.la/21417485.js
200 OK 2.3 kB URL HTTP/1.1 js.users.51.la/21417485.js
IP
ASN #4837 CHINA UNICOM China169 Backbone
File type ASCII text, with very long lines (4898)
Hash be91ef3888beef18173874a244be0cc4
499509118116aed8f73c0f3b8cc41cacc708fae3
95b9685bee60c532deb0661d89674a9954375d630b8c5cbdc26281a1b6b02a52
Analyzer Verdict Alert fortinet Malware
GET /21417485.js HTTP/1.1
Host: js.users.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.jvvrb.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: CloudWAF
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: HWWAFSESID=a01af1d2437ba312858; path=/
HWWAFSESTIME=1662674158452; path=/
Cache-Control: max-age=360000
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
www.jvvrb.top/favicon.ico
200 OK 911 B URL HTTP/1.1 www.jvvrb.top/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 4a5e32a42557d2863510c0be4cfba1e0
20941717993767bc7df5288151093ef0487e79af
c9471496a3151d4fe342b7e937273abaf4c531a850a5fddb9d8bd4c0231c5134
GET /favicon.ico HTTP/1.1
Host: www.jvvrb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
Cookie: __tins__21417485=%7B%22sid%22%3A%201662674152577%2C%20%22vd%22%3A%201%2C%20%22expires%22%3A%201662675952577%7D; __51cke__=; __51laig__=1
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 21:56:00 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 17 Oct 2019 11:19:32 GMT
ETag: W/"5da84e44-47e"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LNdMGApV45Qwi5fCG4GdiSAHu0xHYOKBkZVYhtVUG%2FzQb0q8Blx63Dnr%2BmpS1kKk22OnJt8YjQXQ%2Fp30pho56CnU3nC2lGLuu4lGnRihb%2FPdqbmQxF8DeIXivhoqXeag"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 747aee812870b523-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17491
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Thu, 08 Sep 2022 21:56:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17491
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Thu, 08 Sep 2022 21:56:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17491
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Thu, 08 Sep 2022 21:56:01 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17491
Expires: Fri, 09 Sep 2022 02:47:32 GMT
Date: Thu, 08 Sep 2022 21:56:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca5b5d4ac26d97b5729a30ecdc688bc
3e633bc6c4ab9adfe84899e5209d73bef1d097eb
2c8275d1819d933f86df9685b76aea030842ba5a341c59ea88ffd2da99a5a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7885
x-amzn-requestid: 305dc6b7-eb3d-40ad-af89-8b60be935637
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThE3DIAMFRtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-7c0b58644e26de7f27c5b388;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ry2D03udnweYHan_7KhC9IDhT01g9_73G40Fa10BdIX21tgK0Cgjiw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 21:35:22 GMT
age: 1239
etag: "3e633bc6c4ab9adfe84899e5209d73bef1d097eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a07d553b6441514870ed7e9e989a29a7
98c145b9326d1e6036fa9089d87a25232dd45b0b
373a586b596016baeb8de98022207c25af24c099c06077edbdfd837cffc31a0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5314d83a-c7f9-468e-8b42-535c4fae5d85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7492
x-amzn-requestid: 2c5e9ff3-c7a4-4a8f-96bf-74f0ca5d9137
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9dOHguIAMFjGg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f87-70dbe6532b1a241e6dbe729e;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 6mfdlMHJozdykr4faiijvUuJPXVrJGU_n0MxJgCrZ-uWWdejGYfiAQ==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:33:06 GMT
age: 84175
etag: "98c145b9326d1e6036fa9089d87a25232dd45b0b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 09267c271a56ba4c2d4197543f264fac
67ae4acd88571da51b81fa7ed963b7f2a71845b4
906163f9e1bb8908ae7fcfbf4debc2a42fd14a3f90c8814536025a57ee851dbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffca3b7c7-528e-421a-8910-451f0b9b667f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8162
x-amzn-requestid: decb1d93-bcc9-4a71-a054-c537ad7d1add
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YJvndF1fIAMFv7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631a2c95-27cef2465fd0e6c849da81af;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 17:55:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: C_J0m9xfkCb5qsoO934KB2Ldk1-yMaMXkgiv9gWus7JqjN3M_HCpdg==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 17:56:29 GMT
age: 14372
etag: "67ae4acd88571da51b81fa7ed963b7f2a71845b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cd778a615e9a4ca3a25119790398434
d6daca74fc85d39274b3c7536f34528bef93ae97
e6b5a7a525e314e09c30985b22da7c34806df09cbe98ad52b00dcbf93a0dc054
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7251
x-amzn-requestid: 26b2021a-4440-47ce-8dba-d971cae60cc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9bmHcmoAMF3Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f7d-5471edce7de2374c3b8af888;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: d3MrDEyDFDylQKyfxONQ12_7IBvRAg8o0rSZ64WNRGNvDHqQyDmqJA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:16:27 GMT
age: 85174
etag: "d6daca74fc85d39274b3c7536f34528bef93ae97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f922505178de0cea92eedcfda85a9f67
50f1459de01174e594e03e7df4dfaa8eb1798672
981cd58768d6ad841673add855ddcc7106fbc85de05db9a1bd2d6bc8928b4c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3ef55d7-b6c2-4550-aff3-c9052f7d4816.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6214
x-amzn-requestid: 46a44af0-e547-49e8-bc39-f6c49d94e375
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xj_0HFKbIAMFRbg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630b134d-0297c83c305422fa51b86dcf;Sampled=0
x-amzn-remapped-date: Sun, 28 Aug 2022 07:03:41 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: _ZKcuRO8Z6wBMdm79iDZj5uRYk4YYpYJqOoG8hZqY81O0R7hfbe5bQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Sep 2022 05:34:36 GMT
age: 58885
etag: "50f1459de01174e594e03e7df4dfaa8eb1798672"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f73ee4e91b38eaa36cadd4c437785f8
6ceea057f5ae50b9cef505da0a358e3d3b7d6a38
778d28e14b28c154843403470136d0efdcdd5e93e4b5aab784c12d4344e7af6f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11365
x-amzn-requestid: d50039cd-381c-4221-997e-9231d40ecfbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9V0EHEoAMFeag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f58-11cab61904bd14462cd13d0d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: z7RyNwWgq5r9B2WMa5ibpo3d8DXFSFCCrEHpMvc0Q5SqE2x1ovaV-g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:41:33 GMT
age: 83668
etag: "6ceea057f5ae50b9cef505da0a358e3d3b7d6a38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
api.share.baidu.com/s.gif?l=http://www.jvvrb.top/
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.jvvrb.top/
IP
ASN #134770 CHINANET Jiangsu province Suzhou taihu IDC network
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.jvvrb.top/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Thu, 08 Sep 2022 21:56:01 GMT
ia.51.la/go1?id=21417485&rt=1662674152577&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E6%2595%25AC%25E5%2591%258A%253A%25E6%259C%25AA%25E6%25BB%25BF18%25E5%25B2%2581%25E8%2580%2585%25E8%25AB%258B%25E5%258B%25BF%25E9%2580%25B2%25E5%2585%25A5WWW.DGBCKP%252CCOM_WW&ing=1&ekc=&sid=1662674152577&tt=WWW.DGBCKP%252CCOM_WWWDGBCKPCOM__%25E6%2588%2590%25E4%25BA%25BA%25E9%25A6%2596%25E9%25A0%2581&kw=WWW.DGBCKP%252CCOM_WWWDGBCKPCOM_%252C%25E7%259C%258B%25E7%2589%2587X%25E5%258C%25BA%252C%25E6%2588%2590%25E4%25BA%25BA%25E9%25A6%2596%25E9%25A0%2581&cu=http%253A%252F%252Fwww.jvvrb.top%252F&pu=
200 0 B URL HTTP/1.1 ia.51.la/go1?id=21417485&rt=1662674152577&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E6%2595%25AC%25E5%2591%258A%253A%25E6%259C%25AA%25E6%25BB%25BF18%25E5%25B2%2581%25E8%2580%2585%25E8%25AB%258B%25E5%258B%25BF%25E9%2580%25B2%25E5%2585%25A5WWW.DGBCKP%252CCOM_WW&ing=1&ekc=&sid=1662674152577&tt=WWW.DGBCKP%252CCOM_WWWDGBCKPCOM__%25E6%2588%2590%25E4%25BA%25BA%25E9%25A6%2596%25E9%25A0%2581&kw=WWW.DGBCKP%252CCOM_WWWDGBCKPCOM_%252C%25E7%259C%258B%25E7%2589%2587X%25E5%258C%25BA%252C%25E6%2588%2590%25E4%25BA%25BA%25E9%25A6%2596%25E9%25A0%2581&cu=http%253A%252F%252Fwww.jvvrb.top%252F&pu=
IP
ASN #4837 CHINA UNICOM China169 Backbone
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go1?id=21417485&rt=1662674152577&rl=1280*1024&lang=en-US&ct=unknow&pf=1&ins=1&vd=1&ce=1&cd=24&ds=%25E6%2595%25AC%25E5%2591%258A%253A%25E6%259C%25AA%25E6%25BB%25BF18%25E5%25B2%2581%25E8%2580%2585%25E8%25AB%258B%25E5%258B%25BF%25E9%2580%25B2%25E5%2585%25A5WWW.DGBCKP%252CCOM_WW&ing=1&ekc=&sid=1662674152577&tt=WWW.DGBCKP%252CCOM_WWWDGBCKPCOM__%25E6%2588%2590%25E4%25BA%25BA%25E9%25A6%2596%25E9%25A0%2581&kw=WWW.DGBCKP%252CCOM_WWWDGBCKPCOM_%252C%25E7%259C%258B%25E7%2589%2587X%25E5%258C%25BA%252C%25E6%2588%2590%25E4%25BA%25BA%25E9%25A6%2596%25E9%25A0%2581&cu=http%253A%252F%252Fwww.jvvrb.top%252F&pu= HTTP/1.1
Host: ia.51.la
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.jvvrb.top/
HTTP/1.1 200
Server: CloudWAF
Date: Thu, 08 Sep 2022 21:56:01 GMT
Content-Length: 0
Connection: keep-alive
Set-Cookie: HWWAFSESID=3ed324e77371cbafd25; path=/
HWWAFSESTIME=1662674157067; path=/
www.lelifi.com/app/app.js?t=xia&c=googleee&mb=1
200 OK 0 B URL HTTP/2 www.lelifi.com/app/app.js?t=xia&c=googleee&mb=1
IP
GET /app/app.js?t=xia&c=googleee&mb=1 HTTP/1.1
Host: www.lelifi.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.jvvrb.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 21:55:59 GMT
content-type: application/javascript
last-modified: Mon, 05 Sep 2022 07:53:14 GMT
vary: Accept-Encoding
etag: W/"6315aaea-f46"
expires: Fri, 09 Sep 2022 09:55:59 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KY7PYAcVb2CSU7SxjmYsCA9tvGkqLqtxAHMMogPLAA1uYIiD8ayRZJWhbhTqXT9%2B1U%2FPpRPYiH8yESHIfT%2B8Rf%2BgHJi6OWA31fB%2Fhh70sO9xtbdC5WMFrKDrM88PxBgfIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 747aee78dfe50b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.75.201
93.184.220.29
52.36.24.174
103.143.19.103
23.36.77.32
104.18.20.226