0delay.fun/lander/dating-pl/index.html
200 OK 2.0 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 69f7b3a73ec1277a91179ffd062fa23a
57db528a6bef171953fea33ede8c1d58332a1865
759040bc6b2d39b49465ea9f668afe39c41edc9370cc9c3432976ee8bd5847f2
Analyzer Verdict Alert fortinet Phishing
GET /lander/dating-pl/index.html HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: text/html
Last-Modified: Sat, 22 Oct 2022 11:44:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"6353d79d-195a"
X-Content-Type-Options: nosniff
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5c6a87f6d6b5c54dcb1b630ae6001c73
e0315c9936d6f2f58ff7d078e74a8ec7802265a8
d88ef07b9fcfb42d27a490cb57df4adaf3261efc7d0b38246db387da3ca32a8d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D88EF07B9FCFB42D27A490CB57DF4ADAF3261EFC7D0B38246DB387DA3CA32A8D"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18637
Expires: Sun, 01 Jan 2023 11:59:42 GMT
Date: Sun, 01 Jan 2023 06:49:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ab3625faa748b97df39d95f3265ccd14
3930df2e3cb45a1abe47de735002fba535de4f08
0b0a1eb64c4a23598884f08be0a9694c8fcaeffc4b0df790a678104f44fe1c14
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0B0A1EB64C4A23598884F08BE0A9694C8FCAEFFC4B0DF790A678104F44FE1C14"
Last-Modified: Fri, 30 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7437
Expires: Sun, 01 Jan 2023 08:53:02 GMT
Date: Sun, 01 Jan 2023 06:49:05 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 01 Jan 2023 06:47:16 GMT
content-type: application/json
age: 109
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6d6d99cd1201f65eeb7d437b62bad1f3
6d5e41d7a2786ccaad7c7276ecdd9411f8cbd6ba
db2b42007fc4ad126c8af8d7cce27af88947231d09ded56da33cfee3d2594e23
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DB2B42007FC4AD126C8AF8D7CCE27AF88947231D09DED56DA33CFEE3D2594E23"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7717
Expires: Sun, 01 Jan 2023 08:57:42 GMT
Date: Sun, 01 Jan 2023 06:49:05 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9CRqKzSUAcXFMVeWjTA648RIeE3g78jzOdO8QX982aOoA5xRjo1xmFt6o2300v+Dr1o/L4HfdKo=
x-amz-request-id: DCQ47Q8J9WWF3WD6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 01 Jan 2023 05:57:43 GMT
age: 3082
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 06:49:05 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
0delay.fun/lander/dating-pl/1/style-bg-7.css
200 OK 1.7 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/style-bg-7.css
IP
File type assembler source, ASCII text
Hash c322fb73e3b6125bd9ea54b6398370a9
bf995ebf93e73e9ae1bff7b8b33a69275b35ca00
96ec539758e0b32348edcdceb90c9ff1adb5d2f1f6b4bb05531806185aef2565
GET /lander/dating-pl/1/style-bg-7.css HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: text/css
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61e40434-1a04"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
0delay.fun/lander/dating-pl/1/jquery.min.js
200 OK 30 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/jquery.min.js
IP
File type ASCII text, with very long lines (32065)
Hash 28045013c2c55accfb20fc66ec778904
310a36b0d6a5e3315f9751b7031c2b050b20c29c
27cf827c7a9d308f4bec15de5592fbf6efbad648b7eb0b20ecd052206132cc76
Analyzer Verdict Alert fortinet Phishing
GET /lander/dating-pl/1/jquery.min.js HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: application/javascript
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61e40434-14e4a"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
0delay.fun/lander/dating-pl/1/function.js
200 OK 1.3 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/function.js
IP
File type ASCII text, with CRLF line terminators
Hash ab6b8d075a53d751c5dce08e7b9c5546
1f0b9687298d334f1f5039096fc38aa27a462e8f
0e4047bcda6d3dcb1d5b2a2ffa87a555184cdc9c5df79ebb1d176f96d7a6afb4
Analyzer Verdict Alert fortinet Phishing
GET /lander/dating-pl/1/function.js HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: application/javascript
Content-Length: 1277
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-4fd"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/translates.js
200 OK 15 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/translates.js
IP
Hash 52d6cc2547e070ca26b78566837ac422
8ebd87ce1a1ff5c9f62598ad75850c975506e1e3
1e69e965c4854f9dfb410c557b9b178b30b5d6e60dfb1e060cd33c9befa83193
Analyzer Verdict Alert fortinet Phishing
GET /lander/dating-pl/1/translates.js HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: application/javascript
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"61e40434-933c"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
0delay.fun/lander/dating-pl/1/5.jpg
200 OK 97 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/5.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x625, components 3\012- data
Hash 054aad7be61cc095a5cd1f944a0666fc
0bb5e9781013e504627b3eb9c24da676e87aaf94
078bb9a05decb6eaca87d3ff28a7d2dba2281aa3afe961187010cdfeb50faa70
GET /lander/dating-pl/1/5.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 97237
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-17bd5"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/4.jpg
200 OK 96 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/4.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x625, components 3\012- data
Hash ca101f4083ec99306d22781127ca281d
bb695de90f1e42364a2e5f39f65cbd6dc11b4a56
68db7b565d620268e8a4cd98c7421d9e437a2e84438113158faab0976ce284d4
GET /lander/dating-pl/1/4.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 95641
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-17599"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/8.jpg
200 OK 62 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Hash e236b0b21aca6796d58af7ecb5220371
22173374a808c94b5e6ca8d7916470dacac51d82
54b28d96a014d0c208c3ea37093e23154fda4c7a6a51e19dadaca89280b8f48f
GET /lander/dating-pl/1/8.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 62126
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-f2ae"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/1.jpg
200 OK 100 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/1.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x625, components 3\012- data
Size 100 kB (100218 bytes)
Hash 64540b83356c08b775f5341ba32f1728
69a6301437256c008431d7e84285b2ff8270fc04
ec453f0321b43d7d01f98323e0ba4a5e8bc7d0075cabf7acb74ad7abe063f25c
GET /lander/dating-pl/1/1.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 100218
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-1877a"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
oungimuk.net/pfe/current/micro.tag.min.js?z=4800093&sw=/sw-check-permissions-f4e9b.js
200 OK 14 kB URL HTTP/1.1 oungimuk.net/pfe/current/micro.tag.min.js?z=4800093&sw=/sw-check-permissions-f4e9b.js
IP
File type C source, ASCII text, with very long lines (39559), with no line terminators
Hash 710afc5f904ea87801da7e4974cf1979
8e8351827329a8671b337441784391195dc27c4f
24e7227f0bed8ca17bcc0a344c550167c34016d0160111bfff4136b570f82ca8
GET /pfe/current/micro.tag.min.js?z=4800093&sw=/sw-check-permissions-f4e9b.js HTTP/1.1
Host: oungimuk.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: application/javascript
Last-Modified: Wed, 21 Dec 2022 12:58:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63a302ea-9a87"
Access-Control-Allow-Credentials: true
Cache-Control: no-cache
Pragma: no-cache
Content-Encoding: gzip
0delay.fun/lander/dating-pl/1/6.jpg
200 OK 177 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x1656, components 3\012- data
Size 177 kB (177009 bytes)
Hash e0139c2ae4236645b01f99bde98463ae
c4f62a7156d30639b9dd7e983a047276f44eb648
a18586071a63cff4df72e158ecf692b4bca26765c53a0d6bafaabfdf6794dccb
GET /lander/dating-pl/1/6.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 177009
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-2b371"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/3.jpg
200 OK 104 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3\012- data
Size 104 kB (103681 bytes)
Hash 1298d537432fe3d65400906576ed12c4
b230211828dadc5792adbdbbf0b7bb4ff07ecd4f
357491a0bcad0934ff3642596800735a0b45ac0354b23ff186bd9a719a29185d
GET /lander/dating-pl/1/3.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 103681
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-19501"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/12.jpg
200 OK 128 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/12.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1079x1298, components 3\012- data
Size 128 kB (127896 bytes)
Hash d180051620c11654a6fece81008d364f
5d4123869beb366c2064f3c65072e9de6f744753
e7f6be2fecf1e1bed682300228ab287e1a543ea5d41d4ae3b67cf3dc079041a6
GET /lander/dating-pl/1/12.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 127896
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-1f398"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/2.jpg
200 OK 166 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3\012- data
Size 166 kB (166133 bytes)
Hash 383ebdae11a10ff521df7c06414f093c
7ce1525ac461afe39df4d137cf6b282ceb283c11
ab806034fd811494e550511cd9ac28c72d6e1a1c24be7b48ee286f91708df3ef
GET /lander/dating-pl/1/2.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 166133
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-288f5"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/7.jpg
200 OK 95 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/7.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x625, components 3\012- data
Hash cbed7189c4274e9ad0d23f424f68c4b5
83fe9eed0bd881c488876a5f50bade968c88e7d1
17148839ac32e0497d90ec89ca3ed7b25aaac7fd0148a9474f46a0fd0cef0357
GET /lander/dating-pl/1/7.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 95211
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-173eb"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
zerossl.ocsp.sectigo.com/
200 OK 315 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 89525704b75170963a1fc0fd25b861c3
01231e91fcfe45d984394f63fc60ebf8d9b41874
2d3f34b1f3ad49df03b87c0671b881a72a692fb7d0254792f8ac7d53e98f647d
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Fri, 30 Dec 2022 23:19:33 GMT
Expires: Fri, 06 Jan 2023 23:19:32 GMT
Etag: "01231e91fcfe45d984394f63fc60ebf8d9b41874"
Cache-Control: max-age=490826,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7829502238a70afa-OSL
zerossl.ocsp.sectigo.com/
200 OK 315 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash 89525704b75170963a1fc0fd25b861c3
01231e91fcfe45d984394f63fc60ebf8d9b41874
2d3f34b1f3ad49df03b87c0671b881a72a692fb7d0254792f8ac7d53e98f647d
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: application/ocsp-response
Content-Length: 315
Connection: keep-alive
Last-Modified: Fri, 30 Dec 2022 23:19:33 GMT
Expires: Fri, 06 Jan 2023 23:19:32 GMT
Etag: "01231e91fcfe45d984394f63fc60ebf8d9b41874"
Cache-Control: max-age=490826,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 782950223966b4f9-OSL
0delay.fun/lander/dating-pl/1/14.jpg
200 OK 143 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/14.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3\012- data
Size 143 kB (143422 bytes)
Hash b8416f94142f6b9c14625e69a5d7b7e0
b95286ef9f10f0cda19252c23c0a4f92c7e84ba9
1254c4203d3db07edbf47aa41a8d32cd8f87043880e4859120052f719c49bc48
GET /lander/dating-pl/1/14.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 143422
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-2303e"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/11.jpg
200 OK 117 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/11.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x625, components 3\012- data
Size 117 kB (117239 bytes)
Hash 415a52c9e6008a8d10dd50e767e6559e
7f873ad66e9aff26e7faf7426d1cf8eb9c9ef22b
74455d95e26284a2d0d6446a72647c262fb7180fe6dc78449447593be7a7a7fa
GET /lander/dating-pl/1/11.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 117239
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-1c9f7"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/9.jpg
200 OK 111 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/9.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 500x614, components 3\012- data
Size 111 kB (110886 bytes)
Hash 14cca7bbc97cd08c86c4244db324324c
9671d165d61ac0eabfd2bd231b15202ab6504357
c6e06287acd9573684a9754f0c02d255095bf9bd407e83d854f6b2a04ebe9261
GET /lander/dating-pl/1/9.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 110886
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-1b126"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/15.jpg
200 OK 201 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/15.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 828x1027, components 3\012- data
Size 201 kB (201419 bytes)
Hash fb20c671ca3155a7ef1e20399cf91cfe
8311aa461512f29415937b3b25fc74ce534db95a
54a0ab8fa600fb66522925d12c8b3e032e9c792e225e2762645cf409c2f1f9ec
GET /lander/dating-pl/1/15.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 201419
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-312cb"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/1/10.jpg
200 OK 160 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/10.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1349, components 3\012- data
Size 160 kB (159504 bytes)
Hash b6ccf0db7c76e68dc1241b0b95d1bc49
4876ce48c04d48641dc2b35a81bfdbc212d48824
c897537b13013ee5da2dee9d709b1e571826ea9d80062c6e97ab4473cac7608c
GET /lander/dating-pl/1/10.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 159504
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-26f10"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
news-gevike.cc/code/https.js?uid=136888&site=8054216&banadu=0&sub1=PLDating
200 OK 8.7 kB URL HTTP/2 news-gevike.cc/code/https.js?uid=136888&site=8054216&banadu=0&sub1=PLDating
IP
ASN #63023 AS-GLOBALTELEHOST
File type ASCII text, with very long lines (8698), with no line terminators
Hash 267e5551d70aa22a63403b4d4f0380a7
7afee74346834bce86b1ee7e4e31090e990e9158
e801c1ade5c13d1fb7824342919b10e5fd0d42ca2f6f2464d8effc51d6fa5db0
Analyzer Verdict Alert quad9 Sinkholed
GET /code/https.js?uid=136888&site=8054216&banadu=0&sub1=PLDating HTTP/1.1
Host: news-gevike.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 06:49:05 GMT
content-type: application/javascript
content-length: 8698
last-modified: Thu, 29 Dec 2022 13:19:32 GMT
etag: "63ad93e4-21fa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
news-gevike.cc/code/backbtn.js
200 OK 394 B URL HTTP/2 news-gevike.cc/code/backbtn.js
IP
ASN #63023 AS-GLOBALTELEHOST
Hash bc407fada9a52a36e5f8e260a6839502
7c31790842614adcf515d36608975556c41ad06d
a0209849109697c52a14dbc041d1d4ff61137f04b2b09531756a03cdd48509f8
Analyzer Verdict Alert quad9 Sinkholed
GET /code/backbtn.js HTTP/1.1
Host: news-gevike.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 01 Jan 2023 06:49:05 GMT
content-type: application/javascript
content-length: 394
last-modified: Wed, 19 May 2021 12:34:54 GMT
etag: "60a505ee-18a"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
0delay.fun/lander/dating-pl/1/13.jpg
200 OK 243 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/1/13.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1280, components 3\012- data
Size 243 kB (242945 bytes)
Hash 69c8fc616c459f248881582fa5d09d52
fe64c96aebc3dfef12b41994626e5b499b7675dc
c92ebc25ee077b8c56e049ec070560fc0209a0841694474f19d1b4ad1030512b
GET /lander/dating-pl/1/13.jpg HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/jpeg
Content-Length: 242945
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-3b501"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
0delay.fun/lander/dating-pl/favicon.ico
200 OK 15 kB URL HTTP/1.1 0delay.fun/lander/dating-pl/favicon.ico
IP
File type MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data
Hash 9c114cf0ef613b34845f86adbba242d1
fc36406a7fea75d6eb2294e8f61487d53eb14dd5
b5975e38e161d5e419e9da0970f87f9e0840487c9d6724ee63a5d92a161c52ee
GET /lander/dating-pl/favicon.ico HTTP/1.1
Host: 0delay.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 01 Jan 2023 06:49:05 GMT
Content-Type: image/x-icon
Content-Length: 15406
Last-Modified: Sun, 16 Jan 2022 11:40:36 GMT
Connection: keep-alive
ETag: "61e40434-3c2e"
Expires: Wed, 11 Jan 2023 06:49:05 GMT
Cache-Control: max-age=864000
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 01 Jan 2023 06:33:33 GMT
age: 933
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash afc798d7819a9c19437d20a92eb6f6ec
badde0ed90ac423d5796dc35808a3cd6cec09820
f101fbf84795c278d89aafdadf23cca6c5010b372a48d39a5354555bfb961e61
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1498
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 01 Jan 2023 06:49:06 GMT
Etag: "63affbaa-1d7"
Last-Modified: Sun, 01 Jan 2023 06:24:08 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pwk7wm4ecUb2WHi8O3aCfQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: f8/DF1XjTcp0tKvfbxcxl+SJMd4=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14237
Expires: Sun, 01 Jan 2023 10:46:24 GMT
Date: Sun, 01 Jan 2023 06:49:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14237
Expires: Sun, 01 Jan 2023 10:46:24 GMT
Date: Sun, 01 Jan 2023 06:49:07 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2156f5045eb474b5c02d0c6f64f02c4e
5cc884658ca6b9b357478137cb431f694e773bd8
3e7eb661f6a47c44f20915b8384799874b0f0a69fcedd1d90caaed93f8fce4bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3E7EB661F6A47C44F20915B8384799874B0F0A69FCEDD1D90CAAED93F8FCE4BB"
Last-Modified: Fri, 30 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14237
Expires: Sun, 01 Jan 2023 10:46:24 GMT
Date: Sun, 01 Jan 2023 06:49:07 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcfb3fa2-ee9d-4094-8997-5333a1a1f58c.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcfb3fa2-ee9d-4094-8997-5333a1a1f58c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c602e4ea098bceb3fee2a04f9e563aa9
68a1f45f4ddc79cec4e681e45e283c84bdefd4b0
a117be1cffe9e42162f217efce88ec6c5a59e8796b119b2fb7d56e5cdcec6e85
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcfb3fa2-ee9d-4094-8997-5333a1a1f58c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7046
x-amzn-requestid: 6647a528-bb20-423c-b336-43e3a482f3a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d5Z1oHEdoAMFzew=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad3cf0-32437fd01b394c0702f261b2;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 07:08:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nIeyo8cxSPDO6n41ajOG8vBsAmZ_RkZPCw7yPbveBFzJ_mBz1GTajw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 08:07:52 GMT
age: 81675
etag: "68a1f45f4ddc79cec4e681e45e283c84bdefd4b0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F151a214a-7044-496c-9662-1b2876c624f1.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F151a214a-7044-496c-9662-1b2876c624f1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash af3364657e9f5fc73ad87a8bfbcc74a9
09275100c95963905ea2c6ad0cfe719d44e731ad
773ef6723580164ae4f978de9d5d806b4903c827f32f0cd76184ec59abf62772
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F151a214a-7044-496c-9662-1b2876c624f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6146
x-amzn-requestid: b428336f-ff33-4425-b753-bbabfcae4c52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dsOHKFN2oAMF7SA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a7f6fa-5e9739cb09f539507cbf7f81;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 07:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G8bN6LgMbtXC_4qtl-pxeSzmzqZqRFGWjw8A6UJCBWIqCiHD7Qeijg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 01 Jan 2023 03:37:39 GMT
age: 11488
etag: "09275100c95963905ea2c6ad0cfe719d44e731ad"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F625ac435-5ac8-46ca-9178-7aa9cb621f60.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F625ac435-5ac8-46ca-9178-7aa9cb621f60.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c820340d5ed98c9573754e3a749bf40c
09d31b45d4cc16c4d321e616e5445d9ba921a1ba
2a69c58358ae763ddef6603f783d7d25c465ff4d3777e6bd540c1b673381813a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F625ac435-5ac8-46ca-9178-7aa9cb621f60.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8307
x-amzn-requestid: 978a4b33-aded-49d7-a4a8-2ff5ee894b02
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d0Oh0EhpIAMFyYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ab2ad8-485bd7767c2ad3756ae98e7d;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 17:26:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bcdvyTj9Ys4hBF3rNrUfgzes7CLPom3b4l5S2NLa_8VM__qQdg9Vkw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 21:57:00 GMT
age: 31927
etag: "09d31b45d4cc16c4d321e616e5445d9ba921a1ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56ecc912-7c04-44d7-a43d-91f5105e563b.jpeg
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56ecc912-7c04-44d7-a43d-91f5105e563b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9c106ab8d6891b9865ef89c4cd6c6cb
784caa00a9877cb4cc6ad9037a9676b6d3b37fd2
84440ac9326499d9ce81d6fe8b58fa4f7430f60d5624a2acf5d66f906fe6f898
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56ecc912-7c04-44d7-a43d-91f5105e563b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4560
x-amzn-requestid: 26f5e408-f9d0-46b9-90a7-5cdf29d5a27c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eB__3ETBoAMFU3g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0ad32-2b1520235d6b63862bebc2d5;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 21:44:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: hs_04b29c6nhQo4WrQEpVJj8bkqTsfTAv54dajHxsMIjre-g2uesvw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 21:44:29 GMT
age: 32678
etag: "784caa00a9877cb4cc6ad9037a9676b6d3b37fd2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2a92938ba6a58bd49a9938a24e404cba
2adeb5279f5a130a4ddc05199bc7b0b197a3cabc
1779831cec3a72aa82e2dab789c043da6a7fa432ff75a644733b0ee5f81b965b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb6390ab-134c-4c14-ae9e-9591400607a3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10426
x-amzn-requestid: b6ad4eac-168a-477b-9883-f77fffc6468f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d5ZfRG7XIAMF7zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ad3c61-7766d0293ca12d6e2436ac66;Sampled=0
x-amzn-remapped-date: Thu, 29 Dec 2022 07:06:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 64b2KYy3x32_Z7bLzCIDOVtTsC2OsBCcF4kmfb_2ZhulTcspF5c0Uw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 13:01:37 GMT
age: 64050
etag: "2adeb5279f5a130a4ddc05199bc7b0b197a3cabc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8561e732-44f3-4c66-8b48-832a439b9ac3.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8561e732-44f3-4c66-8b48-832a439b9ac3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2a2d6220c99ca386f0517d430a7a503
75172bf57617e9fd91296df9ef35f2da78b615a0
704c955a91c12506e2835aec357c6448c0bca103142dd0b44133dbbe59b7344a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8561e732-44f3-4c66-8b48-832a439b9ac3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7791
x-amzn-requestid: be887802-b5d5-49ad-a0e0-b78005a82e83
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dy0mgHFxIAMF_4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63aa9af6-53ee68c2626e0ec236df004b;Sampled=0
x-amzn-remapped-date: Tue, 27 Dec 2022 07:12:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _YPfeDd3uqCt42UEBwdWepajhbjkonS9A6ojXD2iwSIGmloQ0bBU_w==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 31 Dec 2022 09:23:27 GMT
age: 77140
etag: "75172bf57617e9fd91296df9ef35f2da78b615a0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
45.80.70.203
23.36.76.226
139.45.197.251
34.120.237.76
104.18.32.68