cdn-120.filechan.org/1482K6J0y7/7102e672-1669575502/WizClient.exe
301 Moved Permanently 162 B URL HTTP/1.1 cdn-120.filechan.org/1482K6J0y7/7102e672-1669575502/WizClient.exe
IP
ASN #41634 Svea Hosting AB
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Malware
GET /1482K6J0y7/7102e672-1669575502/WizClient.exe HTTP/1.1
Host: cdn-120.filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 16 Jan 2023 22:42:09 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://cdn-120.filechan.org/1482K6J0y7/7102e672-1669575502/WizClient.exe
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2258cd6b877a3aca8f4c84074e65ac4b
4e46c70941f8e497e8afc8d078644e7f81761a1c
faac4e0d123f2112b58953c104ea746cd53047fc1ada0ef5d669feecf78ddfff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2828
Expires: Mon, 16 Jan 2023 23:29:18 GMT
Date: Mon, 16 Jan 2023 22:42:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3063227f59d1935298b0620fa7919145
478e1d8bef04b1f95381cac01829c03b6779d420
619281d3b9753bc6d2845786da75e8566687362769517aacf90f953ffbb8407c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "619281D3B9753BC6D2845786DA75E8566687362769517AACF90F953FFBB8407C"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6049
Expires: Tue, 17 Jan 2023 00:22:59 GMT
Date: Mon, 16 Jan 2023 22:42:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d6e2abd68203014e8e24d4a9e20e980a
5edbbb1a36083d5077b90b82e7aa10049e90c5d6
88cf8dae194a5e92a8c36a4c54ae71a609eaaed6e99d3986b3834c40d2fceeaa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "88CF8DAE194A5E92A8C36A4C54AE71A609EAAED6E99D3986B3834C40D2FCEEAA"
Last-Modified: Sun, 15 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5362
Expires: Tue, 17 Jan 2023 00:11:32 GMT
Date: Mon, 16 Jan 2023 22:42:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 16 Jan 2023 21:42:13 GMT
content-type: application/json
age: 3597
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 0FxlFz1WSW8DAJQnFb7BciyyhkcV0U3oU2722o8OO+h9rzo2r2PbaDYQkcMm/dh7fj46/SgtRU0=
x-amz-request-id: 46Y28H1DXT7YAMFX
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 16 Jan 2023 21:44:44 GMT
age: 3446
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
cdn-120.filechan.org/1482K6J0y7/7102e672-1669575502/WizClient.exe
301 Moved Permanently 0 B URL HTTP/1.1 cdn-120.filechan.org/1482K6J0y7/7102e672-1669575502/WizClient.exe
IP
ASN #41634 Svea Hosting AB
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /1482K6J0y7/7102e672-1669575502/WizClient.exe HTTP/1.1
Host: cdn-120.filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close
Location: https://filechan.org/1482K6J0y7
X-Cache-Host: filecache-02
X-Cache-Disk: nvme-01
Accept-Ranges: bytes
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 16 Jan 2023 22:42:10 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 00991a17c45c0eba84b669e66f945d74
82e98efcd279599660cfdd06cfa98f12f5fd1845
f59b7220f96222f63d9e90b250dbb4f319223df0895205048c215a2f1403e588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F59B7220F96222F63D9E90B250DBB4F319223DF0895205048C215A2F1403E588"
Last-Modified: Sun, 15 Jan 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11554
Expires: Tue, 17 Jan 2023 01:54:44 GMT
Date: Mon, 16 Jan 2023 22:42:10 GMT
Connection: keep-alive
filechan.org/1482K6J0y7
404 Not Found 2.2 kB IP
ASN #41634 Svea Hosting AB
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash 72beeb0c5a70bf2272c95d45267f221c
32855371ceca530c749eb58231b0db4bf5dd12c9
cd411269e22b2f410bb788d4ccfd1580f9c9b038daaa84be806b9da1f8163658
Analyzer Verdict Alert fortinet Malware
GET /1482K6J0y7 HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 1
Content-Encoding: gzip
filechan.org/css/filechan.css?1668606177
200 OK 25 kB URL HTTP/1.1 filechan.org/css/filechan.css?1668606177
IP
ASN #41634 Svea Hosting AB
File type ASCII text, with very long lines (65452)
Hash b89504831efe84c1bcfc4612ef4e1a67
de9e4e2b049b74b2e9a659f53b4d95947dea0a29
9ec95d34afaa64e144519a96ab990935c5db93f5f12f83df1399d433b433bb0e
GET /css/filechan.css?1668606177 HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 15
Content-Encoding: gzip
filechan.org/sw.js
200 OK 40 kB IP
ASN #41634 Svea Hosting AB
File type ASCII text, with very long lines (65536), with no line terminators
Hash c8541bd5cd8558db0e47520d7ac70dae
e7cf01a64b2d46998bcd5dde63c27853e0a85652
e9c087b8aae900398a004151b5f001935e9928629aacb6523b7da0faf1c3f825
Analyzer Verdict Alert fortinet Malware
GET /sw.js HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 129
Content-Encoding: gzip
filechan.org/js/app.js?1668606177
200 OK 58 kB URL HTTP/1.1 filechan.org/js/app.js?1668606177
IP
ASN #41634 Svea Hosting AB
File type ASCII text, with very long lines (63238)
Hash ba67ff13fd07739a7037fbc27b2a1955
3e253f69b2f12659c541de122c6bce0ed82ba369
1cb363c41be4b3558b7b97b28bb7620cf532033c8a7a0035020831c104aaf818
Analyzer Verdict Alert fortinet Malware
GET /js/app.js?1668606177 HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2
Content-Encoding: gzip
filechan.org/img/flags/24/dk.png
200 OK 537 B URL HTTP/1.1 filechan.org/img/flags/24/dk.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash b6ebe55a7d176720cd2b1003298187a8
930858408b9af1f79c430bbe15c185db555a7815
07575cf7a8d7d2b8edfbea80f8e8a228ecc56a03a567bc60c0ef4dc6ac0f328a
GET /img/flags/24/dk.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: image/png
Content-Length: 537
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4
accept-ranges: bytes
filechan.org/img/flags/24/br.png
200 OK 1.1 kB URL HTTP/1.1 filechan.org/img/flags/24/br.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 6a5938d2e7f7d6f4026d6eb1b4b4f2cd
7a038177fe4deec455d61d3e9c90019fa4727d40
0ab6c46e677fa7e49b6344fcde39c06ff6c014d9163571cdb36f8b5fc59c17eb
GET /img/flags/24/br.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: image/png
Content-Length: 1115
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 25
accept-ranges: bytes
vjs.zencdn.net/7.3.0/video.min.js
200 OK 132 kB URL HTTP/2 vjs.zencdn.net/7.3.0/video.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65141)
Size 132 kB (132230 bytes)
Hash e296d874aca2a1550b409394be51efaa
c184c030e9aab3d03de27bc588919e249d5ccdf7
401c15b7916797f936e9d8443945ef22e0f93305655c057a92c8d9b80c327c9f
GET /7.3.0/video.min.js HTTP/1.1
Host: vjs.zencdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Fri, 26 Oct 2018 18:06:27 GMT
etag: "057f19acd50fc7e3ad917dd600889ee5"
cache-control: public, max-age=31536000
content-type: application/javascript; charset=utf-8
content-encoding: gzip
date: Mon, 16 Jan 2023 22:42:10 GMT
x-served-by: cache-bma1627-BMA
x-cache: HIT
x-cache-hits: 1
vary: Accept-Encoding
access-control-allow-origin: *
timing-allow-origin: *
content-length: 132230
X-Firefox-Spdy: h2
filechan.org/img/flags/24/us.png
200 OK 656 B URL HTTP/1.1 filechan.org/img/flags/24/us.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ae506a6c014bfeb8d8cbfdfbe94c14c9
f4e74440c4e79e71959b9b8f799f2e8a7e15b7ee
bc6dd978e70894c8a0148e6806f4fde9566ee59349adb03c02a61a3b2e25b6f1
GET /img/flags/24/us.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: image/png
Content-Length: 656
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 3
accept-ranges: bytes
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 16 Jan 2023 22:33:46 GMT
age: 504
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
filechan.org/img/flags/24/pl.png
200 OK 347 B URL HTTP/1.1 filechan.org/img/flags/24/pl.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash baf3aff7caef0be58f29b41f20a0e4db
11c840dfa1f1bd22a04aa1fa53fcac95f381b9a6
0a3a8803b7a137166a04369522ec2b31513dcd4c07e2120107c55d9a7f7b646f
GET /img/flags/24/pl.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: image/png
Content-Length: 347
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 30
accept-ranges: bytes
d27genukseznht.cloudfront.net/?unegd=961486
200 OK 69 kB URL HTTP/2 d27genukseznht.cloudfront.net/?unegd=961486
IP
File type Unicode text, UTF-8 text, with very long lines (15948)
Hash c8044347cd936dde26b61239d92e65a6
af36bbe63f7befaf52ca28576f56240ef675aa66
70184cf797c7034df315ea8852266f47f02bf3fad850849cef0bb4e238b821ea
GET /?unegd=961486 HTTP/1.1
Host: d27genukseznht.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 68630
date: Mon, 16 Jan 2023 22:42:10 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5QyiYdVaAQ0UvyxhJxJ3kqViqzEqZsbLaQp12u89LtWxf8LrwxDuNQ==
X-Firefox-Spdy: h2
filechan.org/img/flags/24/no.png
200 OK 611 B URL HTTP/1.1 filechan.org/img/flags/24/no.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash f14ac70aa6dd4d371671c0e6d7cba4e3
1139e3acd6e073bffb59157cbc10af72ed757218
9a4473862ea2b9bd1c5e1543900416e693b33516cae53fde32e1c3a83d3382e4
GET /img/flags/24/no.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: image/png
Content-Length: 611
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 11
accept-ranges: bytes
filechan.org/img/flags/24/jp.png
200 OK 599 B URL HTTP/1.1 filechan.org/img/flags/24/jp.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 857f6f0e0886a3729b758b7241e42e61
a7be973a93c6ad51cf07a9f21a5dd72cc3e15680
8e7b1cd46120293756d1f21bac4de809d2895c7c26dc7586e3e2a09a0f7c1d64
GET /img/flags/24/jp.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:10 GMT
Content-Type: image/png
Content-Length: 599
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4
accept-ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash d03545e1fc5a8876441094039811aac5
99fcc840f3516298625c528e9b408132f7fcbb9c
166fa7c7bb716b2cd02a47884ee00df31030dfb4b2a6fdae7b59b19f87739123
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1662
Cache-Control: max-age=125544
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 22:42:11 GMT
Etag: "63c513ad-1d7"
Expires: Wed, 18 Jan 2023 09:34:35 GMT
Last-Modified: Mon, 16 Jan 2023 09:06:53 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
isanikcieontap.com.ua/azZWY3UKVDUOSgoLNEUAGVprRkctE2QlEVkBMQYbHl0lBg8FXiJNFgdZIwcTGVk4F1sFUyJGRy1YBDZAGXkREBgiZwAGIy9zOCcCPWU1UEwNdxAbHyF0Pjs3P2AsLz0PUBMiPDtXFSoWLHNnLjA4cCw0DV9+HCA0JnQDUxIidzElIgZ7ICdEG2E1NBIOYQA6GiJkEDE3El0gNxIEQjUkNwl+AA9EMV4uMTc4cz4rMB95MlBBLWITVkYNWjkqJzNgJDQ9G3kyUEEIYwc1Dw5dYi8+PHRuNEUpUjU0ATJTPVZGDV46LCEFbwY0EgNTN1BAKH4AD0QgZ3tWFyp1JhEiMwMMBy1SVBUlBVpQZlc+PE8bDTI9BhgoHzF5FQpEW1A6VyI8BBtUIwxdcAkGBFgmXjIkAgMvETt/DzU
200 OK 1.2 kB URL HTTP/2 isanikcieontap.com.ua/azZWY3UKVDUOSgoLNEUAGVprRkctE2QlEVkBMQYbHl0lBg8FXiJNFgdZIwcTGVk4F1sFUyJGRy1YBDZAGXkREBgiZwAGIy9zOCcCPWU1UEwNdxAbHyF0Pjs3P2AsLz0PUBMiPDtXFSoWLHNnLjA4cCw0DV9+HCA0JnQDUxIidzElIgZ7ICdEG2E1NBIOYQA6GiJkEDE3El0gNxIEQjUkNwl+AA9EMV4uMTc4cz4rMB95MlBBLWITVkYNWjkqJzNgJDQ9G3kyUEEIYwc1Dw5dYi8+PHRuNEUpUjU0ATJTPVZGDV46LCEFbwY0EgNTN1BAKH4AD0QgZ3tWFyp1JhEiMwMMBy1SVBUlBVpQZlc+PE8bDTI9BhgoHzF5FQpEW1A6VyI8BBtUIwxdcAkGBFgmXjIkAgMvETt/DzU
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3016), with no line terminators
Hash 95e813d5fe2102d059879e16a835b931
a3c09b1611fa1ecc0893c811dd9980704da46cef
af11d00066956fa9f6b08c905b972e1a0662fc62c7ec34dbcc80a2d36e50b1b5
GET /azZWY3UKVDUOSgoLNEUAGVprRkctE2QlEVkBMQYbHl0lBg8FXiJNFgdZIwcTGVk4F1sFUyJGRy1YBDZAGXkREBgiZwAGIy9zOCcCPWU1UEwNdxAbHyF0Pjs3P2AsLz0PUBMiPDtXFSoWLHNnLjA4cCw0DV9+HCA0JnQDUxIidzElIgZ7ICdEG2E1NBIOYQA6GiJkEDE3El0gNxIEQjUkNwl+AA9EMV4uMTc4cz4rMB95MlBBLWITVkYNWjkqJzNgJDQ9G3kyUEEIYwc1Dw5dYi8+PHRuNEUpUjU0ATJTPVZGDV46LCEFbwY0EgNTN1BAKH4AD0QgZ3tWFyp1JhEiMwMMBy1SVBUlBVpQZlc+PE8bDTI9BhgoHzF5FQpEW1A6VyI8BBtUIwxdcAkGBFgmXjIkAgMvETt/DzU HTTP/1.1
Host: isanikcieontap.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
content-length: 1168
date: Mon, 16 Jan 2023 22:42:11 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xQdTuz-ScvVB663MMHBD-vaXBmDFO2lPQQUtklNzsmf3qDpRATXJMw==
X-Firefox-Spdy: h2
isanikcieontap.com.ua/dHBKMUkVEilcdhVNKBc8Bhx3FHsyVXh3LUZHLVQnARs5VDMaGD4fKhgfP1UvBh8kRWcaFT4UezImGwMTAhUmUi43IQ9SKDATGnJ5EAUuZy0WISd3JTAyPWcGID4oeSEfFgtzGDY8M1IoIiF7UgAOGwlkIgQIBkYqNjgdQSU1Bw9rKBo6C3UhQEEsXQM+NCNSOjAmA1MHHUQYczFAVXhzBAMlAWkKPRkdRgAiPBleAjUIPkgqJzIrZw4QHRx3cCc5CV4ANwgfVgQxPi5iIx9DGwB4PyokfwAsQXNaCCE+LmIgNQEJdyU7EyRwIicbIl8GRTIoaXslMhsAZEU7AGUfMCgORSQXQQRzGhpFJ2cPTBQHWAg6MQwIJTYmGFcaRhQwZ3hNPClfDyMzGHwlPhcLcAgaOjJ4D0E7E1x4IyMbCDgXF2xbOhseOgw4FzgJQychABMCKw
200 OK 1.2 kB URL HTTP/2 isanikcieontap.com.ua/dHBKMUkVEilcdhVNKBc8Bhx3FHsyVXh3LUZHLVQnARs5VDMaGD4fKhgfP1UvBh8kRWcaFT4UezImGwMTAhUmUi43IQ9SKDATGnJ5EAUuZy0WISd3JTAyPWcGID4oeSEfFgtzGDY8M1IoIiF7UgAOGwlkIgQIBkYqNjgdQSU1Bw9rKBo6C3UhQEEsXQM+NCNSOjAmA1MHHUQYczFAVXhzBAMlAWkKPRkdRgAiPBleAjUIPkgqJzIrZw4QHRx3cCc5CV4ANwgfVgQxPi5iIx9DGwB4PyokfwAsQXNaCCE+LmIgNQEJdyU7EyRwIicbIl8GRTIoaXslMhsAZEU7AGUfMCgORSQXQQRzGhpFJ2cPTBQHWAg6MQwIJTYmGFcaRhQwZ3hNPClfDyMzGHwlPhcLcAgaOjJ4D0E7E1x4IyMbCDgXF2xbOhseOgw4FzgJQychABMCKw
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3040), with no line terminators
Hash c99bcfb98bd19f250674831f6c63f68c
2e8b660379363adf5fd46c02175a5477c5661693
ea1b156b20e898f663f21c003b800bd06436daf98ee320f9523533fe3d9a408d
GET /dHBKMUkVEilcdhVNKBc8Bhx3FHsyVXh3LUZHLVQnARs5VDMaGD4fKhgfP1UvBh8kRWcaFT4UezImGwMTAhUmUi43IQ9SKDATGnJ5EAUuZy0WISd3JTAyPWcGID4oeSEfFgtzGDY8M1IoIiF7UgAOGwlkIgQIBkYqNjgdQSU1Bw9rKBo6C3UhQEEsXQM+NCNSOjAmA1MHHUQYczFAVXhzBAMlAWkKPRkdRgAiPBleAjUIPkgqJzIrZw4QHRx3cCc5CV4ANwgfVgQxPi5iIx9DGwB4PyokfwAsQXNaCCE+LmIgNQEJdyU7EyRwIicbIl8GRTIoaXslMhsAZEU7AGUfMCgORSQXQQRzGhpFJ2cPTBQHWAg6MQwIJTYmGFcaRhQwZ3hNPClfDyMzGHwlPhcLcAgaOjJ4D0E7E1x4IyMbCDgXF2xbOhseOgw4FzgJQychABMCKw HTTP/1.1
Host: isanikcieontap.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1194
date: Mon, 16 Jan 2023 22:42:11 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: L3BVTKI4GYsCv4S5Axc96ZPM3L7OkfxO2Fy8zjf0BxmVh-vnJOH9Gg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ad2f93ea91c7b37a91e2c2e9800d333b
2fbedbef45e9ea3c35a8d7c85adc0d37db11b9d5
6f03880c2a00d974ea8937fd204217eb3c423e507d5e28e98c8b8af761d38006
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F03880C2A00D974EA8937FD204217EB3C423E507D5E28E98C8B8AF761D38006"
Last-Modified: Sat, 14 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6442
Expires: Tue, 17 Jan 2023 00:29:33 GMT
Date: Mon, 16 Jan 2023 22:42:11 GMT
Connection: keep-alive
pausingeoedb.com.ua/RGlMa09rVi8YchIsAh4ZKVAgCAk0BBRZAXU/fg8YHloOMRUoGmofJiBUdV1+cFF6TT8tDXFaaTcdLR86N1R9TSYqDyNWaTJUfUV8cEd/WmF2TzlWfmIdPAooeVhqGzswBXFaeXNadVt3fVp8U3lw
204 No Content 0 B URL HTTP/2 pausingeoedb.com.ua/RGlMa09rVi8YchIsAh4ZKVAgCAk0BBRZAXU/fg8YHloOMRUoGmofJiBUdV1+cFF6TT8tDXFaaTcdLR86N1R9TSYqDyNWaTJUfUV8cEd/WmF2TzlWfmIdPAooeVhqGzswBXFaeXNadVt3fVp8U3lw
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /RGlMa09rVi8YchIsAh4ZKVAgCAk0BBRZAXU/fg8YHloOMRUoGmofJiBUdV1+cFF6TT8tDXFaaTcdLR86N1R9TSYqDyNWaTJUfUV8cEd/WmF2TzlWfmIdPAooeVhqGzswBXFaeXNadVt3fVp8U3lw HTTP/1.1
Host: pausingeoedb.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 16 Jan 2023 22:42:11 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7tXYSatNUnbuXli8AzSjOxe2RMppAKWEXqP9SWi7CsHNgFAH%2FyO%2BYe8hzdg2dHgpJ4EOLNj1BIpqrYfUe9IODtg0IlNKoXSfMuPBWid2EoRJ%2B%2F5tYANcb407jvYpdVjy4oybCpdv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78aa5ce28da1b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pausingeoedb.com.ua/ZGZONkJLWS1FfyoNCGcWVF4PUi8qQ3x0JxMgNmwaPlMMWAgIAwZdZBAPKgt7Uld6DnVCFidSf1VeaEU2BRI7RX9VQCdYJAtbaEB/VUh+GHBKVGhDf1VAOkYjA1t/EDIQEiILc1JRfQ9yXF99BnpcUg
204 No Content 0 B URL HTTP/2 pausingeoedb.com.ua/ZGZONkJLWS1FfyoNCGcWVF4PUi8qQ3x0JxMgNmwaPlMMWAgIAwZdZBAPKgt7Uld6DnVCFidSf1VeaEU2BRI7RX9VQCdYJAtbaEB/VUh+GHBKVGhDf1VAOkYjA1t/EDIQEiILc1JRfQ9yXF99BnpcUg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ZGZONkJLWS1FfyoNCGcWVF4PUi8qQ3x0JxMgNmwaPlMMWAgIAwZdZBAPKgt7Uld6DnVCFidSf1VeaEU2BRI7RX9VQCdYJAtbaEB/VUh+GHBKVGhDf1VAOkYjA1t/EDIQEiILc1JRfQ9yXF99BnpcUg HTTP/1.1
Host: pausingeoedb.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Mon, 16 Jan 2023 22:42:11 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iIxKr78QK9RlEIPth0IPUBCq6kTAyhpUC10rLg5PFWwfs8xPOJPjlZ4DxB8P1H5b7q0kpK%2FpLjjg791pkLABBR92Faw3AvYd%2BKKgPMbhNjx%2B%2B4fjhEPf90%2FL0p89EcPIbfKwAfa8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78aa5ce28da3b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
filechan.org/img/flags/24/es.png
200 OK 666 B URL HTTP/1.1 filechan.org/img/flags/24/es.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 5fa381a8eb16d9e673d32980e7fd1710
fc29fbbebe97109ef1d16a0d4a65637d6b725ac8
7b6f223153c8eda1b541326f9cd66aeb53a28801c58c4de751fd2f9f6f1d96ff
GET /img/flags/24/es.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 666
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 5
accept-ranges: bytes
filechan.org/img/flags/24/ru.png
200 OK 403 B URL HTTP/1.1 filechan.org/img/flags/24/ru.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash d8df89b036e6afb48f72d2440831bad0
04abb4b29dae9c6f1ac0f1d8a507aabe26a3be35
2db4b55326c0ef7cd3caf53e835ae1f38629da1d1c2f5a127e0785165b16078c
GET /img/flags/24/ru.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 403
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 29
accept-ranges: bytes
d27genukseznht.cloudfront.net/VQ2ZvelcgCQEcaDcPC0dudVdbQmFlDBwVOTNbHhkfABQBLycaVQ1cIzkCUkpxLwcBHWplAwEZanJADh41flJJDicsDVIbNi4RBx4+MwUKXCIiWwIVLSoKAxtycSBaVGdmVF9SICoICxUgMENdSjk3Q11KZnNIX19kAUNdSiAqCFlOcnAkSkhnO1BbX2QBQ1-1KJTVDXDtmc1NBSn5mVF8dMiANAF9lBVRfS2dzV19LcnFWCRMlJgAAAnJxIF5KYm1WSQ9qcg
200 OK 495 B URL HTTP/2 d27genukseznht.cloudfront.net/VQ2ZvelcgCQEcaDcPC0dudVdbQmFlDBwVOTNbHhkfABQBLycaVQ1cIzkCUkpxLwcBHWplAwEZanJADh41flJJDicsDVIbNi4RBx4+MwUKXCIiWwIVLSoKAxtycSBaVGdmVF9SICoICxUgMENdSjk3Q11KZnNIX19kAUNdSiAqCFlOcnAkSkhnO1BbX2QBQ1-1KJTVDXDtmc1NBSn5mVF8dMiANAF9lBVRfS2dzV19LcnFWCRMlJgAAAnJxIF5KYm1WSQ9qcg
IP
File type ASCII text, with very long lines (675), with no line terminators
Hash f3abd844386ef2ca3de6fa7589cc7cbc
4ae97a1251f91d0366279412e77675b3e4ee3549
42a5b191a1cc18f3b5a65c2e1402ac0079ca18c56b21348b195bb8488597fb83
GET /VQ2ZvelcgCQEcaDcPC0dudVdbQmFlDBwVOTNbHhkfABQBLycaVQ1cIzkCUkpxLwcBHWplAwEZanJADh41flJJDicsDVIbNi4RBx4+MwUKXCIiWwIVLSoKAxtycSBaVGdmVF9SICoICxUgMENdSjk3Q11KZnNIX19kAUNdSiAqCFlOcnAkSkhnO1BbX2QBQ1-1KJTVDXDtmc1NBSn5mVF8dMiANAF9lBVRfS2dzV19LcnFWCRMlJgAAAnJxIF5KYm1WSQ9qcg HTTP/1.1
Host: d27genukseznht.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://isanikcieontap.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 495
date: Mon, 16 Jan 2023 22:42:11 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BPV5sIowz18frxrU9hRl8sgS5KoVdyE0ieam9RakIJQMvDWChoZ3Ew==
X-Firefox-Spdy: h2
d27genukseznht.cloudfront.net/nRU5rOGsmIQVeVDEnDwVSc39fAFxjJBhXBTVzLHdfEAIPaCIcGE1MESFzWx4HJCAMBU0gIAgFWmMvD1pWcWgeWVYoIRFRBykvTgotcGBbHVl1ZhxRBSEhHEtOd34FTE53floIRXVrWHpOd34cUQVzek4LKWB8W0BdcWtYek53fhlOTnYPWghea35CHVl1KQ-5bACprWX5ZdX9bCFp1f04KWyMnGV0NKjZOCi10fl4WW2M7Vgk
200 OK 194 B URL HTTP/2 d27genukseznht.cloudfront.net/nRU5rOGsmIQVeVDEnDwVSc39fAFxjJBhXBTVzLHdfEAIPaCIcGE1MESFzWx4HJCAMBU0gIAgFWmMvD1pWcWgeWVYoIRFRBykvTgotcGBbHVl1ZhxRBSEhHEtOd34FTE53floIRXVrWHpOd34cUQVzek4LKWB8W0BdcWtYek53fhlOTnYPWghea35CHVl1KQ-5bACprWX5ZdX9bCFp1f04KWyMnGV0NKjZOCi10fl4WW2M7Vgk
IP
File type ASCII text, with no line terminators
Hash a1dd5104bc4af6a9febba659464e94fe
5557e26a98a1a2167f4ef76684cf131f6a884d6b
387d55e228634c21116f7a92b80ca4577dc3d122cdfa0145a87cc7252426c340
GET /nRU5rOGsmIQVeVDEnDwVSc39fAFxjJBhXBTVzLHdfEAIPaCIcGE1MESFzWx4HJCAMBU0gIAgFWmMvD1pWcWgeWVYoIRFRBykvTgotcGBbHVl1ZhxRBSEhHEtOd34FTE53floIRXVrWHpOd34cUQVzek4LKWB8W0BdcWtYek53fhlOTnYPWghea35CHVl1KQ-5bACprWX5ZdX9bCFp1f04KWyMnGV0NKjZOCi10fl4WW2M7Vgk HTTP/1.1
Host: d27genukseznht.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://isanikcieontap.com.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 194
date: Mon, 16 Jan 2023 22:42:11 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UbKhvXyGRD3yXosgXYGlZ0AbASt_npNy9q5pAsbbrvUG_M3ALiZqXQ==
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1MKYcwfyU7h5WE9cyhw48Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: AJ7gnS6KXrcJDAtxki4n/5+A/V4=
filechan.org/img/filechan/fade.png
200 OK 145 B URL HTTP/1.1 filechan.org/img/filechan/fade.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 1 x 200, 8-bit/color RGB, non-interlaced\012- data
Hash 4ecfe6e45216dd324592221793acd2e1
57bc0af44ca3e63beb585aa6dd2fe7a8a0a21140
5f7a2be79027d3a5c7207de3e7efe510bcc4a66f105e174d1000cbffd6e4a274
GET /img/filechan/fade.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/css/filechan.css?1668606177
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 145
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 2
accept-ranges: bytes
filechan.org/img/flags/24/fi.png
200 OK 456 B URL HTTP/1.1 filechan.org/img/flags/24/fi.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ea9115d18d5210d4f1db520881faa3a
09829c2b7b5e4bae28d62b1dff90220f28c3bdf5
544fee9d1bff8bc83865ab87538924de207ebe4848787496c7308b91b539b6da
GET /img/flags/24/fi.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 456
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 20
accept-ranges: bytes
filechan.org/static/logo.png
200 OK 9.2 kB URL HTTP/1.1 filechan.org/static/logo.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 450 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash cd0a710b6f830acc9b78313c794c0906
a612dc5ce7b59a843eac982631f53f4cfb765f1f
f28f3a2e615b97088eee357a8e2a8984f5a435d0a1cb8f553ace922c0de9c01e
GET /static/logo.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 9196
Connection: keep-alive
last-modified: Fri, 16 Sep 2022 20:22:41 GMT
etag: "6324db11-23ec"
filechan.org/img/flags/24/fr.png
200 OK 536 B URL HTTP/1.1 filechan.org/img/flags/24/fr.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e81efecf1a1b1d3a17d00a904c5cc3c9
1203894dbfc8363302dc709d852c05a4dd8bf9dc
54df4beda3ad05d5c621511ff15b2882588ff457e36132035d5f21fb29f2a750
GET /img/flags/24/fr.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 536
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 25
accept-ranges: bytes
filechan.org/img/flags/24/de.png
200 OK 483 B URL HTTP/1.1 filechan.org/img/flags/24/de.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 9f8cc07c258bcd2de0c7900861e20ffc
fed97219e44693d4f3918fc4037b325732225d81
07cd5a4cad20604f77dced9c7d8a92ca9ae3321718e5a1935296e4d75f921a19
GET /img/flags/24/de.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 483
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 7
accept-ranges: bytes
subsectivexe.xyz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: subsectivexe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 388
Origin: https://filechan.org
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
filechan.org/img/flags/24/in.png
200 OK 593 B URL HTTP/1.1 filechan.org/img/flags/24/in.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash ccaf96cfc341dc9a17e24b96bef223ff
8791d6db6628e0fb21b847ab94484f0c615e38ac
728e008d94e2e3bae2679d50a051562f1ccce1fd604196c7880a3d96f3070354
GET /img/flags/24/in.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 593
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 36
accept-ranges: bytes
filechan.org/img/flags/24/se.png
200 OK 581 B URL HTTP/1.1 filechan.org/img/flags/24/se.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash c9b1e40987c4411b4a7d13c07a8843aa
cfce93be3ba77e4e30033d25e2e5c6a37da1b27d
8c04b3b52d605637bb4c6a26449c45e5320a3f33f14e8c737ce599433bc19f14
GET /img/flags/24/se.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:11 GMT
Content-Type: image/png
Content-Length: 581
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 11
accept-ranges: bytes
filechan.org/img/flags/24/kr.png
200 OK 988 B URL HTTP/1.1 filechan.org/img/flags/24/kr.png
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash cb22f00511d088a71e84f8c1c864caed
6599812ed106bda6017487287e12bc836570649f
09a03e08c73db3d8fb50241f004b69d673ec8ea90a6ca7252d66ce821d0b6db1
GET /img/flags/24/kr.png HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:12 GMT
Content-Type: image/png
Content-Length: 988
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 30
accept-ranges: bytes
ocsp.digicert.com/
200 OK 471 B IP
Hash 0988e06d2698db0b1a5bcadbadba234a
515ca060583e340fec230fcf8e758352f4bc10a8
1a0dc461032c28c3e0e71daec9b2296e5b5c089e22785e7d7bee505d71e40127
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6321
Cache-Control: max-age=128391
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 22:42:12 GMT
Etag: "63c50c9a-1d7"
Expires: Wed, 18 Jan 2023 10:22:03 GMT
Last-Modified: Mon, 16 Jan 2023 08:36:42 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4e2845c864701d5e35f27f580b7c74cc
f9054a6dba11fe064c3047cfa1bf51d6bce20a14
accd425a28ad5a4453a85c4e7dd4600a62eb7254f1b1deff7fdb903c5db8ad37
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 22:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 31f4039054b9de8598a88236e46416cf
b27ce48c1dbcf08141f69f1a5b319e3d6ad8223f
4e43248863652d0858a8bf6c863a1c1f50a46c5aa3a38123fd096af636da091f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4E43248863652D0858A8BF6C863A1C1F50A46C5AA3A38123FD096AF636DA091F"
Last-Modified: Sun, 15 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3162
Expires: Mon, 16 Jan 2023 23:34:54 GMT
Date: Mon, 16 Jan 2023 22:42:12 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 31f4039054b9de8598a88236e46416cf
b27ce48c1dbcf08141f69f1a5b319e3d6ad8223f
4e43248863652d0858a8bf6c863a1c1f50a46c5aa3a38123fd096af636da091f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4E43248863652D0858A8BF6C863A1C1F50A46C5AA3A38123FD096AF636DA091F"
Last-Modified: Sun, 15 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3162
Expires: Mon, 16 Jan 2023 23:34:54 GMT
Date: Mon, 16 Jan 2023 22:42:12 GMT
Connection: keep-alive
isanikcieontap.com.ua/utx?cb=IAi9oqGnRNe9&top=filechan.org&tid=961486
204 No Content 0 B URL HTTP/2 isanikcieontap.com.ua/utx?cb=IAi9oqGnRNe9&top=filechan.org&tid=961486
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=IAi9oqGnRNe9&top=filechan.org&tid=961486 HTTP/1.1
Host: isanikcieontap.com.ua
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://filechan.org
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Mon, 16 Jan 2023 22:42:12 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://filechan.org
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Mon, 16 Jan 2023 22:43:12 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 820n0tQJbiidXizr1jcs_p_hlZ5tAneSM6VMfvz7rl7HBw_Hnd7z0g==
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4e2845c864701d5e35f27f580b7c74cc
f9054a6dba11fe064c3047cfa1bf51d6bce20a14
accd425a28ad5a4453a85c4e7dd4600a62eb7254f1b1deff7fdb903c5db8ad37
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 16 Jan 2023 22:42:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
302 Found 391 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (381)
Hash fcc9a3b1525d10b85d713511277fe5b8
42d48782532e423f9ed43168269a6160f6629925
f8c5525ae4ae5af485a3dd5e713c4f1204b9398bef529915059b3a87d55d22bd
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&uilel=3&hl=en&service=youtube HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 16 Jan 2023 22:42:12 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S872582561%3A1673908932167595&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh7YhlKWxU9F59iJ95Xdl4LSPNMNOfycXn03tokvFhCL8HPbRJr41Hf4XadKXx67JkyWS0XH
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-igmmxLnw6gRDvafCNb3-9Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 391
server: GSE
set-cookie: __Host-GAPS=1:VaJWQaV-fN7cOniNMKIPzAJszkSx1w:j6eqAH-yRyB2iSac;Path=/;Expires=Wed, 15-Jan-2025 22:42:12 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
filechan.org/sw.js?WTVaZE0CF2NSfG0Ma0Zhexd2Rn9hBm4FfztRdwZ%2BbQJ3UCluDXcFL2oCd1x0awY7BSthDTkGdHsZeFN1OAA8AXU8GG5UfTgYbgUvahhjAik7GGJRLzpXPFAsPAZpAm91FykTb3UXKREvKlA5ECQvUCIBYyFMIEZhewRqSnh7GTwFISpQdgIsNUY%2ESCs4WSkBEA
200 OK 40 kB URL HTTP/1.1 filechan.org/sw.js?WTVaZE0CF2NSfG0Ma0Zhexd2Rn9hBm4FfztRdwZ%2BbQJ3UCluDXcFL2oCd1x0awY7BSthDTkGdHsZeFN1OAA8AXU8GG5UfTgYbgUvahhjAik7GGJRLzpXPFAsPAZpAm91FykTb3UXKREvKlA5ECQvUCIBYyFMIEZhewRqSnh7GTwFISpQdgIsNUY%2ESCs4WSkBEA
IP
ASN #41634 Svea Hosting AB
File type ASCII text, with very long lines (65536), with no line terminators
Hash c8541bd5cd8558db0e47520d7ac70dae
e7cf01a64b2d46998bcd5dde63c27853e0a85652
e9c087b8aae900398a004151b5f001935e9928629aacb6523b7da0faf1c3f825
Analyzer Verdict Alert fortinet Malware
GET /sw.js?WTVaZE0CF2NSfG0Ma0Zhexd2Rn9hBm4FfztRdwZ%2BbQJ3UCluDXcFL2oCd1x0awY7BSthDTkGdHsZeFN1OAA8AXU8GG5UfTgYbgUvahhjAik7GGJRLzpXPFAsPAZpAm91FykTb3UXKREvKlA5ECQvUCIBYyFMIEZhewRqSnh7GTwFISpQdgIsNUY%2ESCs4WSkBEA HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
x-vdch: Yes
cache-control: public, max-age=14400
x-oe: Y
x-oh: 156
Content-Encoding: gzip
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 394 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (379)
Hash 3244baa75b8a490cc08560014c473282
e0274d489dabbb81fe25670265f0c30d2b5f8681
dd66fe0c3cf784c9303ef7b5055d542f1e7fbbfde41d5478adbae8ea8d540702
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 16 Jan 2023 22:42:12 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1744613039%3A1673908932212417&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4_A1YHqDMQwN3FHbfxNF47zzm1RJjmg4TJ-Q7lnDi08Zz0DPE3asKebSpmmjdORHpZzDKG
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-XkMuqcmkwYbOYbKurfFsow' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 394
server: GSE
set-cookie: __Host-GAPS=1:WzlULd6bHfrLKorSjxjYzO3mxvuv-Q:19Z8YQlFFCqNrDyL;Path=/;Expires=Wed, 15-Jan-2025 22:42:12 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
200 OK 2.0 kB URL HTTP/2 www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp
IP
Hash b1f04a64a1464656fa4b2f4c8a4ff537
2a1e2dce5dba5228f170bfb441f58548b41b1a0e
5af4a5ee65a38f0b739ef4ba7a8fb0bac0c22cdf6b89f1b405024a08bfba9b5c
GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 0
cross-origin-opener-policy: same-origin-allow-popups
vary: Sec-Fetch-Site, Sec-Fetch-Mode, Accept-Encoding
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: y0sOQvDqWx2h0jYdHTg+mqvvjQkaGg0QhI3pIuQ1PcBmPAINSQv2akMctVRriXw1sdlncChsn6Aju0supBZvdg==
date: Mon, 16 Jan 2023 22:42:12 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S872582561%3A1673908932167595&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh7YhlKWxU9F59iJ95Xdl4LSPNMNOfycXn03tokvFhCL8HPbRJr41Hf4XadKXx67JkyWS0XH
403 Forbidden 1.3 kB URL HTTP/2 accounts.google.com/v3/signin/identifier?dsh=S872582561%3A1673908932167595&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh7YhlKWxU9F59iJ95Xdl4LSPNMNOfycXn03tokvFhCL8HPbRJr41Hf4XadKXx67JkyWS0XH
IP
Hash b244fe56b3763aa70e55d83d0cd7dd25
4dc48a7f39797335de3d0f27ec69bafef9493784
86c8a561670dbdcc1ef8da01d47dee2f40d1044e494c04d2708d06c5ee9c6429
GET /v3/signin/identifier?dsh=S872582561%3A1673908932167595&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&hl=en&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh7YhlKWxU9F59iJ95Xdl4LSPNMNOfycXn03tokvFhCL8HPbRJr41Hf4XadKXx67JkyWS0XH HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filechan.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 16 Jan 2023 22:42:12 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-3lsZfEgJpAilXFDKBh8_kA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
cross-origin-opener-policy-report-only: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 31f4039054b9de8598a88236e46416cf
b27ce48c1dbcf08141f69f1a5b319e3d6ad8223f
4e43248863652d0858a8bf6c863a1c1f50a46c5aa3a38123fd096af636da091f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "4E43248863652D0858A8BF6C863A1C1F50A46C5AA3A38123FD096AF636DA091F"
Last-Modified: Sun, 15 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3162
Expires: Mon, 16 Jan 2023 23:34:54 GMT
Date: Mon, 16 Jan 2023 22:42:12 GMT
Connection: keep-alive
filechan.org/img/favicon/favicon-32x32-filechan.png?1668603321
200 OK 1.5 kB URL HTTP/1.1 filechan.org/img/favicon/favicon-32x32-filechan.png?1668603321
IP
ASN #41634 Svea Hosting AB
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 15c624a138aa3e99fb3163846c3002b1
1be36489a962946e26b12da6fef6e3f7f4a2c4d1
7fccbcc6a61f432541e0ad83c3fbd985cf54c5748615a1df640f133414079487
Analyzer Verdict Alert fortinet Malware
GET /img/favicon/favicon-32x32-filechan.png?1668603321 HTTP/1.1
Host: filechan.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/1482K6J0y7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 16 Jan 2023 22:42:12 GMT
Content-Type: image/png
Content-Length: 1502
Connection: keep-alive
cache-control: public, max-age=3600
x-oe: Y
x-oh: 4
accept-ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10046
Expires: Tue, 17 Jan 2023 01:29:38 GMT
Date: Mon, 16 Jan 2023 22:42:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10046
Expires: Tue, 17 Jan 2023 01:29:38 GMT
Date: Mon, 16 Jan 2023 22:42:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6b6a65d2536cc8f99e68793ae265b595
f65e75f8419bd83e26f49def7fa2604db5f77b4d
94b31f7663e4917e8e97079202ef9fa340766f1ebfc2601360618d947f7dabc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10046
Expires: Tue, 17 Jan 2023 01:29:38 GMT
Date: Mon, 16 Jan 2023 22:42:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4bea3a8-a37c-4400-a7fe-c935f3758bbc.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4bea3a8-a37c-4400-a7fe-c935f3758bbc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 21f47639234f79c560d44fc1d42d6aca
56cbcaed180dd893cde9dcf3721f6b86158aca9b
a2fa6d73aee8fc0c2ef001de097b1f0e262fcfcda31f97a05912c41eea1c946b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa4bea3a8-a37c-4400-a7fe-c935f3758bbc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7209
x-amzn-requestid: c3b968c0-5b08-45bf-9f58-03a1fb574e8f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm5FNqIAMFo6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-28d7f6dc7fea377b3c33282b;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: pQ54ou2q6Dt1SH_7zOCVwNnlKdYxbdRnAO5qICIRJ6SzjHJAPmt5GA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:56:51 GMT
age: 2721
etag: "56cbcaed180dd893cde9dcf3721f6b86158aca9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 111 kB IP
Size 111 kB (111010 bytes)
Hash f2b1d1b8b2749b64e4fce7ecaf851d23
8f50ca80a4d112d81bf82c43f80369719467ce56
a28905b17886f49bd417e657ad406309a4fd8f1d2a21f024ab085dcf61de3361
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filechan.org/
Origin: https://filechan.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 16 Jan 2023 22:42:12 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://filechan.org
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 328
last-modified: Mon, 16 Jan 2023 22:36:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8zuZOp5Aq5ogp0mNtGVzjIWMmCK%2BKzBXJJYSyWO6As0sSMZ0plCrMAQ%2FxlCBavGaAzOancZkUC0Nh6tEV1B12edziHBTRVV%2BmIi%2B1c%2BpAAPsDgHJUA6WQV2DRTPvg1jE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78aa5cea18af23e4-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87b645d1-9bdf-4fcb-990e-f3dfb01d71d5.jpeg
200 OK 2.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87b645d1-9bdf-4fcb-990e-f3dfb01d71d5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57f4bddae2488cc36924ba39e6cb5b75
84c4e591d4ec54c3f9b6749044029145103f2fb8
30f39db37bf4f4089a2c180cf3415dbcd2e73e4ad6088eb1ecf31c9f6f00d521
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87b645d1-9bdf-4fcb-990e-f3dfb01d71d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2711
x-amzn-requestid: d7f0fb1e-8a6e-4fae-99a9-7e0497a250c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ekP_UE9HoAMFuyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63be6061-389b5ce60f1febdc3e3d48d0;Sampled=0
x-amzn-remapped-date: Wed, 11 Jan 2023 07:08:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r5J4wPWxEkUaI7C2rCwCVIZ-KvGCLNIS95-_7L2Pj3M5CSkS7Em3xg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 06:53:17 GMT
age: 56935
etag: "84c4e591d4ec54c3f9b6749044029145103f2fb8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9297b226-d4aa-49e6-b351-77061f381097.jpeg
200 OK 3.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9297b226-d4aa-49e6-b351-77061f381097.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1d877fea13674783b11ec5f6c3e93810
6691f478a758386f8c7a0f714fbfe8d36b1bf257
b64d0343ca935e1618a3cedfa7fa837467917daf09bf667cf7709f52341e8015
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9297b226-d4aa-49e6-b351-77061f381097.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3172
x-amzn-requestid: eb8ff1a2-7d00-4a79-a826-ccad6837e0ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm-HSNIAMFo0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f9-55f2241b08e4756f1399447a;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: lewJYOho6ZhbztLXUHN23ulfSnnOfhWX38vJjsR-c9TPc_owyt19yA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 22:03:00 GMT
age: 2352
etag: "6691f478a758386f8c7a0f714fbfe8d36b1bf257"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1490db-aa8a-4724-a608-8c0c03f98b35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1490db-aa8a-4724-a608-8c0c03f98b35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 805a998e9a6fc452c152ab9542b6d0cd
0bd57ea7809abfa4136506f565ac8ba45c936406
b24e0b322cacda63e43582e713cb38d80914f6b82c735307188a2ddd9829338f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1490db-aa8a-4724-a608-8c0c03f98b35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10736
x-amzn-requestid: 78c83dbb-f641-4ece-bd8d-ce9d524f100d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm5FLvoAMFn1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-73b261b87d3eb7b709161fdf;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hUS-ajMYSYKXI2jsZJApvgUgr0lnbrm02BXZ6rsPS5h0daBcIRtgEw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
age: 3357
etag: "0bd57ea7809abfa4136506f565ac8ba45c936406"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 15 kB IP
File type ASCII text, with no line terminators
Hash 4909efd4286dc5a5367d778409592a5c
6ba62498614ab79bbb432c592b80bd0c07067fc5
d7f741a6f7f37769b2706fd2ca8bdfc11ff285bddd3cafdeb497d7273e8a3151
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filechan.org/
Origin: https://filechan.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 16 Jan 2023 22:42:12 GMT
content-type: text/plain
set-cookie: csu=218702200929443@1@1673908932; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://filechan.org
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U%2Bg1c2xgJcMqj%2BSK9LVLRTrYd1ckOKT6hmD9ZSq%2FcBnaRVbBTB7MR3%2FZl3dnzVMM%2FGHOg%2FWz9fLHHxpSm9c60tVvDm7%2FyS0DpfNOhwkaLzWOjtcW%2BCQ1HjrVGIrIEWGD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78aa5cea18b423e4-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
subsectivexe.xyz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: subsectivexe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filechan.org/
Content-Type: text/plain;charset=UTF-8
Origin: https://filechan.org
Content-Length: 352
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
subsectivexe.xyz/
200 OK 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: subsectivexe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filechan.org/
Content-Type: text/plain;charset=UTF-8
Origin: https://filechan.org
Content-Length: 352
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 0
access-control-allow-origin: *
X-Firefox-Spdy: h2
subsectivexe.xyz/RlUyTTk9d0E6ZjMnXm8DZD1GOUk1bx1iXy85Vy5RJzscIkshekE6FywmEGEbNThUbwN3eRA%2BVDB3CG8NaGYQYRsyNFUSUCJ3CG8AcGQGdAhkeRA%2BTCQKWykLZG8QfwF1YVN%2FWyJ4UH4NcXgGKQ5%2BeFMvCnF4CnQLdTRTKwF%2BNlB0Gzs
502 Bad Gateway 0 B URL HTTP/2 subsectivexe.xyz/RlUyTTk9d0E6ZjMnXm8DZD1GOUk1bx1iXy85Vy5RJzscIkshekE6FywmEGEbNThUbwN3eRA%2BVDB3CG8NaGYQYRsyNFUSUCJ3CG8AcGQGdAhkeRA%2BTCQKWykLZG8QfwF1YVN%2FWyJ4UH4NcXgGKQ5%2BeFMvCnF4CnQLdTRTKwF%2BNlB0Gzs
IP
GET /RlUyTTk9d0E6ZjMnXm8DZD1GOUk1bx1iXy85Vy5RJzscIkshekE6FywmEGEbNThUbwN3eRA%2BVDB3CG8NaGYQYRsyNFUSUCJ3CG8AcGQGdAhkeRA%2BTCQKWykLZG8QfwF1YVN%2FWyJ4UH4NcXgGKQ5%2BeFMvCnF4CnQLdTRTKwF%2BNlB0Gzs HTTP/1.1
Host: subsectivexe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 502 Bad Gateway
set-cookie: d565592f8800625d9463ba06f0fbd54c=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S-1744613039%3A1673908932212417&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4_A1YHqDMQwN3FHbfxNF47zzm1RJjmg4TJ-Q7lnDi08Zz0DPE3asKebSpmmjdORHpZzDKG
403 Forbidden 0 B URL HTTP/2 accounts.google.com/v3/signin/identifier?dsh=S-1744613039%3A1673908932212417&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4_A1YHqDMQwN3FHbfxNF47zzm1RJjmg4TJ-Q7lnDi08Zz0DPE3asKebSpmmjdORHpZzDKG
IP
GET /v3/signin/identifier?dsh=S-1744613039%3A1673908932212417&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&hl=en&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AeAAQh4_A1YHqDMQwN3FHbfxNF47zzm1RJjmg4TJ-Q7lnDi08Zz0DPE3asKebSpmmjdORHpZzDKG HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://filechan.org/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 16 Jan 2023 22:42:12 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-8FwIOen4DY1iD5AOGl4W5w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi/external"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
subsectivexe.xyz/NGY5blBvRABYYQBfCEx8FkQVTGIMVQ0PYlYCFAxjAFEUWjQDXhQPMgdRFFZpBlVYDzYMXloMaRZKG1loVVNfC2hRSw1eYFVLDQ8yB0sACDRWSwFbMlcEX1oxUVUKCHIYREoZchhEShsyRwNaGjlCA0ELfkwfQ0x8FlcJQGUWSl8PPEcDFQgxWBVcQjZVCkoLDQ
200 OK 0 B URL HTTP/2 subsectivexe.xyz/NGY5blBvRABYYQBfCEx8FkQVTGIMVQ0PYlYCFAxjAFEUWjQDXhQPMgdRFFZpBlVYDzYMXloMaRZKG1loVVNfC2hRSw1eYFVLDQ8yB0sACDRWSwFbMlcEX1oxUVUKCHIYREoZchhEShsyRwNaGjlCA0ELfkwfQ0x8FlcJQGUWSl8PPEcDFQgxWBVcQjZVCkoLDQ
IP
GET /NGY5blBvRABYYQBfCEx8FkQVTGIMVQ0PYlYCFAxjAFEUWjQDXhQPMgdRFFZpBlVYDzYMXloMaRZKG1loVVNfC2hRSw1eYFVLDQ8yB0sACDRWSwFbMlcEX1oxUVUKCHIYREoZchhEShsyRwNaGjlCA0ELfkwfQ0x8FlcJQGUWSl8PPEcDFQgxWBVcQjZVCkoLDQ HTTP/1.1
Host: subsectivexe.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://filechan.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
set-cookie: 5b93f0349e62f39d3c3b11b8b5adc490=1; Max-Age=604800
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST
access-control-allow-headers: X-Requested-With,content-type
cache-control: public, max-age=86400
etag: W/"8446-U4SDuwp+e/j7yNkuQ+6pyjLhujY"
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
195.96.151.72
104.21.92.94
54.203.48.107
23.36.77.32
45.154.253.152