urmobi.xyz/lt2x/bot.png
200 OK 4.4 kB IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint15:92:4E:FD:FF:42:69:F1:09:AF:84:42:CB:61:33:75:98:7F:DB:6B
ValiditySun, 30 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
File type PNG image data, 229 x 233, 4-bit colormap, non-interlaced\012- data
Hash 4d7e827c6b6e53b5cb343929a88170db
80a8f92f1cda27257f674850197108d580675554
2c714b3a479c4a76d233e6fb36136663398b6b30054dd2e8b08b6c7dce85695c
GET /lt2x/bot.png HTTP/1.1
Host: urmobi.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/lt2x/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 15:27:29 GMT
content-type: image/png
content-length: 4396
last-modified: Sat, 24 Dec 2022 06:38:34 GMT
etag: "63a69e6a-112c"
expires: Fri, 26 May 2023 03:57:34 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 41395
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=atFu9MDBglb15PcR8eXefrE%2F8ARQabGgDQB1bHP8oR7XtrjNki1RkSe7qZ6Ym6sZ8IA3ibF8ybuAMhRfyjQ33Ab0AF2%2BqcFc6ptj1VUhXN0A91HwJK81ZhpAwQKz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccecd7f0c11b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
urmobi.xyz/lt2x/aaa.png
200 OK 1.9 kB IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint15:92:4E:FD:FF:42:69:F1:09:AF:84:42:CB:61:33:75:98:7F:DB:6B
ValiditySun, 30 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e4282730373c0e326b51ae70feacc28c
fe7dcdef53751616949d4ca1d822d004838a684e
94371047c9d0ec11f2b8b069c4edfca3d125f4d12215d9796cfbca506059a303
GET /lt2x/aaa.png HTTP/1.1
Host: urmobi.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/lt2x/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 May 2023 15:27:29 GMT
content-type: image/png
content-length: 1938
last-modified: Sat, 24 Dec 2022 06:38:34 GMT
etag: "63a69e6a-792"
expires: Fri, 26 May 2023 03:57:34 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 41395
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ncQ8prsSQqQd07ImEyMmtciuUhOTHdbHlorflLU%2B0%2B1WC7C8k0pDgVX%2F7pxvVCWM3cnUhDZ3BiPzIIRQaTG1b11%2BqxYgia7AMKZhoWjz6yBgjzMbQuSyfHBKDfmv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccecd7f0c0fb50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.sectigo.com/
471 B IP
Hash 09d56c772c93e8174876c6ac6d5e03da
e322961f04a33e50d8209a4c647aaa5e4fe27668
b3c59d2c2934249ac1d74336cb62e8dbb2c84fda444ccbd5ee1c35145a0a9e63
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 25 May 2023 15:27:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 24 May 2023 20:20:03 GMT
Expires: Wed, 31 May 2023 20:20:02 GMT
Etag: "e322961f04a33e50d8209a4c647aaa5e4fe27668"
Cache-Control: max-age=536851,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7ccecd7fae0c1c06-OSL
my.rtmark.net/p.js?f=sync&lr=1&partner=f6c16b4316099217762dc2cce0527a0d3355158933fd6a638228d80a077807f4
200 OK 697 B URL GET HTTP/2 my.rtmark.net/p.js?f=sync&lr=1&partner=f6c16b4316099217762dc2cce0527a0d3355158933fd6a638228d80a077807f4
IP
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
Hash 3b6b184accfac0190f1b6ea27045dade
2ebe05efd2e904af05e811e59c793d186ae62b10
a061fe57dcc7020ef047b0e62b450b6759637dfa8d94fbd16df1b092a9974f9f
GET /p.js?f=sync&lr=1&partner=f6c16b4316099217762dc2cce0527a0d3355158933fd6a638228d80a077807f4 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 15:27:29 GMT
content-type: text/javascript
content-length: 697
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vctx?t=101486
204 No Content 0 B URL GET HTTP/2 unphionetor.com/vctx?t=101486
IP
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint4B:AB:04:0A:B6:60:F0:0A:CD:92:AC:93:15:79:CF:21:57:6D:1B:97
ValiditySat, 18 Mar 2023 19:00:29 GMT - Fri, 16 Jun 2023 19:00:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /vctx?t=101486 HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://urmobi.xyz
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Thu, 25 May 2023 15:27:29 GMT
access-control-allow-origin: https://urmobi.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 3fa4c7bf6495de091d90da6782e475b7
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
unphionetor.com/vbl?t=101486&bid=undefined&aid=undefined
204 No Content 0 B URL POST HTTP/2 unphionetor.com/vbl?t=101486&bid=undefined&aid=undefined
IP
Certificate IssuerLet's Encrypt
Subjectunphionetor.com
Fingerprint4B:AB:04:0A:B6:60:F0:0A:CD:92:AC:93:15:79:CF:21:57:6D:1B:97
ValiditySat, 18 Mar 2023 19:00:29 GMT - Fri, 16 Jun 2023 19:00:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /vbl?t=101486&bid=undefined&aid=undefined HTTP/1.1
Host: unphionetor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://urmobi.xyz
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Thu, 25 May 2023 15:27:29 GMT
access-control-allow-origin: https://urmobi.xyz
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 60e83936c8d0a6b77c60978edb860cc3
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=f6c16b4316099217762dc2cce0527a0d3355158933fd6a638228d80a077807f4&ttl=&rurl=https%3A%2F%2Furmobi.xyz%2Flt2x%2F
200 OK 43 B URL GET HTTP/2 my.rtmark.net/img.gif?f=sync&partner=f6c16b4316099217762dc2cce0527a0d3355158933fd6a638228d80a077807f4&ttl=&rurl=https%3A%2F%2Furmobi.xyz%2Flt2x%2F
IP
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=sync&partner=f6c16b4316099217762dc2cce0527a0d3355158933fd6a638228d80a077807f4&ttl=&rurl=https%3A%2F%2Furmobi.xyz%2Flt2x%2F HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 15:27:29 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=feb0e6481a85475e9021133c963fd799; expires=Fri, 24 May 2024 15:27:29 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
propeller-tracking.com/fv.js?t=101486
200 OK 5.2 kB URL GET HTTP/2 propeller-tracking.com/fv.js?t=101486
IP
Certificate IssuerSectigo Limited
Subjectpropeller-tracking.com
Fingerprint29:14:4F:57:5D:49:BB:13:F2:11:B7:FD:18:B4:E8:63:D4:8B:DC:06
ValidityFri, 04 Nov 2022 00:00:00 GMT - Mon, 06 Nov 2023 23:59:59 GMT
File type ASCII text, with very long lines (5331), with no line terminators
Hash 061bf31ab8394112d1dffdd5ec872c2a
f87a9877e0b08b1ddcc15351cee29a4d8ba34315
b24829831c07c3a35bc35c242324c3ee90c151e4e53de8e28f579e4161819414
GET /fv.js?t=101486 HTTP/1.1
Host: propeller-tracking.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 May 2023 15:27:29 GMT
content-type: text/javascript; charset=utf8
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 9ae8a805238cee8fb6ac044097a22954
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
urmobi.xyz/lt2x/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 urmobi.xyz/lt2x/favicon.ico
IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint15:92:4E:FD:FF:42:69:F1:09:AF:84:42:CB:61:33:75:98:7F:DB:6B
ValiditySun, 30 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash b351dbddbc7258e45febcec15f0af6df
bbe96a3a52c289fef276c13e3c3fcc13a721d362
3912f125d4e25025881b30a5b88db818e8f7473ec69636fb3f9363c0f5a5b328
GET /lt2x/favicon.ico HTTP/1.1
Host: urmobi.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/lt2x/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 15:27:29 GMT
content-type: image/vnd.microsoft.icon
last-modified: Sat, 24 Dec 2022 06:38:34 GMT
etag: W/"47e-5f08d26bb8d16"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1000
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LSAqnXVREUGdlor8vvXUIivkJe%2BktpVG5Lkmh2PBiHp8jW2cB5bFl1B2HlbCc35ZxkUrjaIM5bSZQtt%2FOff2UBacHSDiKIiprzpI7IEAbnuNSdyFJDhE2Fgi%2B2uf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccecd812f0db50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
200 OK 2.4 kB URL User Request GET HTTP/2 IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint15:92:4E:FD:FF:42:69:F1:09:AF:84:42:CB:61:33:75:98:7F:DB:6B
ValiditySun, 30 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2570), with no line terminators
Hash 7e0f69f63cff444482bf2dce6af68ffc
d05cfbe5477373829555f8d9d365e89b09dc25b8
a0b07a06a4370eb96fd1ffe3d43396bf55a6ee5a6bb69a019af77f45afc0a956
Analyzer Verdict Alert fortinet Phishing
GET /lt2x/ HTTP/1.1
Host: urmobi.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 May 2023 15:27:28 GMT
content-type: text/html
x-powered-by: PHP/5.3.29
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ULml8IgT%2BKy5ISXSHDTm8WAxRuwa9r9iGh5nZlhNtUMKr8MUAJDI8uby8zlv7pysrUS5C93joEesVmh7WdUuKrlhNxmcaGLC3LXd%2Fr3SBRRewQHiHiJVgKTvWXEj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7ccecd7be80fb512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
urmobi.xyz/lt2x/main.css
200 OK 1.6 kB IP
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint15:92:4E:FD:FF:42:69:F1:09:AF:84:42:CB:61:33:75:98:7F:DB:6B
ValiditySun, 30 Oct 2022 00:00:00 GMT - Mon, 30 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (1775), with no line terminators
Hash d06b035d38692ed73c200a25e1b0f0dd
e10d545371f10774305012fb0ab325d7e7622398
08921e9d3316e779b2c94f4f06aa4470603cfdc319008f6db5b7232d2d29eacc
GET /lt2x/main.css HTTP/1.1
Host: urmobi.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://urmobi.xyz/lt2x/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 May 2023 15:27:29 GMT
content-type: text/css
last-modified: Sat, 24 Dec 2022 06:38:34 GMT
etag: W/"63a69e6a-63f"
expires: Fri, 26 May 2023 14:14:13 GMT
cache-control: max-age=86400
cf-cache-status: HIT
age: 4396
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NOKc%2F9GibfeeFwHxas%2FSSfCIje34Y%2F9PdxgK3ElN4cR3SBeINvkVlNH9mhIFyNQKeXDCX%2BKx4NnjdVBi0wGVTVv83mhc1qJIxY%2BERyTN7j0QCscgEJVXaSq4u9J4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7ccecd7efc0cb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
188.114.97.1
104.18.15.101
139.45.195.8