Overview

URL j.top4top.io/f_xswekmd6kqurwqu_vpudbg/1655998558/1604otvxp1.rar
IP135.181.63.70
ASNHetzner Online GmbH
Location Finland
Report completed2022-06-22 15:23:14 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-06-22 2 j.top4top.io/f_xswekmd6kqurwqu_vpudbg/1655998558/1604otvxp1.rar Malware
2022-06-22 2 top4top.io/f-1604otvxp1-rar.html Malware
2022-06-22 2 top4top.io/downloadf-1604otvxp1-rar.html Malware
2022-06-22 2 top4top.io/share.js Malware
2022-06-22 2 s.top4top.io/styles/default-new-reg/css/font-awesome.min.css?rev=47 Malware
2022-06-22 2 s.top4top.io/styles/default-new-reg/css/reset.css?rev=47 Malware
2022-06-22 2 s.top4top.io/styles/default-new-reg/css/bootstrap.rtl.min.css?rev=47 Malware
2022-06-22 2 s.top4top.io/styles/default-new-reg/javascript.js?rev=47 Malware
2022-06-22 2 s.top4top.io/styles/default-new-reg/css/the220px.css?rev=47 Malware
2022-06-22 2 s.top4top.io/styles/default-new-reg/css/fonts.css?rev=47 Malware
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (15)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-06-22 04:45:40 UTC 54.187.39.106
[Mnemonic Passive DNS] r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2022-06-22 04:45:09 UTC 23.36.76.226
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] s.top4top.io (9) 0 No data No data 104.21.5.137 Domain (top4top.io) ranked at: 118839
[Mnemonic Passive DNS] ocsp.pki.goog (3) 175 2017-06-14 07:23:31 UTC 2022-06-22 04:45:29 UTC 142.250.74.3
[Mnemonic Passive DNS] www.google-analytics.com (1) 40 2017-01-30 05:00:06 UTC 2022-06-22 13:37:37 UTC 142.250.74.174
[Mnemonic Passive DNS] j.top4top.io (1) 730645 No data No data 135.181.63.70
[Mnemonic Passive DNS] top4top.io (10) 118839 2021-07-22 14:24:43 UTC 2021-07-22 14:24:43 UTC 188.165.137.138
[Mnemonic Passive DNS] ocsp.digicert.com (3) 86 2012-11-29 12:49:49 UTC 2022-06-22 10:55:53 UTC 93.184.220.29
[Mnemonic Passive DNS] connect.facebook.net (1) 139 2013-09-20 12:03:21 UTC 2022-06-22 05:03:47 UTC 157.240.200.14
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-06-22 08:07:04 UTC 34.120.237.76
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.7
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-06-22 04:45:39 UTC 54.230.111.99
[Mnemonic Passive DNS] ajax.googleapis.com (1) 12905 2017-01-30 05:00:30 UTC 2019-10-16 05:01:16 UTC 216.58.211.10
[Mnemonic Passive DNS] www.facebook.com (1) 99 2012-05-28 23:09:18 UTC 2022-06-22 04:24:48 UTC 157.240.200.35


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 135.181.63.70

Date UQ / IDS / BL URL IP
2022-07-05 16:34:36 +0000
0 - 0 - 4 j.top4top.io/f_uog2mm2k3_kxn-azuyuyza/1657204 (...) 135.181.63.70
2022-07-05 16:32:55 +0000
0 - 0 - 11 j.top4top.io/f_mfaruf-d5q4kxzykkt-zsq/1657202 (...) 135.181.63.70
2022-07-05 15:26:47 +0000
0 - 0 - 10 j.top4top.io/f_pmwryrahlvew77mifyw_cg/1650704 (...) 135.181.63.70
2022-07-05 05:26:15 +0000
0 - 0 - 8 j.top4top.io/f_F1V_MsIIIZXAXjZT_sKRNQ/1657171 (...) 135.181.63.70
2022-07-04 14:03:26 +0000
0 - 0 - 9 j.top4top.io/f_0yf1hopcxe-g-2nobev9lw/1655680 (...) 135.181.63.70
2022-07-03 15:29:21 +0000
0 - 0 - 7 j.top4top.io/f_gv7waIHqK6k23F9N4sNgTQ/1655654 (...) 135.181.63.70
2022-07-03 04:52:15 +0000
0 - 0 - 8 j.top4top.io/f_pmwryrahlvew77mifyw_cg/1650704 (...) 135.181.63.70
2022-07-02 17:07:16 +0000
0 - 0 - 9 j.top4top.io/f_eoe7axsqzogcrbpquwwnaw/1655494 (...) 135.181.63.70
2022-07-01 15:51:47 +0000
0 - 0 - 9 j.top4top.io/f_nzyzxgq5czlh4g1mjzlulw/1656793 (...) 135.181.63.70
2022-07-01 02:51:53 +0000
0 - 0 - 10 p.top4top.io/f_1g2adzae7jiz2vedtr1_4w/1655317 (...) 135.181.63.70

Last 10 reports on ASN: Hetzner Online GmbH

Date UQ / IDS / BL URL IP
2022-07-06 04:09:30 +0000
0 - 0 - 1 my-discount.info/click.php 136.243.110.236
2022-07-06 04:02:54 +0000
0 - 0 - 25 abr-derin.de/ 138.201.140.90
2022-07-06 03:55:05 +0000
0 - 0 - 3 jenenin.com/luk 116.202.250.8
2022-07-06 03:26:53 +0000
0 - 0 - 6 marmil.rs/ 213.239.221.181
2022-07-06 03:12:31 +0000
0 - 0 - 1 95.217.246.240/4059068301.zip 95.217.246.240
2022-07-06 03:03:18 +0000
0 - 0 - 1 95.217.246.240/0999151021.zip 95.217.246.240
2022-07-06 02:57:25 +0000
0 - 0 - 19 globaldugunsalonu.de/ 136.243.20.96
2022-07-06 02:49:54 +0000
1 - 0 - 0 hebammemannheim.de/ 136.243.20.96
2022-07-06 02:34:30 +0000
0 - 0 - 1 reel.5pace.de/ 116.203.106.211
2022-07-06 02:19:21 +0000
0 - 0 - 1 dl1.topfiles.net/files/2/564/40670/uffhdk2epm (...) 95.216.1.112

No other reports on domain: top4top.io



JavaScript

Executed Scripts (11)


Executed Evals (0)


Executed Writes (7)

#1 JavaScript::Write (size: 192, repeated: 1) - SHA256: 4628a1aa916a0d69bbfe09e0f4857aefa41046bc736df3f500a37b7633b94eb8

                                        < a href = "http://cutt.us/share.php?s=sphinn&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/sphinn.png"
alt = "Sphinn" / > < /a>
                                    

#2 JavaScript::Write (size: 217, repeated: 1) - SHA256: 73993c4a85b58158a71f04403d6f137d7b3d5c7949f1b94a3013c7663dbca081

                                        < a href = "http://cutt.us/share.php?s=technorati&encode=UTF-8&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/technorati.png"
alt = "Technorati" / > < /a>
                                    

#3 JavaScript::Write (size: 195, repeated: 1) - SHA256: 99ca5da2c00648015e15294a7d08ebee58b128439cb70f33988b9893e8f3018a

                                        < a href = "http://cutt.us/share.php?s=twitter&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/twitter.png"
alt = "Twitter" / > < /a>
                                    

#4 JavaScript::Write (size: 198, repeated: 1) - SHA256: 5e8d466d05b92fcc17f6365a6c02f7dfbb9c8e6c8ebb1caf8a508d2bf2cac32a

                                        < a href = "http://cutt.us/share.php?s=facebook&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/facebook.png"
alt = "Facebook" / > < /a>
                                    

#5 JavaScript::Write (size: 186, repeated: 1) - SHA256: 7a3369a2741487b2a1d339ff2ee5dca4d122a64d53a21f51fde613f823247454

                                        < a href = "http://cutt.us/share.php?s=live&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/live.png"
alt = "Live" / > < /a>
                                    

#6 JavaScript::Write (size: 192, repeated: 1) - SHA256: 6d3a35e245506c2c881602d31357b401780a09ea8b2cf28e4f9e83fb98855814

                                        < a href = "http://cutt.us/share.php?s=reddit&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/reddit.png"
alt = "Reddit" / > < /a>
                                    

#7 JavaScript::Write (size: 195, repeated: 1) - SHA256: f78e20f776565f8b2eab290d3719f0f8769cb0a99e7637f35f910a9cfa87422e

                                        < a href = "http://cutt.us/share.php?s=myspace&url=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&title=Download | *-EJD"
target = "_blank" > < img src = "images/myspace.png"
alt = "MySpace" / > < /a>
                                    


HTTP Transactions (48)


Request Response
                                        
                                            GET /f_xswekmd6kqurwqu_vpudbg/1655998558/1604otvxp1.rar HTTP/1.1 
Host: j.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         135.181.63.70
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: Hotcores.com
Date: Wed, 22 Jun 2022 15:22:58 GMT
Content-Length: 138
Connection: close
Location: https://top4top.io/f-1604otvxp1-rar.html
Reason: Invalid


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   138
Md5:    aff950cab4c0265e21d401db15f1026d
Sha1:   f03e18461817f7a6546c8bf8fa8d686d7e30aca0
Sha256: 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 22 Jun 2022 14:43:20 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7vhOTKfckKRCKohtROYW9mldcQqtnhSNBK6eOXwMjBRFf5cFA9wNIA==
Age: 2378


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "22A7AFFA696C3188DD074DEB68A2EC519EA227AC839D0238C9F82660B9E14D6A"
Last-Modified: Tue, 21 Jun 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4747
Expires: Wed, 22 Jun 2022 16:42:05 GMT
Date: Wed, 22 Jun 2022 15:22:58 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 22 Jun 2022 02:10:52 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yYWbu-ijazySB3oxsffbtCm9ZADrFlgEnzxlSoncICMPL2nWOobQ8A==
age: 47527
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    48ca0beea419a9039591cf1aee5179e0
Sha1:   9e92629f505fcc07aab51221e8fe62197a23e307
Sha256: 630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "D69BCE21B0054D4C12B19B0D71E51C7A56F6F28E8F0E2193836EFD9CA3231098"
Last-Modified: Tue, 21 Jun 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2412
Expires: Wed, 22 Jun 2022 16:03:10 GMT
Date: Wed, 22 Jun 2022 15:22:58 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Wed, 22 Jun 2022 15:22:58 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /f-1604otvxp1-rar.html HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.2.1841955378.1654357939
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         188.165.137.138
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 22 Jun 2022 15:22:58 GMT
Server: HotCores
Location: https://top4top.io/downloadf-1604otvxp1-rar.html
Content-Length: 256


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   256
Md5:    244fd2b2ccf1c56d47feb8fb3e4a95b6
Sha1:   1a1a97c93aaeb353af1a981db5bc5fab0f5f5af2
Sha256: dc95b7a3b10353ca1e8c036b520b927628c7048fb9c3f3481e34998005d7d060

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /downloadf-1604otvxp1-rar.html HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _ga=GA1.2.1841955378.1654357939
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Wed, 22 Jun 2022 15:22:58 GMT
Server: HotCores
Expires: 0
Cache-Control: private, no-cache="set-cookie"
Pragma: no-cache
P3P: CP="CUR ADM"
Set-Cookie: sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; expires=Fri, 24-Jun-2022 15:22:58 GMT; path=/ klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25; expires=Fri, 24-Jun-2022 15:22:58 GMT; path=/; domain=.top4top.io; httponly
I-AM: US01
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (411)
Size:   18007
Md5:    ab3fb3d3a94bab7689752df955c36ba6
Sha1:   c4c3a0a574769e14bdca13421facc04281565e6e
Sha256: 5d04601ef043e8c7d1137543d30966a551142e16c18f8594f5b5e82e4952ccc8

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /styles/default-new-reg/images/soft.png HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: image/png
content-length: 41248
last-modified: Mon, 26 Sep 2016 09:33:17 GMT
etag: "57e8eb5d-a120"
expires: Mon, 23 May 2022 14:38:08 GMT
cache-control: max-age=5356800
x-cache-status-a: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 110386
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mqxvz1%2Fh8N3c3ciSCIK9zYx7jidfKNnvfdzcxANbaiRB0fo6ufD%2BrG0p%2FPGaJiFT6ALXfXyqJCyT%2FRgTMYt1WyoRH5Ri9RDXaOKHv5H6v5YcgaAirrZ8rpSp0RXaXRE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89ccacb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 213 x 255, 8-bit/color RGBA, non-interlaced\012- data
Size:   41248
Md5:    8cf5d3f055149868fd89971433ed8ece
Sha1:   e877509e97d487b44bdd7203c7e3ca2795963afa
Sha256: 58b2b600aacfdda258a4b7ced90c85143e109480e78529c31358c412caab09d9
                                        
                                            GET /ads/adpull.php?n=1&w=728&h=90&call=js&t=banner&divid=33938111 HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: text/javascript;Charset=UTF-8
                                        
Date: Wed, 22 Jun 2022 15:22:59 GMT
Server: HotCores
I-AM: US03
Content-Length: 3


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with no line terminators
Size:   3
Md5:    ecaa88f7fa0bf610a5a26cf545dcd3aa
Sha1:   57218c316b6921e2cd61027a2387edc31a2d9471
Sha256: f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4032
Cache-Control: max-age=111400
Date: Wed, 22 Jun 2022 15:22:59 GMT
Etag: "62b2343b-1d7"
Expires: Thu, 23 Jun 2022 22:19:39 GMT
Last-Modified: Tue, 21 Jun 2022 21:12:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 22 Jun 2022 15:22:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ajax/libs/jquery/1.11.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         216.58.211.10
HTTP/2 200 OK
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33434
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 21 Jun 2022 15:42:34 GMT
expires: Wed, 21 Jun 2023 15:42:34 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 85225
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32086)
Size:   33434
Md5:    430e927c980ad4079de727fa59dd93f2
Sha1:   891aaada9a55a91292999f6d50fd300439905982
Sha256: e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
                                        
                                            GET /en_US/all.js HTTP/1.1 
Host: connect.facebook.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.14
HTTP/2 200 OK
                                        
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 0a689e49054ba7a8383874eee9d8a5dd
etag: "b5797045a2488553400890286f50acdd"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 22 Jun 2022 15:33:51 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: nEtwNoxMDGnmYaASCBXadQ==
x-fb-debug: L7m4mdPG1k3nAr9Pb8P/+GnclSRbFxZlCdHdMmRHakg2cPei0ErQwQ2jc/2bJSOeHn7zY15GA0tlDsrWwyqLyA==
content-length: 1687
x-fb-trip-id: 1679558926
date: Wed, 22 Jun 2022 15:22:59 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1961)
Size:   1687
Md5:    9c4b70368c4c0c69e661a0120815da75
Sha1:   09170dfa29c02b7e88650911e75ba3955924e0b6
Sha256: 586ef3193286c29677122e067f243d08a53df69f3522274fc9d0a1b28d32b99f
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.7
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Wed, 22 Jun 2022 15:19:25 GMT
Expires: Wed, 22 Jun 2022 15:56:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: e7uO8Y_itbSndoo5BUUZwYxTdhq9bnd2BL1ZQBQR0SGH1qBV9moGLw==
Age: 214


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /share.js HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: HotCores
Date: Wed, 22 Jun 2022 15:22:59 GMT
Content-Length: 2045
Last-Modified: Mon, 26 Sep 2016 09:33:16 GMT
ETag: "57e8eb5c-7fd"
Expires: Wed, 29 Jun 2022 15:22:59 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document, ASCII text, with CRLF line terminators
Size:   2045
Md5:    d6b05c71ce92a4e0599cf8b731966510
Sha1:   8735a20d053e085fdfe0963cab19b9499e1be457
Sha256: ff90fa92b304e071f41235a6e338e1e0588641156a765999852784a17523be9e

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /ads/adpull.php?n=1&w=728&h=90&call=js&t=banner&divid=330275050 HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: text/javascript;Charset=UTF-8
                                        
Date: Wed, 22 Jun 2022 15:22:59 GMT
Server: HotCores
I-AM: US01
Content-Length: 3


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with no line terminators
Size:   3
Md5:    ecaa88f7fa0bf610a5a26cf545dcd3aa
Sha1:   57218c316b6921e2cd61027a2387edc31a2d9471
Sha256: f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
                                        
                                            GET /styles/default-new-reg/images/newlogo.png HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: image/png
content-length: 19068
last-modified: Mon, 26 Sep 2016 09:33:17 GMT
etag: "57e8eb5d-4a7c"
expires: Mon, 23 May 2022 14:38:08 GMT
cache-control: max-age=5356800
x-cache-status-a: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: REVALIDATED
accept-ranges: bytes
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7loFFx1zPuYJ6g4ADm6TcfHtNEFeLQ8f2Y3NY6GABo92sNqscd4Js1MNOgAgcHTkiSKCKktBI%2Bk2R69XMbdsZzEeOKtLscOm%2FUYwHQ0t%2F5AMvZQyPV%2FZwiA8Omv2OHE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89ccabb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 71 x 43, 8-bit/color RGBA, non-interlaced\012- data
Size:   19068
Md5:    d68c79880117110f89d39cce5c43d39c
Sha1:   6e30dcd905314f77912b224e35ce089560553300
Sha256: 1605b05d92b623c44661321917bca32d530ae52b3158319ce922dacd4c6f257d
                                        
                                            GET /styles/default-new-reg/images/zl.png HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: HotCores
Date: Wed, 22 Jun 2022 15:22:59 GMT
Content-Length: 673
Last-Modified: Mon, 26 Sep 2016 09:33:17 GMT
ETag: "57e8eb5d-2a1"
Expires: Wed, 29 Jun 2022 15:22:59 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced\012- data
Size:   673
Md5:    5caf58a4705aa53b41535b86b18819a1
Sha1:   d38040f84c6dcc16c40519bf0249ea8097b8e969
Sha256: 20fac0020c1ca2b53c6132997d0b5ec25252b30ceedaf59b05679c73c0494e7c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4032
Cache-Control: max-age=111400
Date: Wed, 22 Jun 2022 15:22:59 GMT
Etag: "62b2343b-1d7"
Expires: Thu, 23 Jun 2022 22:19:39 GMT
Last-Modified: Tue, 21 Jun 2022 21:12:27 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /styles/default-new-reg/js/the220px.js?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=5356800
cf-bgj: minify
cf-polished: origSize=562
etag: W/"57e8eb5d-232"
expires: Mon, 23 May 2022 14:38:08 GMT
last-modified: Mon, 26 Sep 2016 09:33:17 GMT
vary: Accept-Encoding
x-cache-status-a: HIT
cf-cache-status: HIT
age: 228934
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=34WucvU89ohmfxsnmLbiFw3VGG%2FhfwThHxOmYVLhA6b7pUBTMyt81FoDGHBiRQ96F5K%2F8FhYzUJbD95h5gkGO100UqvoQN5xT6JwgOyIsi2p62KD1sqjdhELnSKWnvc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89cca7b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (474), with no line terminators
Size:   632
Md5:    eae6dba13b21a2ab7bd10dd27b40f6a0
Sha1:   3869be069942f210388205a575f7615bcaf877fe
Sha256: 4ac2de1fa64abe28c4b17a4b438e0eab23c6d4dc27a32ad0bb74dfb7e3c95365
                                        
                                            GET /styles/default-new-reg/css/font-awesome.min.css?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: text/css
last-modified: Tue, 31 Dec 2019 20:10:12 GMT
etag: W/"5e0bab24-578f"
expires: Mon, 23 May 2022 14:38:08 GMT
cache-control: max-age=5356800
x-cache-status-a: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 228934
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X%2Fxr82W3PSrjAjO8VVLqYyW5XXQh9LP3w3pBK3kfpFHfgoos%2Bfj4C64l%2BtHrQjeyOmankbnw1JLN4Iug7EoUaRoEyLgTI6WD8E%2BHkvHbp7aEXSdoD9AWWHBZZFsdX0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89ccadb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (21997)
Size:   5389
Md5:    ef9c30df52bacb986858cb1da1fb83c8
Sha1:   41e7cd61bee2ace5a676cd18ce60cf2f9e7e04e1
Sha256: ccc05ef4eed08153a50de95393db7b4ad2c457b137e4e755bbf3c49204a5f39b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /styles/default-new-reg/css/reset.css?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=5356800
cf-bgj: minify
cf-polished: origSize=1013
etag: W/"57e8eb5d-3f5"
expires: Mon, 23 May 2022 14:38:08 GMT
last-modified: Mon, 26 Sep 2016 09:33:17 GMT
vary: Accept-Encoding
x-cache-status-a: HIT
cf-cache-status: HIT
age: 117629
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FO2UqzvcceM%2FtXb76vc3TbcNN1zwLoQta5YRri2voX64Ik1SfijkruPAnxUSOmCuxRNi6Yz661kmXZ9AabKK%2Flr3xyUAqq2xRRq95WuZzhDyfoFMLc%2B3f4x4%2B2K%2FbCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89ccbab50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (675), with no line terminators
Size:   661
Md5:    1e7ec23a8fb91d21337b03109e00c52a
Sha1:   271d9eac9dbccfdd95cbd3c507eefc7774a065b1
Sha256: f38f8970749ac134cb5ba6835d9ff8ebde04f8c5d220f1b7c92c4f509f825002

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 436
Cache-Control: 'max-age=158059'
Date: Wed, 22 Jun 2022 15:22:59 GMT
Last-Modified: Wed, 22 Jun 2022 15:15:43 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /images/twitter.png HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: HotCores
Date: Wed, 22 Jun 2022 15:22:59 GMT
Content-Length: 385
Last-Modified: Mon, 26 Sep 2016 09:33:17 GMT
ETag: "57e8eb5d-181"
Expires: Wed, 29 Jun 2022 15:22:59 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   385
Md5:    cea04ecdecaebee1062f70f6c0377e9b
Sha1:   d8fc45f070c93f100423bb5e724c2394e0664d29
Sha256: 09661cea5a7ed3c20f10820b3b9c151a7415770d805172e0b76a09944d882680
                                        
                                            GET /images/facebook.png HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: HotCores
Date: Wed, 22 Jun 2022 15:22:59 GMT
Content-Length: 149
Last-Modified: Mon, 26 Sep 2016 09:33:16 GMT
ETag: "57e8eb5c-95"
Expires: Wed, 29 Jun 2022 15:22:59 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   149
Md5:    db3bdb7f62b49e285e9832638c69f900
Sha1:   de920205859fc86ee6f4f1f9094e5d18cb79a21c
Sha256: 2f14fca8d4650c0b03925d0fffbe73b1fe1ca4f2ad19768cd8ec9eed935c3734
                                        
                                            GET /styles/default-new-reg/css/bootstrap.rtl.min.css?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: text/css
last-modified: Mon, 26 Sep 2016 09:33:17 GMT
etag: W/"57e8eb5d-1bae7"
expires: Mon, 23 May 2022 14:38:08 GMT
cache-control: max-age=5356800
x-cache-status-a: HIT
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: HIT
age: 117629
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=70Z95bNVAcEFlHZzzd92A9Safrlvd8nfjNVXFFg%2BDhzKbQBHl%2Ft1iSysJilt0YiGYbLv5h0gy5EFATrS3%2FOnJKj10Zze4lZWGYtXjs1J6LUSCTEohmfxJIQs8fYY8HQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89ccaeb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (65368)
Size:   20126
Md5:    478451d6ccb1d74afb3ee56cd5e4e1ab
Sha1:   86cd9e64e795bd301a7e061c31fdaec5f6b36196
Sha256: 92a3ada950013a316f8f9ec8d7f1f7c3776b5553f5d4e1650c7b6a498c22979f

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /styles/default-new-reg/javascript.js?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: max-age=5356800
cf-bgj: minify
cf-polished: origSize=16039
etag: W/"57e8eb5d-3ea7"
expires: Mon, 23 May 2022 14:38:08 GMT
last-modified: Mon, 26 Sep 2016 09:33:17 GMT
vary: Accept-Encoding
x-cache-status-a: HIT
cf-cache-status: HIT
age: 496398
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c36E7g1qbJuyJTYasYAZvi3E3xVPqEiP2PE%2BHDKR7kmR9vUxalNIGnCaUZcYU9K5smDv7%2BLSEsCT3NbCOW6chBRixkl0sM%2FE%2BlCHFt9Tm%2F8EKomLO8keijMg0ord8eE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89cca9b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (538)
Size:   67418
Md5:    8ff2468ce166cdca0a16fee35c96ddf1
Sha1:   8f1cc37c6e4d0a18767892d9ae887cbd6ce5548a
Sha256: 788d84f14b50ea49378f633b0087fc9d6c85ca2f8580ce08efdbbfac2431f3d5

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /styles/default-new-reg/css/the220px.css?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
TE: trailers

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=5356800
cf-bgj: minify
cf-polished: origSize=11662
etag: W/"58cb25b5-2d8e"
expires: Mon, 23 May 2022 14:38:08 GMT
last-modified: Thu, 16 Mar 2017 23:54:29 GMT
vary: Accept-Encoding
x-cache-status-a: HIT
cf-cache-status: HIT
age: 479222
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FNIXcjcbleaI1cyBwu5U6%2B%2B0MDx6BFIKZnU6nPCi3xrqUHtqWseURkMa175SWvhnDuUIZFsm7D1rk2L%2F9MFhhStB863yXOzOklyfXL2q6heYdwpl0GUbnhPy2BzUopw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89cca2b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (9567), with no line terminators
Size:   3057
Md5:    0555689fe4a34b51253b5d91228e0da5
Sha1:   8d863698fa96b7fb89bd8d6cd53113ab6a3287fa
Sha256: 1ad0ee51f17eb7389c07c9e970fa31362f3f1c2489102089c611aaacbc062a9a

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /styles/default-new-reg/css/fonts.css?rev=47 HTTP/1.1 
Host: s.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Cookie: _ga=GA1.2.1841955378.1654357939; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site

                                         
                                         104.21.5.137
HTTP/2 200 OK
                                        
date: Wed, 22 Jun 2022 15:22:59 GMT
content-type: text/css
access-control-allow-origin: *
cache-control: max-age=5356800
cf-bgj: minify
cf-polished: origSize=487
etag: W/"5e0bab24-1e7"
expires: Mon, 23 May 2022 14:38:08 GMT
last-modified: Tue, 31 Dec 2019 20:10:12 GMT
vary: Accept-Encoding
x-cache-status-a: HIT
cf-cache-status: HIT
age: 117629
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ix1PJQZMdzzyaHDhHNc9GOxYIhpXYfSGoUKGF8GihGQMVRn1jfU%2FxeH6W%2BNy5Me2qFmP9GFerRyhCXfnqWlSR2ugrrgTr%2FwEXaImkULFFer4syRLXsnHphXaYOsQRGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 71f5fb89ccbbb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 (with BOM) text, with very long lines (408), with no line terminators
Size:   956
Md5:    244e2a639fbe9d40d0982fdf9a6005ce
Sha1:   99ec698e23efe97382c55487a4b603022d445edf
Sha256: ea141afdaabda2d0e44bc3385aafb14f82fe3addabe58be96cd6304965bd60bc

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /images/technorati.png HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: HotCores
Date: Wed, 22 Jun 2022 15:22:59 GMT
Content-Length: 283
Last-Modified: Mon, 26 Sep 2016 09:33:16 GMT
ETag: "57e8eb5c-11b"
Expires: Wed, 29 Jun 2022 15:22:59 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   283
Md5:    f120938135c52cd80b7f37bd5b17daf4
Sha1:   1cb99566ca564dd8a8273a616d072739c58b4290
Sha256: 6cd07b1a71bf03f25556bc801c306419a255ec5b47751fcdcda5efbdb08766c8
                                        
                                            GET /images/sphinn.png HTTP/1.1 
Host: top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/downloadf-1604otvxp1-rar.html
Cookie: _ga=GA1.2.1841955378.1654357939; sid=ZFE2vpFMt5gC1l9nNI2b7M3zuc4; klj_40d147_fdkey=ef0530ee6a923f25e3096e092390131b925f8b25
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                         
                                         188.165.137.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: HotCores
Date: Wed, 22 Jun 2022 15:22:59 GMT
Content-Length: 308
Last-Modified: Mon, 26 Sep 2016 09:33:17 GMT
ETag: "57e8eb5d-134"
Expires: Wed, 29 Jun 2022 15:22:59 GMT
Cache-Control: max-age=604800
Access-Control-Allow-Origin: *
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   308
Md5:    95aa9375cbb4bedb87f719c412297b73
Sha1:   0819cdf8762d0d0a8e7187e6838bc8fbc9de51be
Sha256: 5db0d66ddbaf1f37bf7df750e5a86621f5963d836200b6bc9befc140d67f346d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 22 Jun 2022 15:22:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         142.250.74.174
HTTP/2 200 OK
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Wed, 22 Jun 2022 14:41:13 GMT
expires: Wed, 22 Jun 2022 16:41:13 GMT
cache-control: public, max-age=7200
age: 2506
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20006
Md5:    56f5d7f608e25d64207135f045f988cb
Sha1:   901eb59372ae330ae85e1384da93479b21ae1082
Sha256: 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 22 Jun 2022 15:23:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KmgGc5uzJLE/LvZiIVOaeA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.187.39.106
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: fr//CX/4my1wQ7iJJAFiNJak8uk=

                                        
                                            GET /plugins/like.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df2829cbf1cd6e08%26domain%3Dtop4top.io%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Ftop4top.io%252Ff378a4e2d7ed31a%26relation%3Dparent.parent&container_width=0&href=https%3A%2F%2Ftop4top.io%2Fdownloadf-1604otvxp1-rar.html&layout=button_count&locale=en_US&sdk=joey&width=90 HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://top4top.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                         
                                         157.240.200.35
HTTP/2 200 OK
                                        
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d-test.facebook.com/ wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d-test.facebook.com/ wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: kIXyF+YbjgvJVgTn2uUCVT031IU4xyW0ypnPs6pxiRkYmU+ejZ3HqVt4EsU6+ky+b8eyAIaeSaPm3zCceuwwKg==
content-length: 0
date: Wed, 22 Jun 2022 15:23:00 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4875
Expires: Wed, 22 Jun 2022 16:44:16 GMT
Date: Wed, 22 Jun 2022 15:23:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4875
Expires: Wed, 22 Jun 2022 16:44:16 GMT
Date: Wed, 22 Jun 2022 15:23:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4875
Expires: Wed, 22 Jun 2022 16:44:16 GMT
Date: Wed, 22 Jun 2022 15:23:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4875
Expires: Wed, 22 Jun 2022 16:44:16 GMT
Date: Wed, 22 Jun 2022 15:23:01 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1394332035FF30FC505CCB0EB81DD131660600CACDD2559D109B725075B69669"
Last-Modified: Tue, 21 Jun 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4875
Expires: Wed, 22 Jun 2022 16:44:16 GMT
Date: Wed, 22 Jun 2022 15:23:01 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5f9cc6e-f4e5-46de-9a9b-995f5318a34b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 11348
x-amzn-requestid: fcbf79fc-b455-478c-aded-8c2d78832d22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UGPV6FUCoAMF_aw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b25f58-6348d1e47b6d75c63806df02;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 00:16:24 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pUq3AZuLpUU9TnC51pKjVCbDmk8SIffrsBDqbc9FfEWQVr2Pth0bRw==
via: 1.1 7f06047c304d80ea094816a27c933914.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 00:37:40 GMT
age: 53121
etag: "a5c407eda54f2227af33402f2a5849607bc89cd2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11348
Md5:    597be1695e3f4eb29c402f9cf128d35b
Sha1:   a5c407eda54f2227af33402f2a5849607bc89cd2
Sha256: bc9d30809c9847e8237de2e68b4226433c93583bdb3aebda05b134ad4a4f1b1c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9d8e86cf-e66a-4358-813c-3f6069f7b20c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8220
x-amzn-requestid: 617272a3-c32b-4cac-993c-715e8e8cb929
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UGOhdE-IIAMFZnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b25e09-7fbefe0708da9a72384c19d6;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 00:10:49 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Ndjk2sNJtIXCOi_G3C3mGw1x5hv5ycxpwx40jnVCAa0ssn42LPs9cg==
via: 1.1 bd6f70221217681265382902c6157c76.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 00:39:24 GMT
age: 53017
etag: "5323f8c12bd5da81ce07788cf02ee097def3f900"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8220
Md5:    48931840ffa0a845a7b81dce33ffaa1c
Sha1:   5323f8c12bd5da81ce07788cf02ee097def3f900
Sha256: e6a7d95740d15c062cb7c56d85b15ed5e57cb6649ff03363ca7dcc359ebbdb53
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0e4cee16-0def-4a04-89ce-28368d3c7aff.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10817
x-amzn-requestid: 420f8fd1-2abd-4502-9f49-3af6c6776a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UGNjgFe9IAMFqKg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b25c7c-6fdf2bf711003b4540c0789e;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 00:04:12 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YUQHRfofJ3hYZaSpIoRgF9PdMj0m5HqfMTXQJZruqvyd2XbnBA3QKg==
via: 1.1 1352c0a623ff0601dd16439f3f225f70.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 00:31:27 GMT
age: 53494
etag: "dd780cc82345ebca7413e10fa33158c935787c1e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10817
Md5:    d9bb0ee64a394cf737009f704c0dafd5
Sha1:   dd780cc82345ebca7413e10fa33158c935787c1e
Sha256: 64db0ca087450a3d6985cc57def91edb9265c0394bad3b175bc39928b55e2f6b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01c04346-905f-4658-9bb7-bd48f21d6db6.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 5620
x-amzn-requestid: 91d872c2-2490-414f-8102-84e64c1c131c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UGNjeGpfoAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b25c7c-74eb579b5f627ccc0b510311;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 00:04:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RgC1-l8Y4meQOtuaWUPA3x0QArKlevHIWByObzrl3J3NbGR8R2qcCQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 00:25:47 GMT
age: 53834
etag: "5d89612219a31a5aa62f45d53de992bbc1f13dc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5620
Md5:    0e9280567705803171502fbb4071f8f9
Sha1:   5d89612219a31a5aa62f45d53de992bbc1f13dc9
Sha256: d8a752d834b7f34906e945d0c5582616367d3993ed76004ac97d0997f84f1a15
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa872945d-01f4-46ee-926d-640743c17a48.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8514
x-amzn-requestid: a07db189-b523-41bd-9035-846278e57635
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: UGNjeGF7oAMFngQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62b25c7c-3ec53e39325a32da38c9d3e4;Sampled=0
x-amzn-remapped-date: Wed, 22 Jun 2022 00:04:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: HjruExV-9J225eyuTq8zzD2_c6kRdxFCYYfsqLSpFIThWqMcoSdenQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 cd64decb1403270c914848213601a674.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 00:25:13 GMT
age: 53868
etag: "fa94200ab4ef83b8a57f16c5c11c9eaf5f8c4a5b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8514
Md5:    e249a5ba556b2c067e3cd7fa2d666ff6
Sha1:   fa94200ab4ef83b8a57f16c5c11c9eaf5f8c4a5b
Sha256: ec21ef1d5fc4fe22f1484fc28624c2a328952264351f1c35d7b5e7b02c73d9b8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F35047430-55a7-4bc0-8f13-3c1a0222fb17.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 5460
x-amzn-requestid: c3127dcb-8f17-4906-95f0-9dad693eeaee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: T8VMpF2woAMFa-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ae68b7-5b99e987073cb76b42f246ae;Sampled=0
x-amzn-remapped-date: Sun, 19 Jun 2022 00:07:19 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: X-LOI4JINANLeMNdnFQxxRsOdoEbW9L5Es90j4PAvu2LRnnHZGPCag==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Jun 2022 01:32:56 GMT
age: 49805
etag: "486af4712134398a87e28eb15542e6ec7a6b58f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5460
Md5:    9a0845d2cc570a323170a9984c7ec7d3
Sha1:   486af4712134398a87e28eb15542e6ec7a6b58f5
Sha256: 53f57f6f3c97389a6796809ba8cef1dadfec0b593787df97ef2ed51f10188a82