Report - bfqushops.top/

Report Overview

Submitted URL
bfqushops.top/
IP
104.21.16.9
ASN
#13335 CLOUDFLARENET
Submitted
2023-01-30 04:31:56
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2.7 kB	7.1 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191
www.googletagmanager.com	75	2013-05-22T04:07:37Z	2023-03-13T08:28:24Z	382 B	45 kB	142.250.74.168
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	57 kB	34.120.237.76
stats.g.doubleclick.net	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	600 B	588 B	173.194.221.155
bfqushops.top	unknown	2022-09-27T08:49:34Z	2023-01-26T18:45:46Z	8.9 kB	1.2 MB	104.21.16.9
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
ocsp.pki.goog	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	1.4 kB	2.8 kB	142.250.74.163
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	52.39.191.93
www.google-analytics.com	40	2012-10-03T03:04:21Z	2023-03-13T07:36:03Z	369 B	21 kB	142.250.74.46

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-01-30 04:31:56	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-01-30 04:31:56	medium	Client IP	104.21.16.9	ET INFO HTTP Request to a *.top domain

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (11)

	URL	Size	First Seen	Last Seen
	bfqushops.top/	155 B	2023-03-12	2023-11-18
Pretty URL bfqushops.top/ IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:11:12 Last Seen2023-11-18 19:18:35 Times Seen3 Hash 04ae91bae124cc65556e95594b22fabf fa7da0046566adbdcf09a57bf787563dbca1db61 07b0ad29c5e7a013bdf4567e8897de253454a20011d4c3b64e43f22304cc1bc4 Loading...

	bfqushops.top/static/261/jquery-1.9.1.min.js	93 kB	2023-03-07	2024-05-04
Pretty URL bfqushops.top/static/261/jquery-1.9.1.min.js IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:27:17 Last Seen2024-05-04 08:22:54 Times Seen145 Hash 4d5b45ca4d8fe15b209f840fc9303364 5224f32cbd6f10bd79121a005a588b57b06ec9b0 5b430be7474d67af29a2b036fe83c807d997737dce3c116eb2f76323b7f1794f Loading...

	bfqushops.top/	433 B	2023-03-12	2023-03-14
Pretty URL bfqushops.top/ IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:11:12 Last Seen2023-03-14 03:51:37 Times Seen1 Hash c5c5b5252d43146a796c92cf741fa25c 8e5ec06bced55b6d038eadbe98e6038fcebb5e57 4e0bc23df8d5b2ee73c5af9932124576da6bdc82510b746184feae7e7630747c Loading...

	bfqushops.top/	95 B	2023-03-12	2023-11-18
Pretty URL bfqushops.top/ IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:11:12 Last Seen2023-11-18 19:18:35 Times Seen3 Hash 34f8cb0f76eacfd867865e9355b0f3ed b44554e69bf4741726f4521a55035a734e9b1daa f6d82b8fc1f97837c4dd8cc0aceac2b0795d1bb4f2e8f3eed9a5274b05e98609 Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-12	2024-04-15
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.46 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 21:46:21 Last Seen2024-04-15 18:54:35 Times Seen35101 Hash 54e51056211dda674100cc5b323a58ad 26dc5034cb6c7f3bbe061edd37c7fc6006cb835b 5971b095cff574a66d35ada016d4c077c86e2dea62e9c0f14cf7c94b258619de Loading...

	unknown	0 B	2023-03-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-07 10:57:11 Times Seen37400258 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	bfqushops.top/static/js/app.js	473 B	2023-03-12	2023-11-25
Pretty URL bfqushops.top/static/js/app.js IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:11:12 Last Seen2023-11-25 16:57:45 Times Seen5 Hash 4e19166a87e5835002eb325fd456e6bb d599b45365f56c60be8ec57c5bcf418d1a2b4ac8 9ac41f54d42f843deda84aece0ae368f96b60f424b0b623925f40fa2c222a5eb Loading...

	bfqushops.top/static/261/canvi.js	13 kB	2023-03-12	2023-11-25
Pretty URL bfqushops.top/static/261/canvi.js IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:11:12 Last Seen2023-11-25 16:57:45 Times Seen7 Hash 2c339dcafaf86805e167e9c75e62070f d3869d89e6fb3ca1743fd906d9ef584e70c2e684 4aa06907625055d1b8971c7f683fee317baa70c3f97dba63baf0d975008e87ab Loading...

	bfqushops.top/static/js/amazeui.min.js	211 kB	2023-03-07	2024-02-20
Pretty URL bfqushops.top/static/js/amazeui.min.js IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:52:29 Last Seen2024-02-20 20:03:22 Times Seen50 Hash 5b6b88d2a62643845fa1138b8b503e33 71385098a49a6af2ce067e8d285ef2cbedb4de4f 791c29dee0bfabddeef72c6d85429a1e28d8e5ad33366e68a8f714e507e9bfed Loading...

	bfqushops.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	1.2 kB	2023-03-07	2024-05-07
Pretty URL bfqushops.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:00 Last Seen2024-05-07 10:19:33 Times Seen56136 Hash 9e8f56e8e1806253ba01a95cfc3d392c a8af90d7482e1e99d03de6bf88fed2315c5dd728 2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8 Loading...

	bfqushops.top/	479 B	2023-03-12	2023-11-25
Pretty URL bfqushops.top/ IP 104.21.16.9 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 06:11:12 Last Seen2023-11-25 16:57:45 Times Seen4 Hash d1b7109a98d1d1420375a27bfb8fc182 2f7c2062fcdb2c884a5770ff774ed1596ae8df53 17fed73f9a4fd62ca53572c08ef51cab758978875401ba221768ed5c605bd17c Loading...

HTTP Transactions (54)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5404
Expires: Mon, 30 Jan 2023 06:01:50 GMT
Date: Mon, 30 Jan 2023 04:31:46 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
81dd5c5cc5b3278876cb44dcb520a60f
c0511a59e9eccdcdda98717b87c89c5d59974808
41736c303afdb3d31e48724b107dcb22883cae02f3562308eb52d9164001a2de

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41736C303AFDB3D31E48724B107DCB22883CAE02F3562308EB52D9164001A2DE"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10849
Expires: Mon, 30 Jan 2023 07:32:35 GMT
Date: Mon, 30 Jan 2023 04:31:46 GMT
Connection: keep-alive

bfqushops.top/

104.21.16.9

200 OK

4.9 kB

URL HTTP/1.1
bfqushops.top/
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Size
4.9 kB (4939 bytes)
Hash
970d503f6579f7ad7b5ad2372df6cfb8
3f735214fbb2d6d79cfeecdfdae020d06b2c95fa
140896969c1b3b4676c5e57488f6ed6ffa694c04310b200ce056afb594dbfdd6

Detections

NIDS	Severity	Alert
suricata	medium	ET INFO HTTP Request to a *.top domain

HTTP Headers

GET / HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F7m1dSdXsXsrB45rH6IQkUx3jEHV7d%2B67W%2Fm8o7gdFiv%2BpBSWUypqZM%2BsY9QD5OovbHNJ2S8dHGvYj9YL9CIG8Rx2M7TDO%2B6OjCzwylM%2FQ6n63Ke3a33k2a3U%2BT5YRiC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79177ad74b85b511-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 30 Jan 2023 03:43:11 GMT
content-type: application/json
age: 2915
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2904
Expires: Mon, 30 Jan 2023 05:20:10 GMT
Date: Mon, 30 Jan 2023 04:31:46 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: pJJ2CbVxsfMkbVKz4C1pI/lR1VtGFrsXkEcsweziTqZMBxhjfkpJom8983eWggyRMBJi9xqfaSk=
x-amz-request-id: MTTA8XA0ED0HABS4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 30 Jan 2023 04:21:39 GMT
age: 607
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Mon, 30 Jan 2023 04:31:46 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 04:31:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=UA-112495133-1

142.250.74.168

200 OK

44 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=UA-112495133-1
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1759)
Size
44 kB (44046 bytes)
Hash
206e44e55ba74551a8ac42f0636f3b4d
5457a753eea66ca00a2db3ca3a6473631a712bed
0858bc16af93a69200cbbade9d1e41d7bdafb95d600ca2a93ebb5ae1de8b3ae0

HTTP Headers

GET /gtag/js?id=UA-112495133-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bfqushops.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 30 Jan 2023 04:31:46 GMT
expires: Mon, 30 Jan 2023 04:31:46 GMT
cache-control: private, max-age=900
last-modified: Mon, 30 Jan 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44046
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
ba2ca6af7b23ce2e11aa4f9d86e66269
212aef55d64b6add292dcf6241b16e7c93d1bae2
f163a94d190f5aeeb05b2e344bc8e1544d9701772b08585e9c92b529c8652b3d

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 04:31:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bfqushops.top/static/261/normalize.css

104.21.16.9

200 OK

2.3 kB

URL HTTP/1.1
bfqushops.top/static/261/normalize.css
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (5719)
Size
2.3 kB (2284 bytes)
Hash
473f0fa5e836302880eafe3d2077b568
53ff545d68e47e8ad0e85501083a1f95d7cf9e8a
d39f79b81a3e89e0261cbc7cdb03d289bb04429080b6dfabbe022790541674e8

HTTP Headers

GET /static/261/normalize.css HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 10 Oct 2019 08:31:57 GMT
ETag: W/"5d9eec7d-1ef6"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ckkh2PA7NTuJ3duIswN7y%2F%2Bx5%2FTY1Zj8z3TUfv9N4yFZTuLpMHRbXzquPPHBQmMNndqeX44IumX%2FhnK%2BVC3o4vfmoEeFVsz5h8yP2EbTZMEwuIr5ulJylYnvGb9yXiCq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ada5cd1b511-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/js/app.js

104.21.16.9

200 OK

297 B

URL HTTP/1.1
bfqushops.top/static/js/app.js
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text
Size
297 B (297 bytes)
Hash
220aff8ed96242a0448528ccdaf4b03a
f31a558294ef8771e30b66a948922aea4272715c
c0eb228c89e050670b14a15a32026d7466aee23db89b9972caf8e136554cc495

HTTP Headers

GET /static/js/app.js HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: W/"5d9bffd0-1d9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tEja2RruOVsK%2BbsSNGwwN3Bj43skNwCGzSz9Rs%2Fs7XKWhHJGKIGZVtrZh1st0nsJW9ou420MSMRObpQj8ZMQ07RznkKvS8osmbYO%2Ff0hE9bZHLcBrQ4LL5JSpkUwTP%2B9"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ada6eec0b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

bfqushops.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js

104.21.16.9

200 OK

655 B

URL HTTP/1.1
bfqushops.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, ASCII text, with very long lines (1238)
Size
655 B (655 bytes)
Hash
bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f

HTTP Headers

GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 23 Jan 2023 11:05:52 GMT
ETag: W/"63ce6a10-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BHnvvk2%2BExlkJ0pqqvfd3IghtVS%2BnoU4qk6zX%2BSa6Wme202geUB2kY6vqXx7LFgUBuKxFOXWGCnb5J16UGWPje%2FE7pr6mYeUY1VL9Glcn%2FF4%2Fx08W%2Bbtt82o3zuxO8V5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adb9f2c0b06-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Wed, 01 Feb 2023 04:31:46 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip

bfqushops.top/static/css/mescroll.min.css

104.21.16.9

200 OK

1.4 kB

URL HTTP/1.1
bfqushops.top/static/css/mescroll.min.css
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.4 kB (1405 bytes)
Hash
4581e30d2bc48b5d4655fd246a4fa939
367bbbb9ad11e94df6de78ed7ac0a18f95d6ff25
3f30c2566f73ed2bfbd158276270d3ac9c6b7b29280bec4820ed7d9f04ea7cd3

HTTP Headers

GET /static/css/mescroll.min.css HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: W/"5d9bffd0-1078"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OcYorazz82gvz5ZxXXpWNXv7WxEuK4HoBBLpMteGGO649MleuoTkQQsrbzW%2BD4L5%2Fiub6%2FV%2BmeSNWrL1S5qYJ97KFEYfNIWpcNQCuWSAqUuvJq5DDL2idE7exVtgFPWo"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ada6918b4f7-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/css/app.css

104.21.16.9

200 OK

1.4 kB

URL HTTP/1.1
bfqushops.top/static/css/app.css
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
1.4 kB (1417 bytes)
Hash
59af404abe0010ca34f9687cdb8f07d5
daf669b4b47db45c320b1c17916b2b3dbe06bec5
78f5988443c34d15fc0431d70ccbe70edc7a128d440bc1eb0d021b9c4ba35c5c

HTTP Headers

GET /static/css/app.css HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: W/"5d9bffd0-10d8"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tgWTmzkEwUPye6BJJCmcVtqCqHAd%2BPx3u%2FkkNXjkIc5gNGIhyNDABaKY0V%2Bzpvo4qT5tCgRNevfNxmlgw6gedhDgrnu9pU2zEjopsxGYlt23n0ePjagMtiBFQt2h3EF%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ada69dab4f1-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/261/jquery-1.9.1.min.js

104.21.16.9

200 OK

36 kB

URL HTTP/1.1
bfqushops.top/static/261/jquery-1.9.1.min.js
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32089), with CRLF line terminators
Size
36 kB (35851 bytes)
Hash
62153c6e4c6c6b83180ec44009ef7c13
3826878ea4869ad81e7e20c140f91d78d26c7404
192714a5635f76a5889eb9516c6b0ca2fc8aaf382732f1bd9e1660745804c13d

HTTP Headers

GET /static/261/jquery-1.9.1.min.js HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 04 May 2018 09:40:29 GMT
ETag: W/"5aec2a8d-169b4"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hBFY4a%2FTgknUdSl9rovlGIZgBnTJRK%2BhKqOpmQyWlq8YmD0w0KZryjOBOenmgwaT0SHtV6DNw%2FCYPSeFERqF%2FGteJ4Cgu8zqoaNULLLqBJ3mbcMqC%2BqGTmJg8x53QeIA"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ada6db8b517-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/css/amazeui.css

104.21.16.9

200 OK

61 kB

URL HTTP/1.1
bfqushops.top/static/css/amazeui.css
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
HTML document, Unicode text, UTF-8 text, with very long lines (367)
Size
61 kB (61016 bytes)
Hash
a4b43c406c2d99267f0fd02752e4689a
d3a7ca7a6b0e0e0f60205134b0f2184b33141a40
ec04391d325a13418e055952654e54271de5ce39dc70340d5a543db63f29efb3

HTTP Headers

GET /static/css/amazeui.css HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: W/"5d9bffd0-510e6"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=goGBqMjVKuDxwAUvis%2F1g56XYLqjVGfcVf6glxw1WcQamkdobPGRANUjom%2FlGye5YOHlpdtjNZnMYJ2jngEA01xdJ6N9Y0sKUMRFbSMsQuP%2BLGlK0%2FDTVQNxKk8hI3Kj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ada6cd2b511-OSL
alt-svc: h2=":443"; ma=60

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 30 Jan 2023 03:41:41 GMT
age: 3005
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

bfqushops.top/static/261/canvi.js

104.21.16.9

200 OK

3.0 kB

URL HTTP/1.1
bfqushops.top/static/261/canvi.js
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
3.0 kB (2993 bytes)
Hash
0a1f709ff492e1a63fd0c6b8461683dc
90fe1ca3cded21cecac3c477fa0f164857c40197
13bd8ee7459ef6c0e9a707976f00938342d4c33584b10bf19b16a3c2de4b7254

HTTP Headers

GET /static/261/canvi.js HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: W/"5d9bffd0-343f"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3PYY97OPBx20WBwAzfMXug0pTrxEBDwwHH98eBt%2FUQ33uLqzUH3wkYGb5IWmRA32%2FZrCQTDkz1gI0FVauu75rAxTLRCxroabjwavrUuKEeAyMWTNdbS5zzoM77bj0d%2Bn"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adb9f2d0b06-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/media/3c60bf96-31d9-4e91-9e72-0c3b8c29a1f2.gif

104.21.16.9

200 OK

200 kB

URL HTTP/1.1
bfqushops.top/static/media/3c60bf96-31d9-4e91-9e72-0c3b8c29a1f2.gif
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
GIF image data, version 89a, 640 x 640\012- data
Size
200 kB (199584 bytes)
Hash
c40b8db9c872fc8c2b520696e16383d9
c7a962a28aee9a47940f3f08a3983a612f5c8159
dd14124b99b2db621654314306b45572f8aa45ddbed7fc8d130ae7104a095538

HTTP Headers

GET /static/media/3c60bf96-31d9-4e91-9e72-0c3b8c29a1f2.gif HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/gif
Content-Length: 199584
Connection: keep-alive
Last-Modified: Fri, 28 Oct 2022 03:52:39 GMT
ETag: "635b5207-30ba0"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=76b9BUDsMz1gjeFBcUlOi4OW%2F8XGzibXmxCKI8CZyltqfgv1NFfkxdExZd1WllWZSXbz8K50kzwDwooMARxLbhkRa3gsaTPDnxVrHs3DvChr4a6HnCDs0rhskP755P2m"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adc1a72b4f1-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/media/f0aaffaa-74c7-45a1-b3b8-136a884c8a14.png

104.21.16.9

200 OK

65 kB

URL HTTP/1.1
bfqushops.top/static/media/f0aaffaa-74c7-45a1-b3b8-136a884c8a14.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3\012- data
Size
65 kB (65278 bytes)
Hash
4e670080f3ec7196009e2021d8e928f6
cf6c6c3e986d295052279095d9453cddf483d3d0
7042f513a64b6148d699901fff1aae434dc7e36f6998904da12e70170e0d0d4a

HTTP Headers

GET /static/media/f0aaffaa-74c7-45a1-b3b8-136a884c8a14.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/png
Content-Length: 65278
Connection: keep-alive
Last-Modified: Wed, 01 Jul 2020 03:03:54 GMT
ETag: "5efbfd1a-fefe"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LeJ%2B65pj9AwNyg1RZAibkMAU4BQzbbYq1SxaLn8gLQGEQEItKvZsxf4U2iOykuNgBtqF6G2wRq7N2TKOSLTeW1cdb%2FqzMetNu%2FQn%2BYPGzX%2B7v1fhSHLzpPVLaXEWrRjB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adc19c5b4f7-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/js/amazeui.min.js

104.21.16.9

200 OK

66 kB

URL HTTP/1.1
bfqushops.top/static/js/amazeui.min.js
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32063)
Size
66 kB (66233 bytes)
Hash
714390f952312c08ea134a5384ba4989
e3d79ac48f464925b891f1fb6e40813eb9628062
3e28403990b8d3a43f18dadb074dec2dd3e1227efb18a0f2039e82d846a24614

HTTP Headers

GET /static/js/amazeui.min.js HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: W/"5d9bffd0-33817"
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QJtBaJpjj8oF3%2F3hxUyB4Rtobz07LZQ7YZAlPgElzrp%2BRwgz52igvPPQPu%2Fb%2BFWHVZalvqScdu9mVZQSyCXXkIVcqqLu4RK%2FUnJLb26j9nNp1GdB4%2FnD7FZcmau0lUig"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adb7d34b511-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/media/ca843c03-68dc-4216-a30d-154ca484cf76.jpg

104.21.16.9

200 OK

72 kB

URL HTTP/1.1
bfqushops.top/static/media/ca843c03-68dc-4216-a30d-154ca484cf76.jpg
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3\012- data
Size
72 kB (72370 bytes)
Hash
e933257d5f699d75757143945260cb80
093d7f009f5dcf75d2e95b8c665ea8c1105352af
6fed2c8529411f17f052765f3504943aee1172f6612b4528bfb2f8eaa1df73ff

HTTP Headers

GET /static/media/ca843c03-68dc-4216-a30d-154ca484cf76.jpg HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/jpeg
Content-Length: 72370
Connection: keep-alive
Last-Modified: Tue, 23 Aug 2022 15:23:01 GMT
ETag: "6304f0d5-11ab2"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YH4Wy59mBmS%2BsWO0M0i1hvKGpT4mzVxbZWt0QdTdMOBnHSL9KCTeNYxvCiYPNWFnbQsCoPGVxl9Q50IjgImSNkbvdgXpX01OMwawwsuU3YgHazlpG9bHSg5v1%2B%2Fich23"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adc1d6cb511-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8645
Expires: Mon, 30 Jan 2023 06:55:51 GMT
Date: Mon, 30 Jan 2023 04:31:46 GMT
Connection: keep-alive

bfqushops.top/static/icon/top.png

104.21.16.9

200 OK

2.6 kB

URL HTTP/1.1
bfqushops.top/static/icon/top.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size
2.6 kB (2596 bytes)
Hash
510f6ea0cbf1d46a8d72fdf36018db3a
bf26d7686176974bcd585470098e79bf6c2312c6
b8b7530a04a6e05c1a2f1485cef38155bbb13c0f9d7cab649de6a28c2ef571d9

HTTP Headers

GET /static/icon/top.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/png
Content-Length: 2596
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: "5d9bffd0-a24"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ejL%2BxT5EZ8PzjTQBv5ePKxkAalybNX2qm8zVOgACFbr%2FpDvKBXx8H7iwDy%2FF3n7xX4x65IGNFQmsmNuPkpUTGrIv3Eh01rEoBonhLY9rRkZIC5KdtminGqA8kizpX2DT"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177add7a50b4f7-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/images/buy-logo.png

104.21.16.9

200 OK

1.8 kB

URL HTTP/1.1
bfqushops.top/static/images/buy-logo.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 50 x 54, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1782 bytes)
Hash
55b6e03c9226c439f160ada0ef34ab2b
52ee784de2dbb480bf6e0a15457383ddf7429ca4
f72e9ff5474d89490ea3f4ca7a833cb9c16fb39cd8bdc7b421b5d199f1f20d70

HTTP Headers

GET /static/images/buy-logo.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/png
Content-Length: 1782
Connection: keep-alive
Last-Modified: Sat, 05 Jan 2019 02:35:08 GMT
ETag: "5c3017dc-6f6"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MNR6Quej5f6S4ufNt4gIpv07JKuwlgXi4dhU%2FhbUM3efBEtESfDFQGtAtcZdBL%2FfVH7hRM05IpUmEIdTB%2FXWJ0X4GBOqGYJdIR%2FO2NChMztes5iJ9cZQkPdzPI%2F9jZda"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177add6ae2b4f1-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/icon/home.png

104.21.16.9

200 OK

1.4 kB

URL HTTP/1.1
bfqushops.top/static/icon/home.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.4 kB (1441 bytes)
Hash
546a4239c728bf8dc82d784a2a0a466b
90b312dd40abee5382ac58ac27f851d7d7fd8dd7
e948ed504f4e3be7f0f063a293b8dbd394c28fb457fe9e32792d0c77c6b6a92b

HTTP Headers

GET /static/icon/home.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 1441
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: "5d9bffd0-5a1"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8iSa%2BZJxhRehjK%2BzGzQWp6LqD6Ap885ypr%2FGsjc83YHEazCgpOM5NBwT0OkyYTIEkgwCdOfZyJZ0DQDzG6cy6S8DaqiNyC2IAk1djenZvfOenUeJsBTH%2FcLebno0kbNp"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177add9e0eb511-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/media/a6bd31ca-b868-4083-bf12-0cedbda529a0.jpg

104.21.16.9

200 OK

251 kB

URL HTTP/1.1
bfqushops.top/static/media/a6bd31ca-b868-4083-bf12-0cedbda529a0.jpg
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x800, components 3\012- data
Size
251 kB (251435 bytes)
Hash
901ee2bd8eb098c22ac67c430cb5a5e2
d86702d16297d7d48c9462cc4c798d709a508b74
890356365164d9c92fe5184f20cf9ef52ff1a2b4661fab3f5427cc3277aa201a

HTTP Headers

GET /static/media/a6bd31ca-b868-4083-bf12-0cedbda529a0.jpg HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/jpeg
Content-Length: 251435
Connection: keep-alive
Last-Modified: Sat, 14 Dec 2019 06:25:36 GMT
ETag: "5df48060-3d62b"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H2jgrRkYDh9D3OPSbxWSIYSSA9BO%2FxD454C66lkuJpyPd2u3%2BegPaH6KRJa7tIEYtndY1rIKvZOB2IRLND2RrvJoCZ98OJYCZTRTztFqzWbkfh3fCQRZmY2JFSdAKTaz"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adc1e7bb517-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/media/8d7f5038-95a3-421f-9cf0-298194c73f26.png

104.21.16.9

200 OK

16 kB

URL HTTP/1.1
bfqushops.top/static/media/8d7f5038-95a3-421f-9cf0-298194c73f26.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
16 kB (15573 bytes)
Hash
654544ba8f6fc98a9eca1ed761992a02
a8d605f108238abd486a614338e6cebbb6ab56d4
2ac40625d783ee4fe52d7f64fc4832a00d3562984a17c3c2ff1436bf4c223310

HTTP Headers

GET /static/media/8d7f5038-95a3-421f-9cf0-298194c73f26.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 15573
Connection: keep-alive
Last-Modified: Sat, 14 Dec 2019 06:23:16 GMT
ETag: "5df47fd4-3cd5"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N82ongLJtZtISh3O1ghyuwTWYnWLDY0nyxK2XJBEaryBqYS8oi20uc3bPGjL5atf24N4glKZ8AsH8T5OBks7am%2FgU7e7em%2B%2BJGlxUfXPO4vfDXqFC9z1o6n2ff6i6F8b"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177addae13b511-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/media/44a275a8-d467-42c0-ba99-14dc20360450.jpg

104.21.16.9

200 OK

305 kB

URL HTTP/1.1
bfqushops.top/static/media/44a275a8-d467-42c0-ba99-14dc20360450.jpg
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=800, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=800], progressive, precision 8, 800x800, components 3\012- data
Size
305 kB (305101 bytes)
Hash
e02ce3fb914c18efe6f79c49e84cbd6a
b6abbde36991e25fdb47e29fbfccfa5f347c9079
e8ad557f3a5b6f25288661aa5b819bb85276d78132f41942741988126da7dd49

HTTP Headers

GET /static/media/44a275a8-d467-42c0-ba99-14dc20360450.jpg HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:46 GMT
Content-Type: image/jpeg
Content-Length: 305101
Connection: keep-alive
Last-Modified: Tue, 01 Sep 2020 07:10:46 GMT
ETag: "5f4df3f6-4a7cd"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BFUHJIfWs%2FL2tO9UXymsW0xemZAToS3GpScGUU%2BZ%2F%2BE7o1JSwLypZOudi3VmtC%2F7CjMPZHFVA24tFCVc8glTKeacFYLvPBFMQhPFPRBgn0Hcbr0PnAQk0NquI2pPfc8u"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adcff830b06-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/icon/aboutus.png

104.21.16.9

200 OK

1.6 kB

URL HTTP/1.1
bfqushops.top/static/icon/aboutus.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.6 kB (1551 bytes)
Hash
911b103b1ea2656dfeb0aa09e033c75d
4bcd6efce71cf1012d3cc2f689b005b5ad9b81b8
7a993261acb1fb3e971369b31fd04175d84c2abc2b56155c1d743ef99b12c820

HTTP Headers

GET /static/icon/aboutus.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 1551
Connection: keep-alive
Last-Modified: Thu, 10 Oct 2019 08:31:57 GMT
ETag: "5d9eec7d-60f"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DeXg4F3wCUfIdTBNaReR%2FsPR1CwMrmf8ZX%2F7wMOYfau4TiqXdX8egMAioozJcSuItEXAxYKobs0UQed05v3NOgGmqYFGvbkNqA3UPN%2FCiasVjAdhOjt6a%2FRKKFuqw0bJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adeab38b4f1-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/icon/email.png

104.21.16.9

200 OK

1.5 kB

URL HTTP/1.1
bfqushops.top/static/icon/email.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1465 bytes)
Hash
13ae0254f5e7491b3126c23f1ee859c7
baad02822f6289daaefb4b030ed47934013933e2
209f00143b43f8e7ff11dd2d34f454c4523c853de2853ff2ff3b3090922ac621

HTTP Headers

GET /static/icon/email.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 1465
Connection: keep-alive
Last-Modified: Thu, 10 Oct 2019 08:31:57 GMT
ETag: "5d9eec7d-5b9"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NUrsee6LNDgSptjPqav85X0BdqYTJN9LLjbfVFjueLN8AqWH7LYpMrzLdShMbO6yQhHiPoOhOUDDD6%2FWDc02pCaLOyl%2FQnqBnk%2F3ywz9Uowo240zULKwyjcp%2BTKLiXVm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adecea2b511-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/fonts/fontawesome-webfont.woff2?v=4.6.3

104.21.16.9

200 OK

72 kB

URL HTTP/1.1
bfqushops.top/static/fonts/fontawesome-webfont.woff2?v=4.6.3
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Size
72 kB (71896 bytes)
Hash
e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73

HTTP Headers

GET /static/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://bfqushops.top/static/css/amazeui.css

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: application/octet-stream
Content-Length: 71896
Connection: keep-alive
Last-Modified: Thu, 07 May 2020 23:11:49 GMT
ETag: "5eb495b5-118d8"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5viY9hOyrRaaAWj0f68h9K8Frq2xE%2FTtCHY66kSZdhN5bGhlL5u4qKjA%2FKgeRdQ4RensAo7PqFMm5spJMkKsxGZBCrIBOR0cSQ99BUSOtbk4YTPoVL%2BaokVjSFOheDLM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adeaac3b4f7-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/icon/menu.png

104.21.16.9

200 OK

2.1 kB

URL HTTP/1.1
bfqushops.top/static/icon/menu.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 225 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
2.1 kB (2145 bytes)
Hash
ab1b57f082c22119a31efa420aa7f1a6
dc773612011d658c63a257755a61e1b68a15e8e6
fc3ece278b18b537029277b404d5b1f1768b8ac827c85578ba1757e929af6e44

HTTP Headers

GET /static/icon/menu.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 2145
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: "5d9bffd0-861"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SupaGgpSlUkad2axbEzRRxeeWwTJFEIwFWGtFJ%2FbxW%2BXu%2BrLhK9kDD34qXAHG9FnMadZKvOblRpmKesOgEt3qA0lt0jWcKK7LNlsEztuyPgNQajRAioJ9YFA5HRRC8qu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adf1edcb511-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/icon/service.png

104.21.16.9

200 OK

1.1 kB

URL HTTP/1.1
bfqushops.top/static/icon/service.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.1 kB (1065 bytes)
Hash
c8688cf1c148b828f0e91cdf54944dae
90534cf9003a651bb3c92d6d9523c6c747229bd5
c7670813da6087afa3dad14e765d6055509ed866f3995238c2169c48be669ef5

HTTP Headers

GET /static/icon/service.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 1065
Connection: keep-alive
Last-Modified: Thu, 10 Oct 2019 08:31:57 GMT
ETag: "5d9eec7d-429"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OhsTIeFDnLdLo%2Bs6I0EizolVDfchjcOnTJXWrYKoyQtW9BShgNEDVte35jUSGp1oak61gSHkkU5TTZSCgW7NKWiUKsxvcnk24xzH2A7NqJ8jhwa1ChPAGSyOi87osX3t"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adf185ab517-OSL
alt-svc: h2=":443"; ma=60

bfqushops.top/static/icon/search.png

104.21.16.9

200 OK

6.0 kB

URL HTTP/1.1
bfqushops.top/static/icon/search.png
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size
6.0 kB (6041 bytes)
Hash
fec4ed6238218e79fc392b96c93bb68c
8ae9332231ceeb7ad31213f6e147a17f8d2158ea
c27cd5adcf325aa793afa363782f977d749db8d8491d989756c02642eda0991f

HTTP Headers

GET /static/icon/search.png HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/png
Content-Length: 6041
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 03:17:36 GMT
ETag: "5d9bffd0-1799"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=huXb%2BJcerGT5GWtqi%2FFqWf3qXHpf9kWPyhZjmL3JFv34FxBYYWIKBjpghlUI3Jrg0NjKmMaiyjK1PhP7LJTIYRi7hR0xLlev5ydu%2BxI51CM6j0ghV9z8UjEniWsM3w0k"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adf58020b06-OSL
alt-svc: h2=":443"; ma=60

push.services.mozilla.com/

52.39.191.93

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.39.191.93:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: igW2KdKil0QLeJMPNwgTFw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DKF9pPTLDapYzWR2MsMxv5+ZYas=

www.google-analytics.com/analytics.js

142.250.74.46

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.46:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1490)
Size
20 kB (20085 bytes)
Hash
ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://bfqushops.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Mon, 30 Jan 2023 03:45:20 GMT
expires: Mon, 30 Jan 2023 05:45:20 GMT
cache-control: public, max-age=7200
age: 2787
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bfqushops.top/static/zong/rexiao.jpeg

104.21.16.9

200 OK

6.1 kB

URL HTTP/1.1
bfqushops.top/static/zong/rexiao.jpeg
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1030x65, components 3\012- data
Size
6.1 kB (6111 bytes)
Hash
10981d42d9c762d9bf50464d52d75cc4
c00a157a1547163d5264e0767ed797b4da68fbb0
80e8d5b89f87c72da9385d78f4967f3feb8560f0a894453ddc0d80f8c7f59fa0

HTTP Headers

GET /static/zong/rexiao.jpeg HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/jpeg
Content-Length: 6111
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 06:01:16 GMT
ETag: "5d9c262c-17df"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bd6%2FzM9nNbFDc7ndMvA0tXPBOibiBaJHVGiuYAuNPqCV1ecKZrsqY3YpdlxdlIJUcXrA95zWbE0TPRxzLxUkmmi18OZbrIBwZx5xaO9OVAiVk6LUZXxlS25XjC3fk%2Bm%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177adfeba8b4f1-OSL
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 04:31:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-112495133-1&cid=1681836422.1675053118&jid=552197716&gjid=1694811986&_gid=785741935.1675053118&_u=YEBAAUAAAAAAACAAI~&z=1972864288

173.194.221.155

200 OK

1 B

URL HTTP/2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-112495133-1&cid=1681836422.1675053118&jid=552197716&gjid=1694811986&_gid=785741935.1675053118&_u=YEBAAUAAAAAAACAAI~&z=1972864288
IP
173.194.221.155:0
ASN
#15169 GOOGLE

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

HTTP Headers

POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-112495133-1&cid=1681836422.1675053118&jid=552197716&gjid=1694811986&_gid=785741935.1675053118&_u=YEBAAUAAAAAAACAAI~&z=1972864288 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://bfqushops.top
Connection: keep-alive
Referer: http://bfqushops.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: http://bfqushops.top
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 30 Jan 2023 04:31:47 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

bfqushops.top/favicon.ico

104.21.16.9

302 Found

0 B

URL HTTP/1.1
bfqushops.top/favicon.ico
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bfqushops.top/

HTTP/1.1 302 Found
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Location: /static/favicon.ico
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HILjYcQaGfvI%2B3w5zHi2%2Fw%2BIcNbGFDYU0bNS4H8v%2F%2F7Wm9apWpBcvT3tUicmPWFgrwDMtzkznAIhgitQu7AW6u76aGMQSenvPQvkNdwyt6QcHBmfOm420AnW3yjno4oN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ae128570b06-OSL
alt-svc: h2=":443"; ma=60

ocsp.pki.goog/gts1c3

142.250.74.163

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.163:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
e9eba61fbe87bc53d60d0fdd1ba6adb4
8dbb3dfacfaad4ce0fd3a355790cb9b245e01e07
9c0233792f873315e75ce5396d1a210f2df665db23ab858a0724f66bbb4528e7

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 30 Jan 2023 04:31:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

bfqushops.top/static/favicon.ico

104.21.16.9

200 OK

123 B

URL HTTP/1.1
bfqushops.top/static/favicon.ico
IP
104.21.16.9:0
ASN
#13335 CLOUDFLARENET

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
123 B (123 bytes)
Hash
20d7491599428fa93101a5257212cab4
db7c22651d7ad66048cc4f904d79b9daba05a773
6e81d8315a50551c1c81c7ce36dcce97bec386fa1686c261b7ac6fc616bed211

HTTP Headers

GET /static/favicon.ico HTTP/1.1
Host: bfqushops.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://bfqushops.top/
Connection: keep-alive
Cookie: _ga=GA1.2.1681836422.1675053118; _gid=GA1.2.785741935.1675053118; _gat_gtag_UA_112495133_1=1

HTTP/1.1 200 OK
Date: Mon, 30 Jan 2023 04:31:47 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 18 Sep 2017 15:27:56 GMT
ETag: W/"59bfe5fc-47e"
Cache-Control: max-age=14400
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=84gwaGBYM4o5SGgGcTwdhrDCBLYTb9OKDVn3o91JAl8UxRLAW0JNCaupD86M2gM9GT%2FLtoEcKLjediL%2FZP%2FEvoE%2Bd%2BOFboMJC5PlDqJNmASxTHhsuWOnscnr%2BHfHT7BX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79177ae298b90b06-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5150
Expires: Mon, 30 Jan 2023 05:57:38 GMT
Date: Mon, 30 Jan 2023 04:31:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5150
Expires: Mon, 30 Jan 2023 05:57:38 GMT
Date: Mon, 30 Jan 2023 04:31:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5150
Expires: Mon, 30 Jan 2023 05:57:38 GMT
Date: Mon, 30 Jan 2023 04:31:48 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f2a0c2c0f25bdd19baf87cbb3a87dcdb
bc78ca6206ee8cc1cc05ab7778df71c7e6d1182a
c57f26c0c2e439dc2f69181e1b2f6ae371bff9d299af739e0047eabc8bfb5a69

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C57F26C0C2E439DC2F69181E1B2F6AE371BFF9D299AF739E0047EABC8BFB5A69"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5150
Expires: Mon, 30 Jan 2023 05:57:38 GMT
Date: Mon, 30 Jan 2023 04:31:48 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff57d053c-9c4b-473c-bba7-21efecd434c5.jpeg

34.120.237.76

200 OK

5.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff57d053c-9c4b-473c-bba7-21efecd434c5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.3 kB (5298 bytes)
Hash
0b485aec4da73d34c0e9f038d397871d
aa98f1d472d9ac390270d49e7c1e0ed480760ee9
4add6befb6fd5b1ca37f68e3303e2ac14db1ac36b8c065f87e1f9f3ace5b4e23

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff57d053c-9c4b-473c-bba7-21efecd434c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5298
x-amzn-requestid: b58aa40f-ae16-45e3-93d1-9ed4711838e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkEsHdNoAMF3Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e6ea-0c22a0aa70c34bab594597fc;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:36:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5l02cxyNKYZgxK5JRuVPWaModkreUo39kBm51Ck6fm4svKtE75Q7qQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:04:23 GMT
age: 23245
etag: "aa98f1d472d9ac390270d49e7c1e0ed480760ee9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9a2197-1d4c-4aad-a76e-04d2a1f77b60.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12991 bytes)
Hash
c400859d7b0e7bf4d60b6b72da0d3b5a
edcc70016fce38a4ad14c3737712685ae1d282f2
45f69c6dcc83120058b731e39103cb1a2a40414eed2da633b43bdccc021665cd

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde9a2197-1d4c-4aad-a76e-04d2a1f77b60.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12991
x-amzn-requestid: a5b71869-0509-443a-ada0-2f7a7cfb8166
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj4AEncoAMF_LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e699-24b0a146699561100a8d592f;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pQQVkmOF6_GLV-2WHa9jleOYns0XIg1C5o6OBsq5NK90IhuUpJyfdw==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:30:54 GMT
age: 21654
etag: "edcc70016fce38a4ad14c3737712685ae1d282f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.9 kB (5934 bytes)
Hash
8fce79ef35b4c943c2b60d5092d17b6f
d29ce982633d0cc50b2a968ea22893d92b9663e3
297e951e4ab09c3465deb222cbe8f66579f9154d4e8806eec3a52350e577fded

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb138c2a-a013-4652-92e0-920b0ab6d6fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5934
x-amzn-requestid: 75aeb64a-1ba1-4349-84f3-b94aabeccc9f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhklyFUMIAMF3nA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-56d6fb7b337769986c5c567b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: MFuKQ8m9sOQ2Cc0kXzMaJzUBbB5hEUQ8gpr7rYT4vwh8CYs5oqZQfA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:30:54 GMT
age: 21654
etag: "d29ce982633d0cc50b2a968ea22893d92b9663e3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83495dde-218f-4893-8556-3013e3f83f78.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (5960 bytes)
Hash
e8901f99d8e3001e442c887f89e2e650
a61875fcee6c09087462f0443286482d903725bc
d3a69a5bce1852c464755452d7f5a88f0d20fbed14b9f16ac6f539d4d1bfdb21

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83495dde-218f-4893-8556-3013e3f83f78.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5960
x-amzn-requestid: 313f5526-984b-4224-b321-732fe5ae5a7d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhkl0HimoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e7be-430032d00080eff464e4d574;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:40:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TiZDGG_JsgbKWvLfQn_uioEKmxzYKKV8cT9wJ2PntoNPb4r1a2YKtg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:04:24 GMT
age: 23244
etag: "a61875fcee6c09087462f0443286482d903725bc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10997 bytes)
Hash
65c02d8a1b0d6a210cb2a649c5c67469
027dbc7a104c922904f067ed15d696c363c11774
89d5443a1d313c632d09a583ef602aa4645a16986076387329f434262d15b0a1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F72e6599c-6a41-4dd2-a346-b15fa84cb20a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10997
x-amzn-requestid: a6fac0ab-1acf-4808-8785-3b4ec5e32edf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fhj30FX7IAMFa5w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d6e698-005109ec2e76529e793678d6;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: skGKI_MWvDwpAbGibUcr8wTlimgoPU9ZYhEHltd3uhdJZ_GoNznVAA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 22:08:57 GMT
etag: "027dbc7a104c922904f067ed15d696c363c11774"
content-type: image/jpeg
age: 22971
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.2 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.2 kB (9167 bytes)
Hash
3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: e6e0789c-a4a9-4ffa-a0ae-691770d1035b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPF9YEBmIAMF0kQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf8388-01d2093432d3959903671a69;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:06:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: awfNeaKbFw2bjiTGwUrwUTxU-qbVS2eTjn948H8kn1hy7pi_DwLMlQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 17:35:56 GMT
age: 39352
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL