GET cdn.jsdelivr.net/npm/vue@2.5.16/dist/vue.min.js
200 OK 33 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/vue@2.5.16/dist/vue.min.js
IP
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text, with very long lines (65449)
Hash 5283b86cbf48a538ee3cbebac633ccd4
28bb1c91e37b53f4ebb48ce482dccb240003e078
4da2dc78cc23591a9ee3285ba8f3891fa57b506b7902fbdd35fa5a2172566c55
GET /npm/vue@2.5.16/dist/vue.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.5.16
x-jsd-version-type: version
etag: W/"151b4-KLsckeN7U/TrtIzkgtzLJAAD4Hg"
content-encoding: br
accept-ranges: bytes
date: Sun, 02 Jun 2024 03:17:08 GMT
age: 533309
x-served-by: cache-fra-eddf8230020-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 33184
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/css/bootstrap.min.css
200 OK 26 kB URL GET HTTP/2 cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/css/bootstrap.min.css
IP
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type ASCII text, with very long lines (65324)
Hash a15c2ac3234aa8f6064ef9c1f7383c37
6e10354828454898fda80f55f3decb347fd9ed21
60b19e5da6a9234ff9220668a5ec1125c157a268513256188ee80f2d2c8d8d36
GET /npm/bootstrap@4.3.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.3.1
x-jsd-version-type: version
etag: W/"2606e-bhA1SChFSJj9qA9V897LNH/Z7SE"
content-encoding: br
accept-ranges: bytes
date: Sun, 02 Jun 2024 03:17:08 GMT
age: 23949634
x-served-by: cache-fra-eddf8230028-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25648
X-Firefox-Spdy: h2
200 OK 110 kB URL User Request GET HTTP/2 IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerLet's Encrypt
Subjectreurl.cc
Fingerprint54:10:AB:9E:56:36:75:3E:DC:11:B2:FD:09:59:3D:41:A2:BA:B0:62
ValidityFri, 17 May 2024 11:38:35 GMT - Thu, 15 Aug 2024 11:38:34 GMT
File type gzip compressed data, from Unix
Size 110 kB (110225 bytes)
Hash d908cf2f1784909f12de42054f4aa1c2
53ffaeb4d7a0207d454cd13076c15622ee0a1121
b0a410dfaf7717118ea2bcb7a2a47bf84d595a1f3819c51bf083710ae4c575a1
GET /oLeEQj HTTP/1.1
Host: reurl.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 02 Jun 2024 03:17:07 GMT
content-type: text/html; charset=utf-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: *, Authorization, X-Authorization
referrer-policy: no-referrer-when-downgrade
target: https://identifiez-vous-pour-continuezfr.yolasite.com/#inbox?compose=referrer=starred&keyword%253AstarredountIds=1/messages/AD10?reason=invalid_crumb&referrer=aHS8&guce_referrer_sig=AQAAALPlm8z4O6w78AJMCnGkLgkfpgxwxKnCk3zV
vary: Accept-Encoding, Origin
x-request-id: 6c70293a-4a14-4c78-a112-00f487dd635b
content-encoding: gzip
X-Firefox-Spdy: h2
472 B IP
Hash 4e58a5731cf33a818f836256fff345b4
6a79274186f6b9e0d9b53a2108b1cdae9f755372
8e60930837ffb16b636a34e4314214364f01df45b565a001d43ad6b6a30a9e4f
POST /s/wr3/pxE HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 4e58a5731cf33a818f836256fff345b4
6a79274186f6b9e0d9b53a2108b1cdae9f755372
8e60930837ffb16b636a34e4314214364f01df45b565a001d43ad6b6a30a9e4f
POST /s/wr3/pxE HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 4e58a5731cf33a818f836256fff345b4
6a79274186f6b9e0d9b53a2108b1cdae9f755372
8e60930837ffb16b636a34e4314214364f01df45b565a001d43ad6b6a30a9e4f
POST /s/wr3/pxE HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
472 B IP
Hash 4e58a5731cf33a818f836256fff345b4
6a79274186f6b9e0d9b53a2108b1cdae9f755372
8e60930837ffb16b636a34e4314214364f01df45b565a001d43ad6b6a30a9e4f
POST /s/wr3/pxE HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET www.googletagmanager.com/gtag/js?id=G-ZDFZCDVDK1
200 OK 103 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-ZDFZCDVDK1
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint44:90:16:0A:70:BD:B4:DF:9D:30:32:B2:3E:31:F4:BD:D4:E3:F8:91
ValidityMon, 13 May 2024 06:34:48 GMT - Mon, 05 Aug 2024 06:34:47 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Size 103 kB (103043 bytes)
Hash 9b22b0603495cd82b0d9f862c24d1891
e305169b7d2d85d19c0d5055b7a9d04e37e03484
14bf4c8b07842d25eb07f3d52019ca6fc9c533bdc2a449faae79a25b16d234b0
GET /gtag/js?id=G-ZDFZCDVDK1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Jun 2024 03:17:08 GMT
expires: Sun, 02 Jun 2024 03:17:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 103043
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B IP
Hash 4e58a5731cf33a818f836256fff345b4
6a79274186f6b9e0d9b53a2108b1cdae9f755372
8e60930837ffb16b636a34e4314214364f01df45b565a001d43ad6b6a30a9e4f
POST /s/wr3/pxE HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET storage.reurl.cc/javascripts/ga2.js
200 OK 536 B URL GET HTTP/2 storage.reurl.cc/javascripts/ga2.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerGoogle Trust Services
Subjectstorage.reurl.cc
Fingerprint38:68:6D:5E:41:BE:02:5E:5B:54:40:01:B6:6F:17:A7:FF:A7:CC:E0
ValidityFri, 31 May 2024 02:40:52 GMT - Thu, 29 Aug 2024 03:35:06 GMT
File type JavaScript source, ASCII text, with very long lines (536), with no line terminators
Hash b62a9953b965481dc112622ba8aff6c4
8053e2d92e7c4f9a4b1d5c516b65e87acbde06e4
16cf673198b29bb08e83f5d8f74182d97d9c6dfa729c60f90f6195e739de9d20
GET /javascripts/ga2.js HTTP/1.1
Host: storage.reurl.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reurl.cc/oLeEQj
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: *, Authorization, X-Authorization
content-length: 536
referrer-policy: no-referrer-when-downgrade
x-request-id: 3a451f3c-d4d2-4413-b5ca-63d4e467bf89
via: 1.1 google
date: Sat, 01 Jun 2024 21:26:46 GMT
age: 21022
last-modified: Thu, 29 Sep 2022 09:52:31 GMT
content-type: text/javascript; charset=utf-8
vary: Origin
cache-control: public,max-age=28800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET storage.reurl.cc/javascripts/renews.js
200 OK 286 B URL GET HTTP/2 storage.reurl.cc/javascripts/renews.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerGoogle Trust Services
Subjectstorage.reurl.cc
Fingerprint38:68:6D:5E:41:BE:02:5E:5B:54:40:01:B6:6F:17:A7:FF:A7:CC:E0
ValidityFri, 31 May 2024 02:40:52 GMT - Thu, 29 Aug 2024 03:35:06 GMT
File type ASCII text, with very long lines (412), with no line terminators
Hash 170a85ab984674d611158d24fdc58a02
6e6c6c0bb4d050e30aa8761bcf9aea76b93a4208
52bb2d07b65ec544edeb2a33f4103397a28f036f0d100090f3e17e4364aea1fb
GET /javascripts/renews.js HTTP/1.1
Host: storage.reurl.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reurl.cc/oLeEQj
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: *, Authorization, X-Authorization
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-request-id: 75934434-daa9-46ed-a47e-07d81fc54c8e
content-length: 286
via: 1.1 google
date: Sat, 01 Jun 2024 22:23:38 GMT
age: 17610
last-modified: Thu, 29 Sep 2022 09:52:31 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=28800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET storage.reurl.cc/javascripts/pixel.js
200 OK 322 B URL GET HTTP/2 storage.reurl.cc/javascripts/pixel.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerGoogle Trust Services
Subjectstorage.reurl.cc
Fingerprint38:68:6D:5E:41:BE:02:5E:5B:54:40:01:B6:6F:17:A7:FF:A7:CC:E0
ValidityFri, 31 May 2024 02:40:52 GMT - Thu, 29 Aug 2024 03:35:06 GMT
File type ASCII text, with very long lines (429), with no line terminators
Hash 8db606ffbc89a5a15fab90b7aeb7a2e7
1ccf32ca6dbb1fdbc1b049246c08e9e5ddb8bf6f
3050a5556edc5876cd83e63f15e56fe19cb428129345a58d1f57687414504698
GET /javascripts/pixel.js HTTP/1.1
Host: storage.reurl.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reurl.cc/oLeEQj
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: *, Authorization, X-Authorization
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-request-id: 2cf69a86-3c0d-489d-874b-44dc2efc584b
content-length: 322
via: 1.1 google
date: Sun, 02 Jun 2024 02:53:05 GMT
age: 1443
last-modified: Thu, 29 Sep 2022 09:52:31 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=28800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET storage.reurl.cc/javascripts/loading.js
200 OK 134 B URL GET HTTP/2 storage.reurl.cc/javascripts/loading.js
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerGoogle Trust Services
Subjectstorage.reurl.cc
Fingerprint38:68:6D:5E:41:BE:02:5E:5B:54:40:01:B6:6F:17:A7:FF:A7:CC:E0
ValidityFri, 31 May 2024 02:40:52 GMT - Thu, 29 Aug 2024 03:35:06 GMT
File type ASCII text, with no line terminators
Hash 15cea07370297423ac71841f524f2164
ee1fb636ddfca8612895f953bb4c8b688ffe0c09
ddd9d29beabaeecc9c76408242dfc2b76305ec52511992d3cfbc81a500ee0670
GET /javascripts/loading.js HTTP/1.1
Host: storage.reurl.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reurl.cc/oLeEQj
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: *, Authorization, X-Authorization
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-request-id: 4dc18129-9c9a-472a-9544-5998edacc3be
content-length: 134
via: 1.1 google
date: Sat, 01 Jun 2024 21:51:23 GMT
age: 19545
last-modified: Thu, 29 Sep 2022 09:52:31 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public,max-age=28800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B IP
Hash 4e58a5731cf33a818f836256fff345b4
6a79274186f6b9e0d9b53a2108b1cdae9f755372
8e60930837ffb16b636a34e4314214364f01df45b565a001d43ad6b6a30a9e4f
POST /s/wr3/pxE HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:08 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET storage.reurl.cc/stylesheets/rwd/style.css?v=1
200 OK 904 B URL GET HTTP/2 storage.reurl.cc/stylesheets/rwd/style.css?v=1
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerGoogle Trust Services
Subjectstorage.reurl.cc
Fingerprint38:68:6D:5E:41:BE:02:5E:5B:54:40:01:B6:6F:17:A7:FF:A7:CC:E0
ValidityFri, 31 May 2024 02:40:52 GMT - Thu, 29 Aug 2024 03:35:06 GMT
File type ASCII text, with very long lines (2550), with no line terminators
Hash b6f86b9460dd26567cee7bdd876240c8
79a8fa836ffca74226080a0fe4e98fe08e87c813
749079c4e18ad34ac381e98d3fa23e070937ae17b73e27bb066eae5350ed667d
GET /stylesheets/rwd/style.css?v=1 HTTP/1.1
Host: storage.reurl.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://reurl.cc/oLeEQj
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-expose-headers: *, Authorization, X-Authorization
content-encoding: gzip
referrer-policy: no-referrer-when-downgrade
x-request-id: dfd181d0-6c33-4613-a366-f306617bde71
content-length: 904
via: 1.1 google
date: Sun, 02 Jun 2024 03:17:08 GMT
last-modified: Thu, 29 Sep 2022 09:52:31 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
age: 0
cache-control: public,max-age=28800
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash db8f43b48edd2ffb9fe7486eaf4e6099
0ee7e2750cae9abb062159c19be658acef002bb2
2dfa0258c58292ae86697290dabe2d5611d12dd97f89250041d2e481203830bb
POST / HTTP/1.1
Host: status.geotrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4059
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Sun, 02 Jun 2024 03:17:09 GMT
Last-Modified: Sun, 02 Jun 2024 02:09:31 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
GET storage.re-news.tw/feeds
200 OK 6.4 kB IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerGoogle Trust Services LLC
Subjectstorage.re-news.tw
Fingerprint0E:37:B9:C9:B0:DE:56:FC:FF:14:41:79:2C:01:61:CE:CB:6D:EC:53
ValidityThu, 04 Apr 2024 00:02:24 GMT - Wed, 03 Jul 2024 00:55:38 GMT
Hash 9b9b8aaaade1b5f6c9744a0d21458cc6
572777c48f27d2a1a58784dad67f7089605c3fd5
e2666fc2adc82d993ae7a634e0e8bc66969614c5d25b49ad45b2e77079b5757a
GET /feeds HTTP/1.1
Host: storage.re-news.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://reurl.cc
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: Express
access-control-allow-origin: https://reurl.cc
vary: Origin
content-type: text/html; charset=utf-8
content-length: 6415
etag: W/"190f-Vyd3xI8n0qGlh4Ta1n9wiWBcP9U"
date: Sun, 02 Jun 2024 03:17:09 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET mma.prnasia.com/media2/2425428/k11Train_Central.jpg?p=medium600
200 OK 103 kB URL GET HTTP/2 mma.prnasia.com/media2/2425428/k11Train_Central.jpg?p=medium600
IP
Certificate IssuerDigiCert Inc
Subject*.prnasia.com
FingerprintC8:70:81:B3:EB:B1:72:72:DC:88:B2:74:5E:92:73:7E:5C:15:AA:14
ValidityWed, 25 Oct 2023 00:00:00 GMT - Sun, 24 Nov 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 599x376, components 3
Size 103 kB (102879 bytes)
Hash 5b38eb808af74111e801a468b8afff1a
204caf96c7c4e7209139ac43e565654c0e6076d2
53b0e55188fc774b17973a2058afc5e3a2820bd296550878984ba19b13f2a3f2
GET /media2/2425428/k11Train_Central.jpg?p=medium600 HTTP/1.1
Host: mma.prnasia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 02 Jun 2024 03:17:09 GMT
content-type: image/jpeg
content-length: 102879
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
cache-control: public, max-age=0
cf-bgj: h2pri
expires: Sat, 01 Jun 2024 06:03:35 GMT
last-modified: Sat, 01 Jun 2024 06:03:34 GMT
server-timing: intid;desc=da9ad0a0448f9c2d
vary: *, Accept-Encoding
x-powered-by: ASP.NET
cf-cache-status: HIT
age: 75937
accept-ranges: bytes
set-cookie: __cf_bm=antY2ZRln.b_C7bRuUbYZua20CxqcXlMxDuqg0Pefmg-1717298229-1.0.1.1-5q8f7Gth2GHmGFaeS10OeOUO3Ub_ALf2_77SSHX4S2GQUg3WsUzO2XjNBoxbilKD0EKNzIEt4dI.mwWr.gq8qA; path=/; expires=Sun, 02-Jun-24 03:47:09 GMT; domain=.prnasia.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 88d449f0f832b518-OSL
X-Firefox-Spdy: h2
GET i0.wp.com/golike.tw/wp-content/uploads/2024/05/2024052503191028.jpg?resize=1024%2C536&ssl=1
200 OK 41 kB URL GET HTTP/2 i0.wp.com/golike.tw/wp-content/uploads/2024/05/2024052503191028.jpg?resize=1024%2C536&ssl=1
IP
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint5D:DB:6E:AA:9E:A8:4A:C3:10:A5:DA:89:DC:1C:BB:D1:87:5F:E1:D2
ValidityTue, 28 Nov 2023 00:00:00 GMT - Sat, 28 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x536, Scaling: [none]x[none], YUV color, decoders should clamp
Hash bbade19a0fd7e2af7cab7a58479925a7
5cb82acda26b93b71284ef90d5405c771540193f
26b73cf5b40360c1e8fb07f2c15fc3e64f048929b310b61972aa4c95262f4725
GET /golike.tw/wp-content/uploads/2024/05/2024052503191028.jpg?resize=1024%2C536&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 02 Jun 2024 03:17:09 GMT
content-type: image/webp
content-length: 40970
last-modified: Fri, 31 May 2024 09:06:40 GMT
expires: Sun, 31 May 2026 21:06:40 GMT
cache-control: public, max-age=63115200
link: <https://golike.tw/wp-content/uploads/2024/05/2024052503191028.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a6d471318f46cd38"
vary: Accept
x-nc: HIT arn 6
alt-svc: h3=":443"; ma=86400
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
GET img.gbyhn.com.tw/2024/05/1717146462-55c21d652bdc0adb7337bf89eda580fa-840x525.jpg
200 OK 93 kB URL GET HTTP/2 img.gbyhn.com.tw/2024/05/1717146462-55c21d652bdc0adb7337bf89eda580fa-840x525.jpg
IP
Certificate IssuerGoogle Trust Services LLC
Subjectgbyhn.com.tw
Fingerprint07:D8:99:D5:E0:6E:82:5D:A0:60:0D:DC:02:53:01:01:5D:96:3C:F0
ValidityWed, 15 May 2024 19:33:02 GMT - Tue, 13 Aug 2024 19:33:01 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 840x525, components 3
Hash e2fb182545a51c5a8c7ee02b3a68d347
f364e27bf72fc608a7284f5666364cbd2c1ae30e
4760e5c0ede50f55c0e9de82868bf7fcdbbc855d8cc00dd46e5449095c8ec612
GET /2024/05/1717146462-55c21d652bdc0adb7337bf89eda580fa-840x525.jpg HTTP/1.1
Host: img.gbyhn.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 02 Jun 2024 03:17:09 GMT
content-type: image/jpeg
content-length: 93075
cache-control: public, max-age=604800
expires: Fri, 07 Jun 2024 09:09:13 GMT
last-modified: Fri, 31 May 2024 09:07:42 GMT
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 145173
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P68eFP%2FTTF8s3%2BF6jq%2BvxOXnkRPXahNoY3zW5fODWGV3H6ZdErYWnDR5mq12MQGqbt9zpBs9%2BPpT3hs5kdM4CUM5aXtvUoUyqvJzq%2F5%2Fjl171c%2BO65vgAI3xsbYITQt4Bv5%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88d449f14a8f56bf-OSL
X-Firefox-Spdy: h2
GET static.wixstatic.com/media/08c74d_85f3d2bc5e0247cd96e1875a34d00d40~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png
200 OK 254 kB URL GET HTTP/2 static.wixstatic.com/media/08c74d_85f3d2bc5e0247cd96e1875a34d00d40~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png
IP
Certificate IssuerSectigo Limited
Subject*.wixstatic.com
Fingerprint56:99:3E:0F:8E:DD:39:96:0D:31:11:B2:00:1E:1F:46:16:CA:07:E7
ValidityMon, 27 May 2024 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
File type PNG image data, 1000 x 562, 8-bit/color RGB, non-interlaced
Size 254 kB (253999 bytes)
Hash 92bdc6455fad4b689b3643c9b7d84a75
f3f9a2f7e4ef47f56aa38d7188408d8e861d7269
8b1777e9b6a8a7ac6e5b67237631bf3e10dbaf38ef3dbe1ae66af7853eafe283
GET /media/08c74d_85f3d2bc5e0247cd96e1875a34d00d40~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 253999
server: openresty/1.21.4.1
date: Fri, 26 Apr 2024 10:47:42 GMT
access-control-allow-origin: *
cache-control: public, max-age=15552000, immutable
wix-tracer: 2fdQQxvHAcGbjEWF9kLq2kX6j1p
x-seen-by: image-manipulator-65b8785648-g7wqq
timing-allow-origin: *
via: 1.1 google, 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
x-cache: Hit from cloudfront
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: t9I07aBXjjTbLIWHkStVGi8b20kt_a1rHxGxNewGcxHAgdzQY9ZKxw==
age: 3169767
X-Firefox-Spdy: h2
GET blog.alphaloan.co/wp-content/uploads/2021/04/%E6%A8%82%E5%A4%A9%E8%B2%B8-%E4%BF%A1%E7%94%A8%E7%AE%A1%E7%90%86%E6%8C%87%E5%8D%97-1.jpg
200 OK 185 kB URL GET HTTP/2 blog.alphaloan.co/wp-content/uploads/2021/04/%E6%A8%82%E5%A4%A9%E8%B2%B8-%E4%BF%A1%E7%94%A8%E7%AE%A1%E7%90%86%E6%8C%87%E5%8D%97-1.jpg
IP
Certificate IssuerLet's Encrypt
Subjecttls.automattic.com
Fingerprint07:6D:05:B5:C3:56:BD:49:64:3B:A3:34:CA:E5:64:0E:0A:11:9D:F0
ValidityWed, 22 May 2024 18:05:34 GMT - Tue, 20 Aug 2024 18:05:33 GMT
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=611, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=977], progressive, precision 8, 977x506, components 3
Size 185 kB (184823 bytes)
Hash 8fe9adb10f8b1cfcad32664c0ed3f530
42615d6310ea07e6df8fc03a79a9c1932e729eff
90102b36c17b8182fcb580b55b917d4807fb037df4dd104a6815ad305e2bea20
GET /wp-content/uploads/2021/04/%E6%A8%82%E5%A4%A9%E8%B2%B8-%E4%BF%A1%E7%94%A8%E7%AE%A1%E7%90%86%E6%8C%87%E5%8D%97-1.jpg HTTP/1.1
Host: blog.alphaloan.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 02 Jun 2024 03:17:10 GMT
content-type: image/jpeg
content-length: 184823
strict-transport-security: max-age=31536000
last-modified: Thu, 27 Apr 2023 05:06:22 GMT
etag: "644a02ce-2d1f7"
expires: Thu, 06 Jun 2024 21:59:17 GMT
cache-control: max-age=604800
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
x-ac: 3.arn _atomic_ams HIT
alt-svc: h3=":443"; ma=86400
accept-ranges: bytes
X-Firefox-Spdy: h2
GET creditcards.com.tw/wp-content/uploads/2024/02/%E8%81%AF%E9%82%A6%E5%90%89%E9%B6%B4%E5%8D%A1%EF%BC%8C%E6%97%A5%E6%9C%AC%E6%B6%88%E8%B2%BB%E6%9C%80%E9%AB%98-4.5-%E5%9B%9E%E9%A5%8B-1080x630.jpg?crop=1
200 OK 65 kB URL GET HTTP/2 creditcards.com.tw/wp-content/uploads/2024/02/%E8%81%AF%E9%82%A6%E5%90%89%E9%B6%B4%E5%8D%A1%EF%BC%8C%E6%97%A5%E6%9C%AC%E6%B6%88%E8%B2%BB%E6%9C%80%E9%AB%98-4.5-%E5%9B%9E%E9%A5%8B-1080x630.jpg?crop=1
IP
Certificate IssuerLet's Encrypt
Subjecttls.automattic.com
Fingerprint7D:03:59:73:FF:2F:21:A7:3F:72:6A:13:37:C0:6F:1A:28:42:4C:A5
ValidityWed, 10 Apr 2024 19:30:27 GMT - Tue, 09 Jul 2024 19:30:26 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1080x630, Scaling: [none]x[none], YUV color, decoders should clamp
Hash c037fb5f17f41bf7c12d740b4d63c3bc
2f9ec6c51bb2fbdd6b37b6e168cc3debc49d67f4
f609969d66c049ec7ab95dc25cc0041df8e3ab544028f511f11411fbd253f4a7
GET /wp-content/uploads/2024/02/%E8%81%AF%E9%82%A6%E5%90%89%E9%B6%B4%E5%8D%A1%EF%BC%8C%E6%97%A5%E6%9C%AC%E6%B6%88%E8%B2%BB%E6%9C%80%E9%AB%98-4.5-%E5%9B%9E%E9%A5%8B-1080x630.jpg?crop=1 HTTP/1.1
Host: creditcards.com.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 02 Jun 2024 03:17:10 GMT
content-type: image/webp
content-length: 65432
strict-transport-security: max-age=31536000
last-modified: Wed, 31 Jan 2024 18:00:00 GMT
expires: Sat, 31 Jan 2026 06:00:00 GMT
cache-control: public, max-age=63115200
x-content-type-options: nosniff
etag: "c84543e9f7c3b84e"
vary: Accept
x-nc: HIT bur 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
x-ac: 3.arn _atomic_ams BYPASS
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET re-news.tw/images/renews-title1.png
200 OK 24 kB URL GET HTTP/2 re-news.tw/images/renews-title1.png
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerLet's Encrypt
Subjectre-news.tw
Fingerprint6A:DA:F1:66:8E:A6:45:6F:B6:83:77:31:36:26:D9:09:8B:2E:FE:28
ValidityFri, 26 Apr 2024 21:41:51 GMT - Thu, 25 Jul 2024 21:41:50 GMT
File type PNG image data, 1204 x 518, 8-bit/color RGBA, non-interlaced
Hash b13f7701d2e42e4dc1341ffdf9697d4b
8999539b347a20d92e287fe72bc1b81a22942c8c
e9b96bc538ceb220fc5caff0d0a67916b74cf07b2bada0b3296a17b1b99c9990
GET /images/renews-title1.png HTTP/1.1
Host: re-news.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0 (Ubuntu)
date: Sun, 02 Jun 2024 03:17:10 GMT
content-type: image/png
content-length: 24493
last-modified: Sun, 28 Nov 2021 04:19:19 GMT
etag: "61a30347-5fad"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET yads.c.yimg.jp/js/yads-async.js
403 Forbidden 10 kB URL GET HTTP/2 yads.c.yimg.jp/js/yads-async.js
IP
ASN #23816 Yahoo Japan Corporation
Certificate IssuerCybertrust Japan Co., Ltd.
Subjectedge01.yahoo.co.jp
FingerprintDF:68:03:C4:36:A5:59:5C:8E:59:E1:71:B7:8D:82:C9:4D:76:7A:93
ValidityFri, 02 Feb 2024 07:46:09 GMT - Sat, 01 Mar 2025 14:59:00 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (486)
Hash bf7ebe1cc45db5a11337e505248ca4f8
ca46580e39a792218e8a0adc5a3e6e25dc11ee1f
ae97b45362096c079f51de99d60833ee729b9daca0d414bf20dd797395b4717b
GET /js/yads-async.js HTTP/1.1
Host: yads.c.yimg.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
date: Sun, 02 Jun 2024 03:17:11 GMT
x-z-chihaya: r=1
x-frame-options: SAMEORIGIN
content-length: 10051
content-type: text/html
X-Firefox-Spdy: h2
GET cpt.geniee.jp/hb/v1/policy-check?loc=https%3A%2F%2Freurl.cc%2FoLeEQj&list_id=mid-219632&gam_id=gam-424536528%2Cgam-0
200 OK 12 B URL GET HTTP/2 cpt.geniee.jp/hb/v1/policy-check?loc=https%3A%2F%2Freurl.cc%2FoLeEQj&list_id=mid-219632&gam_id=gam-424536528%2Cgam-0
IP
ASN #2519 ARTERIA Networks Corporation
Certificate IssuerDigiCert Inc
Subject*.geniee.jp
Fingerprint04:D2:DC:CF:B1:0E:CA:37:26:D1:82:B6:6E:5A:08:CD:7D:8D:C2:A4
ValidityTue, 27 Feb 2024 00:00:00 GMT - Sat, 29 Mar 2025 23:59:59 GMT
Hash 3140fd3dc9a4526805335237dcc9c9dc
bf23b887a229628dce0611baca2db13e238d8046
3108e15dfc911f1a730106ee1e44c941639e0b7add838d095680425e86d086c3
GET /hb/v1/policy-check?loc=https%3A%2F%2Freurl.cc%2FoLeEQj&list_id=mid-219632&gam_id=gam-424536528%2Cgam-0 HTTP/1.1
Host: cpt.geniee.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://reurl.cc
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 02 Jun 2024 03:17:11 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: *
cache-control: max-age=10800, private
cross-origin-resource-policy: cross-origin
X-Firefox-Spdy: h2
GET img.racingcharger.tw/wp-content/uploads/2024/06/2024060105073870.jpg
200 OK 176 kB URL GET HTTP/2 img.racingcharger.tw/wp-content/uploads/2024/06/2024060105073870.jpg
IP
ASN #131149 Yuan-Jhen Info., Co., Ltd
Certificate IssuercPanel, Inc.
Subjectimg.racingcharger.tw
FingerprintBD:22:09:AD:93:CB:82:60:23:E8:0F:13:82:4B:41:75:E4:AE:EF:0C
ValiditySat, 23 Mar 2024 00:00:00 GMT - Fri, 21 Jun 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1200x900, components 3
Size 176 kB (176420 bytes)
Hash 9f1c07f6f55a77ed51c2d4c299014536
fa50d6613fcd96466788b122a26d8d1587d8d1c1
23fbd2b5c142a4eded577a9ec47fbe4560da78b425202b2139d84fecebc3da3a
GET /wp-content/uploads/2024/06/2024060105073870.jpg HTTP/1.1
Host: img.racingcharger.tw
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sat, 01 Jun 2024 05:07:43 GMT
accept-ranges: bytes
content-length: 176420
content-type: image/jpeg
date: Sun, 02 Jun 2024 03:17:10 GMT
server: Apache
X-Firefox-Spdy: h2
GET cpt.geniee.jp/hb/v1/lib/gnshbrequest-v3.9.3.js
200 OK 141 kB URL GET HTTP/2 cpt.geniee.jp/hb/v1/lib/gnshbrequest-v3.9.3.js
IP
ASN #2519 ARTERIA Networks Corporation
Certificate IssuerDigiCert Inc
Subject*.geniee.jp
Fingerprint04:D2:DC:CF:B1:0E:CA:37:26:D1:82:B6:6E:5A:08:CD:7D:8D:C2:A4
ValidityTue, 27 Feb 2024 00:00:00 GMT - Sat, 29 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (21793)
Size 141 kB (140564 bytes)
Hash 9c028c2d8c8786cac6cf5db7aadb3dd3
2af0c8865537dfd1d07991bb16198058caac1bbb
c1c0b9fd7ab7619edfbf8a69ca73c42e01e9604a39a3fe492a91dc013f686cb5
GET /hb/v1/lib/gnshbrequest-v3.9.3.js HTTP/1.1
Host: cpt.geniee.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 02 Jun 2024 03:17:10 GMT
content-type: application/javascript
last-modified: Thu, 30 May 2024 08:13:12 GMT
etag: W/"66583518-22514"
cross-origin-resource-policy: cross-origin
expires: Mon, 03 Jun 2024 03:17:10 GMT
cache-control: max-age=86400, private
content-encoding: gzip
X-Firefox-Spdy: h2
GET identifiez-vous-pour-continuezfr.yolasite.comresources/lo-orange.png
0 B URL GET identifiez-vous-pour-continuezfr.yolasite.comresources/lo-orange.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /lo-orange.png HTTP/1.1
Host: identifiez-vous-pour-continuezfr.yolasite.comresources
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET cpt.geniee.jp/hb/v1/219632/1441/wrapper.min.js
200 OK 8.9 kB URL GET HTTP/2 cpt.geniee.jp/hb/v1/219632/1441/wrapper.min.js
IP
ASN #2519 ARTERIA Networks Corporation
Certificate IssuerDigiCert Inc
Subject*.geniee.jp
Fingerprint04:D2:DC:CF:B1:0E:CA:37:26:D1:82:B6:6E:5A:08:CD:7D:8D:C2:A4
ValidityTue, 27 Feb 2024 00:00:00 GMT - Sat, 29 Mar 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (9116), with no line terminators
Hash 0f3d29208bec48184fa7512629b1788e
5c7624cb8c3f98d99eda8c6b47ad14c60d0e2908
28eb31cda886ca814d83a66e78e39b0cc3c8992bee20d564158e3c7dbff79c7e
GET /hb/v1/219632/1441/wrapper.min.js HTTP/1.1
Host: cpt.geniee.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 02 Jun 2024 03:17:09 GMT
content-type: application/javascript
last-modified: Sat, 01 Jun 2024 12:03:52 GMT
etag: W/"665b0e28-22ca"
cross-origin-resource-policy: cross-origin
expires: Sun, 02 Jun 2024 04:17:09 GMT
cache-control: max-age=3600, private
content-encoding: gzip
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-N394QBRGC0
200 OK 321 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-N394QBRGC0
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint44:90:16:0A:70:BD:B4:DF:9D:30:32:B2:3E:31:F4:BD:D4:E3:F8:91
ValidityMon, 13 May 2024 06:34:48 GMT - Mon, 05 Aug 2024 06:34:47 GMT
File type JavaScript source, ASCII text, with very long lines (5945)
Size 321 kB (321373 bytes)
Hash e3fc6eda8aa0976602b5186a8030c1ea
59ba4c880fdd5ac64cce496235df028fb20450d8
bc4921e831001b30c93de3c91376dd6ff192d0fa0b87bd9a6a855d6f67f87fe2
GET /gtag/js?id=G-N394QBRGC0 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://reurl.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 02 Jun 2024 03:17:08 GMT
expires: Sun, 02 Jun 2024 03:17:08 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 106376
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
35.185.130.121
142.250.74.163
182.22.25.124
188.114.96.1
0.0.0.0
0.0.0.0