Overview

URLbgmiofficial.monthly4end.cyou/
IP 20.25.67.90 (United States)
ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-20 20:31:18 UTC
StatusLoading report..
IDS alerts0
Blocklist alert29
urlquery alerts No alerts detected
Tags None

Domain Summary (20)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-09-20 10:15:13 UTC 104.17.25.14
code.jquery.com (1) 634 2012-05-21 17:28:02 UTC 2022-09-20 10:15:13 UTC 69.16.175.42
ocsp.pki.goog (8) 175 2017-06-14 07:23:31 UTC 2022-09-20 04:47:45 UTC 142.250.74.3
stackpath.bootstrapcdn.com (1) 2467 2018-04-05 04:41:29 UTC 2022-09-20 10:15:13 UTC 104.18.11.207
i.postimg.cc (1) 23840 2018-04-11 10:01:12 UTC 2022-09-20 10:20:48 UTC 162.19.88.69
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-20 17:37:01 UTC 34.120.237.76
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-20 17:35:13 UTC 143.204.55.115
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-20 04:47:04 UTC 34.117.237.239
www.battlegroundsmobileindia.com (7) 0 2021-07-19 04:25:22 UTC 2022-09-20 15:36:00 UTC 23.36.77.51 Domain (battlegroundsmobileindia.com) ranked at: 342546
a.top4top.io (1) 588496 2019-12-05 18:36:40 UTC 2022-09-20 18:18:41 UTC 51.159.64.45
fonts.googleapis.com (1) 8877 2014-07-21 13:19:55 UTC 2022-09-20 15:51:03 UTC 142.250.74.10
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-20 05:19:24 UTC 143.204.55.35
ocsp.digicert.com (3) 86 2012-05-21 07:02:23 UTC 2022-09-20 13:04:07 UTC 93.184.220.29
ajax.googleapis.com (2) 12905 2019-10-15 17:52:08 UTC 2022-09-20 19:04:20 UTC 142.250.74.74
i.ibb.co (3) 13485 2018-11-25 10:13:48 UTC 2022-09-20 10:19:24 UTC 217.182.228.53
l.top4top.io (1) 926491 2020-01-14 23:19:40 UTC 2022-09-20 18:18:41 UTC 65.21.235.194
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-20 05:36:22 UTC 35.163.196.193
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-20 04:47:05 UTC 23.36.76.226
bgmiofficial.monthly4end.cyou (23) 0 2022-09-14 14:47:08 UTC 2022-09-20 15:34:22 UTC 20.25.67.90 Unknown ranking
fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-09-20 04:47:45 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
Scan Date Severity Indicator Comment
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Tencent

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-20 2 bgmiofficial.monthly4end.cyou/ Phishing
2022-09-20 2 bgmiofficial.monthly4end.cyou/js/script.js Phishing
2022-09-20 2 bgmiofficial.monthly4end.cyou/js/showHide.js Phishing
2022-09-20 2 l.top4top.io/m_1725u5z7i1.mp3 Malware
2022-09-20 2 a.top4top.io/m_1725zobal2.mp3 Malware
2022-09-20 2 bgmiofficial.monthly4end.cyou/js/Nizam.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 20.25.67.90
Date UQ / IDS / BL URL IP
2022-09-24 20:13:21 +0000 0 - 0 - 9 www-bgmievent.koenigseggnew.cyou/b 20.25.67.90
2022-09-24 20:12:59 +0000 0 - 0 - 7 www-bgmievent.koenigseggnew.cyou/b/ 20.25.67.90
2022-09-23 10:45:58 +0000 0 - 0 - 52 bgmi-limited-event.newupdate.cyou/ 20.25.67.90
2022-09-23 10:44:17 +0000 0 - 0 - 52 www-bgmi-event.newupdate.cyou/ 20.25.67.90
2022-09-22 21:07:21 +0000 0 - 0 - 26 bgmi-event.rog3.my.id/ 20.25.67.90


Last 5 reports on ASN: MICROSOFT-CORP-MSN-AS-BLOCK
Date UQ / IDS / BL URL IP
2023-03-28 09:42:24 +0000 0 - 1 - 0 cdn01.catalog.kace.com/ms362407/PBIDesktopSet (...) 52.238.56.180
2023-03-28 09:42:07 +0000 0 - 2 - 0 load.medoc.ua/update/ezvit.11.02.100-11.02.101.zip 52.138.168.194
2023-03-28 09:35:59 +0000 0 - 0 - 25 login.20-208-128-129.www.vrbaknig.de.plesk.pa (...) 20.208.128.129
2023-03-28 09:20:31 +0000 0 - 1 - 0 goplaymadfixonchart.brazilsouth.cloudapp.azur (...) 20.226.96.248
2023-03-28 09:10:55 +0000 0 - 1 - 0 cdn01.catalog.kace.com/tv215266/TeamViewer_Se (...) 52.238.56.180


Last 5 reports on domain: monthly4end.cyou
Date UQ / IDS / BL URL IP
2022-10-16 12:35:57 +0000 0 - 0 - 17 bgmicenter.monthly4end.cyou/ 20.127.138.111
2022-10-15 21:58:59 +0000 0 - 0 - 28 bgmimobile-ind.monthly4end.cyou/ 20.127.138.111
2022-10-15 14:38:24 +0000 0 - 0 - 6 bgmicenter.monthly4end.cyou/ 20.127.138.111
2022-10-15 11:34:38 +0000 0 - 0 - 29 bgmi-center.monthly4end.cyou/ 20.127.138.111
2022-10-11 09:40:24 +0000 0 - 0 - 44 pubg-mob.monthly4end.cyou/ 20.127.138.111


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-09-22 22:04:40 +0000 0 - 0 - 29 off-ical.bgmieventm4.cyou/ 20.127.138.111
2022-09-21 22:01:40 +0000 0 - 0 - 29 batttlleground.monthly4end.cyou/ 20.127.138.111
2022-09-21 10:22:38 +0000 0 - 0 - 8 offilical.bgmieventm4.cyou/ 20.127.138.111
2022-09-21 08:39:19 +0000 0 - 0 - 6 batttlleground.monthly4end.cyou/ 20.127.138.111
2022-09-18 21:35:17 +0000 0 - 0 - 2 battlegroundmobile.in/ 172.67.142.122

JavaScript

Executed Scripts (6)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (71)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Retry-After, Content-Type, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 20 Sep 2022 20:13:14 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: teBK1TrT14269jjVvB4bXuWCZWXwNR9-MNcJXcvy2Ep-_KulzfSRnQ==
Age: 1072


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    1b3053fa528e28810f8a2cc9284cc921
Sha1:   cca9eb471d941881a6b9a1793aecb6c281908f6a
Sha256: a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5C706B2718B1698995F4FEB91223779AEF4BF6DC967C31F9EF9A93873197D5F9"
Last-Modified: Sun, 18 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7708
Expires: Tue, 20 Sep 2022 22:39:34 GMT
Date: Tue, 20 Sep 2022 20:31:06 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 20 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pIJDYXX8jekroIywEcooVUvjmpOjEQgOJRULpyx3YyJMuHXDIBaRRw==
age: 57353
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET / HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Tue, 20 Sep 2022 20:31:06 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 17:38:36 GMT
Accept-Ranges: bytes
Content-Length: 21210
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- assembler source, Unicode text, UTF-8 text, with CRLF line terminators
Size:   21210
Md5:    84b8effdf815cf8811fc38ede3c15b78
Sha1:   2dded7ea7b23fa2fdcdac970c5ee6c80fbf801db
Sha256: 8e1ba42858848924e7b5077e9b349d68b317c549e0cc9f5094cc3b63e0cac32a

Alerts:
  Blocklists:
    - openphish: Tencent
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.25.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 5845
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ed9-1149f"
last-modified: Mon, 04 May 2020 16:12:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 5861510
expires: Sun, 10 Sep 2023 20:31:07 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zOJrbPGSxh7zcr8xQHohtnFTmjY7NlmlF9ED6cqPX6rZB2ugHe%2Bk5IYIYxEoQIjqrf%2BUckn6dtpCPAs39OacMLT8P4HdowMkPHRoOG%2BDDWKiejHWD16HTruSXfY4dXd25FNWDEa4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 74dd52a5fb92b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   5845
Md5:    a7e25a22602a2b2ed35f90fd5210cff1
Sha1:   148c4f275b60e6cf6253d6b4c7bdc486515b2202
Sha256: 312d94bafa68e11e3a4a8d7c06bc25ee161d1d965afb1fa99db79815a272d0bf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6446
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:31:07 GMT
Last-Modified: Tue, 20 Sep 2022 18:43:42 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /css/style.css HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 12578
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  assembler source, ASCII text
Size:   12578
Md5:    add3ac1f4a5354eeffc359101dd1c71f
Sha1:   59e36c188b1ae28fe5757b7d75ccd6b1d634a9a0
Sha256: 1185f95b73e95cd3103acd52f7bd8f4156f89cd32ba2df84ed6fa24148d6ae66

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /jquery-1.10.2.min.js HTTP/1.1 
Host: code.jquery.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         69.16.175.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Tue, 20 Sep 2022 20:31:07 GMT
content-encoding: gzip
content-length: 32788
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-16bb3"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1663705867.dop022.sk1.t,1663705867.cds249.sk1.hn,1663705867.cds243.sk1.c
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32072)
Size:   32788
Md5:    68cc08e82915da8b82fc6be74ab86365
Sha1:   4089530b0c00f6cbd1452d7f873be85454196fd1
Sha256: 6c63276db5e51f227be1c9bdaf73d76fa01040499944a8c8607db0c234f0575c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6446
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:31:07 GMT
Last-Modified: Tue, 20 Sep 2022 18:43:42 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /js/script.js HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 4665
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   4665
Md5:    08735a1f343ed3a7d46f7b5afbcf0e70
Sha1:   a30a821eaca01beb999f6477fa3658f63c9b0fe3
Sha256: 5fb438e931fa145db1ff5e453d5b1580608feaf87215b5dd03590eb6300340d7

Alerts:
  Blocklists:
    - openphish: Tencent
    - fortinet: Phishing
                                        
                                            GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29707
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 12:03:18 GMT
expires: Mon, 18 Sep 2023 12:03:18 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 203269
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32180)
Size:   29707
Md5:    f16500423cc2867eff8b773df637c48f
Sha1:   1cd32d75b59a89c3a70274e383151a61ce0594f4
Sha256: 6ca5dc8ad67639c69117ace46c93703cf5fff82824cfc0bada0cf0fb3b2d41d7
                                        
                                            GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 29671
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 15:43:54 GMT
expires: Sat, 16 Sep 2023 15:43:54 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 362833
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32061)
Size:   29671
Md5:    b90b3d2618cce9d766152cd3092b5c27
Sha1:   496339457cd00caab8118e2e1f30ea18dc05b9f4
Sha256: b7b155aa8c6b5db28f9a6b41e88c96e9462c196c700add426f8ef32c9ce1ed41
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css/login/facebook.css HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 3767
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   3767
Md5:    81796f04bffdba6fc88ce6774be45d59
Sha1:   02c03c3d9852ed71c5f8cc2600340953032cb407
Sha256: cfa13c4473f3da0663674244a677e9724960e89e48d05eafa66176d567e669c9

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /css/login/twitter.css HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 2549
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   2549
Md5:    3b36fac79ca457324420097e2b664e48
Sha1:   6b8b07a659d4c34a8a102eee6a775664657f86d0
Sha256: 7e74f535f1a3abf790579ac128b658e82027b4487643419c61b47e4d61aae01d

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /common/img/icon/icon_shop_50.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1429
last-modified: Fri, 17 Sep 2021 01:57:06 GMT
etag: "595-5cc273f9c339d"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, interlaced\012- data
Size:   1429
Md5:    a48f175e92215f456d59c0cbfdd7ced9
Sha1:   631e7dced44f909d6182fea873e51e167307a07c
Sha256: 8c9556f9a57cf08d7a116f85e1685d0e348a90de18769cc29c999ef0c2ff52ac
                                        
                                            GET /common/img/btn/sns_y_w.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2369
last-modified: Fri, 14 May 2021 10:49:25 GMT
etag: "941-5c247ff491740"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   2369
Md5:    888954c471597ea2fdcca77103f505b1
Sha1:   c16d8786c8232f657583507a1257b5d2be978c58
Sha256: f8fd1f87d08b5e87f6b12577883a00bc6340d84cbd3b8b837b4f6472d2dc27cc
                                        
                                            GET /common/img/common/logo.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 3945
last-modified: Fri, 14 May 2021 10:49:26 GMT
etag: "f69-5c247ff585980"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 132 x 54, 8-bit/color RGBA, non-interlaced\012- data
Size:   3945
Md5:    f88d0e27c031d9af88a7d5edf771f2bf
Sha1:   3ad0d9da957738707ec959d52c070c62fc6a8bfd
Sha256: 6314644539af517f687e019e0470e60b84d770c9d80aa046818d2d025f27eaa7
                                        
                                            GET /common/img/btn/sns_f_w.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2369
last-modified: Fri, 14 May 2021 10:49:24 GMT
etag: "941-5c247ff39d500"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   2369
Md5:    57b33ef147508d9a59ce3b90d6cc10c3
Sha1:   c402619796c175d8d1f77f39082c51583e365df3
Sha256: 347be294958042503fc06f16c339c6eb9e9341fc8b4ee7ccb535abb8cd9f372b
                                        
                                            GET /common/img/btn/sns_i_w.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 2638
last-modified: Fri, 14 May 2021 10:49:24 GMT
etag: "a4e-5c247ff39d500"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size:   2638
Md5:    d4e9b873d6494773a9f585a1cfafc26f
Sha1:   0d3b37b5345415a2e9c8572041fb7906a67c2f8a
Sha256: 7167f2fd7e13d728e91d8ba6ed8e7b1fcd714087c59910463e11e2b08cfdfa54
                                        
                                            GET /common/img/main/app.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 30182
last-modified: Mon, 17 May 2021 08:48:00 GMT
etag: "75e6-5c282a696f000"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 117 x 117, 8-bit/color RGBA, non-interlaced\012- data
Size:   30182
Md5:    6ae43b6c707f6c559b4b19ba64ba6f4e
Sha1:   8a67a6bbe6d443180fb3a0d88355cef490ec85b1
Sha256: e85ade5d6786ebf81122a53e42d731a33edf5368d8b18e8dc397c0fbf06b9268
                                        
                                            GET /common/img/common/footerlg.png HTTP/1.1 
Host: www.battlegroundsmobileindia.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.36.77.51
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 7004
last-modified: Fri, 14 May 2021 10:49:25 GMT
etag: "1b5c-5c247ff491740"
accept-ranges: bytes
date: Tue, 20 Sep 2022 20:31:07 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 276 x 35, 8-bit/color RGBA, non-interlaced\012- data
Size:   7004
Md5:    731bcfc15f2a21cd7b9744a1c8f61714
Sha1:   b8c612461c8eb46b4605b0c41fd2dfd8efb6b7f5
Sha256: 8fce2cab2eb55065e9cca8bbf72667662b27de4d938178c8658808550fe30a43
                                        
                                            GET /js/showHide.js HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 1075
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1075
Md5:    d3e46c4a7d95270da519489746521b1a
Sha1:   5f5a383b6a1a635695e2c72aace79363708f82be
Sha256: 8023fc37af7de956061342860b38dd1646ce1f1fa7ecc2ce703e2b544b2bd283

Alerts:
  Blocklists:
    - openphish: Tencent
    - fortinet: Phishing
                                        
                                            GET /css/animate.css HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 77906
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   77906
Md5:    8eae1a9cfafdc593321d4d59ec4905ea
Sha1:   232f5f3f4c3a0a56823e0e933f9c7fec3aa9cbcc
Sha256: e89c81987c5cbc157097eaa6657d6a594abf030cc89bb63f0d2154d8383e9fab

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 20 Sep 2022 20:03:22 GMT
Expires: Tue, 20 Sep 2022 20:31:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kq8uvYh1rYT4I3YivKssw8AAB9uCHf8pL2PenThkh7suNW7NVPejpA==
Age: 1665


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /jwMxWFh/menu.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 3906
last-modified: Mon, 04 Jul 2022 04:38:38 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Size:   3906
Md5:    7777bd0a549e245607ebc0cad73cb093
Sha1:   8d68e31d4704d127426209330de4e8ecf8e5d7b2
Sha256: 8cb72ee9fa30b299783be0d40f5e708db873984c27c2824d066af6c7bacfa738
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /V9rgBqw/twitter-text.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 4298
last-modified: Mon, 18 Oct 2021 19:35:41 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size:   4298
Md5:    fef946b8bba756359e2a1e87ccd915ea
Sha1:   acc364946077b0e32b2343474ce4066ad3ee524c
Sha256: 1be5d05ce6faad469f7f9c5a5879f2d9f8d267b60eb394e92c19217268bcea8f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 
Host: stackpath.bootstrapcdn.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.18.11.207
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Tue, 20 Sep 2022 20:31:07 GMT
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 9152621
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74dd52a6687e0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7480
Md5:    63664330a6d4250375dd56a0d5cdb971
Sha1:   7efb9ba709222a9e1c58a75cb586247ae07813f7
Sha256: c6f28b50870e2d2217897cc2cfa3b71c201f1fb1a504a506d7a81e9dd06caaea
                                        
                                            GET /Wg8qQxh/facebook-text.png HTTP/1.1 
Host: i.ibb.co
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         217.182.228.53
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 28789
last-modified: Mon, 18 Oct 2021 19:35:50 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 604 x 158, 8-bit/color RGBA, non-interlaced\012- data
Size:   28789
Md5:    74190b93fc4f5d88f0c8e6411ba20bd8
Sha1:   89ce2ecb660a90b8e6ed1b335443d7767c59f28a
Sha256: 092a3cd5f86b3f039feefdeb86694cd16ae545af214cfda614bdbbe2d1bde401
                                        
                                            GET /s/teko/v15/LYjCdG7kmE0gdVBesCRgqA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bgmiofficial.monthly4end.cyou
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 20:04:04 GMT
expires: Tue, 19 Sep 2023 20:04:04 GMT
cache-control: public, max-age=31536000
age: 88023
last-modified: Wed, 27 Apr 2022 16:17:49 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13196, version 1.0\012- data
Size:   13196
Md5:    5b9fce771bd530ab9767e2b5aebd28c1
Sha1:   28ee5935b59df8b2d6876707e1f0f0e6768d2d31
Sha256: a3bf77e9dea5a047c348fa98ccbeb5d5e07de3541ce0a2dfb243690da964804c
                                        
                                            GET /s/teko/v15/LYjNdG7kmE0gfaN9pQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://bgmiofficial.monthly4end.cyou
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Sep 2022 20:23:40 GMT
expires: Thu, 14 Sep 2023 20:23:40 GMT
cache-control: public, max-age=31536000
age: 518847
last-modified: Wed, 27 Apr 2022 17:05:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 13324, version 1.0\012- data
Size:   13324
Md5:    b4082c888eefa2dca3fe2c9d46a87180
Sha1:   05aeb6c58175f659fe59eaca5a9d3735dd0530e3
Sha256: 352ad1513eeaeec51060f01d5bed32345862ec4d9c0802b81e0a47885951e4b6
                                        
                                            GET /66bK3tfJ/Amod.png HTTP/1.1 
Host: i.postimg.cc
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         162.19.88.69
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 88464
last-modified: Wed, 17 Aug 2022 14:47:35 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1280 x 54, 8-bit/color RGBA, non-interlaced\012- data
Size:   88464
Md5:    6774f33254c7f07a7763bd503b7c918c
Sha1:   9e212fcefaece30889f0aad36e0ead3a41ceb4fe
Sha256: e072b60dd0fb713c703bf0496b6bc130c8c9653a44746cffb2cf854c090334b4
                                        
                                            GET /m_1725u5z7i1.mp3 HTTP/1.1 
Host: l.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         65.21.235.194
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 19781
set-cookie: klj_40d147_downloads=kh51z; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Wed, 21 Sep 2022 20:07:47 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="open_reward_tab.mp3"
etag: "5f685351-4d45"
expires: Tue, 20 Sep 2022 22:31:07 GMT
cache-control: max-age=7200
x-file-id: x34392023x
content-range: bytes 0-19780/19781
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Size:   19781
Md5:    ee5b5d12064ae26f839b882edb33da62
Sha1:   6fa93ef00f294eec4ef05276e81813db1e95e346
Sha256: 4bc5852e5cec62ceab9260f712961f59609868151e01b63e7b7cae2b00efed54

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5588
Cache-Control: 'max-age=158059'
Date: Tue, 20 Sep 2022 20:31:07 GMT
Last-Modified: Tue, 20 Sep 2022 18:57:59 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/rewards/5.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 17:09:04 GMT
Accept-Ranges: bytes
Content-Length: 82296
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Size:   82296
Md5:    9774b2d60730be18913c5975217b11fd
Sha1:   f558c4399d9e4fc6339e45e76387cef52ef5a608
Sha256: 894d0224ededa299e562f8955cad5fca7b00d7b237a10346c879b8d529cf8d17

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/rewards/7.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 17:10:18 GMT
Accept-Ranges: bytes
Content-Length: 366446
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.0 (Windows), datetime=2022:09:10 22:38:50], baseline, precision 8, 1000x1000, components 3\012- data
Size:   366446
Md5:    eca08f7be716ac16d8d4e6ff8843a608
Sha1:   44336ad8ca02092f865de149e67d2bc6488fd939
Sha256: e05833fca2aa062efb1252e63a6ffb7e6619e7d57782d4fd7c94f37d19bf311a

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /m_1725zobal2.mp3 HTTP/1.1 
Host: a.top4top.io
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         51.159.64.45
HTTP/2 206 Partial Content
content-type: audio/mpeg
                                        
server: nginx
date: Tue, 20 Sep 2022 20:31:07 GMT
content-length: 17691
set-cookie: klj_40d147_downloads=kh520; Max-Age=85000; Domain=.top4top.io; Path=/; Expires=Wed, 21 Sep 2022 20:07:47 GMT
last-modified: Mon, 21 Sep 2020 07:16:33 GMT
content-disposition: inline; filename="close_reward_popup.mp3"
etag: "5f685351-451b"
expires: Tue, 20 Sep 2022 22:31:07 GMT
cache-control: max-age=7200
x-file-id: x34392024x
content-range: bytes 0-17690/17691
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo\012- data
Size:   17691
Md5:    70ded6b0b406f9710307bc35e221629f
Sha1:   7034ec2ff72c936255b04c0890ce8976599380cc
Sha256: 22e1575a06426f427b46598d6599c565e80ed3e937b1872b0d5d928bfe5b2d65

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /img/rewards/4.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 17:09:11 GMT
Accept-Ranges: bytes
Content-Length: 109838
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1080, components 3\012- data
Size:   109838
Md5:    3fde44f381d221735850333ed09bf9bb
Sha1:   e5e2b1a5630a156eb884dc3f4ffc4671b1d561c5
Sha256: f22abad62f0d6dc819db1497398d5d1fd5fadc2cacacc5f019e75001e062518d

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/rewards/9.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 17:39:30 GMT
Accept-Ranges: bytes
Content-Length: 98412
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1266x1280, components 3\012- data
Size:   98412
Md5:    89c3c8c0e09e775a8eb941317258db98
Sha1:   09c6a7038ee0dcc06f9425abe50f44035a8c2ec6
Sha256: 7600012ca7ca0a79d442f4b6014f9804cdf2178f65f5131d5d37d5b312636f89

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/container.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 4576
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 240x120, components 3\012- data
Size:   4576
Md5:    c0064f54bd53ef8d9a169edbd3e148e8
Sha1:   2bcc39bdc5f26a434f6d07097adc01c147accb9e
Sha256: 4ce33dc1fdf216e48126e505b590c158ebf0928d8a6cd1d5f7db17d8a29c3fee

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/event-theme.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 39792
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1399x269, components 3\012- data
Size:   39792
Md5:    678a074c1a14a957daff08cee46627f4
Sha1:   555309f2a886be6912ebd331c39a8a28312114f6
Sha256: 9e2007dc5c1687bb204822d874b8c7fa86ad36c0de73fd8aad0b4d09ca16ada6

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/event-notification-content.png HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 14173
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 700 x 117, 8-bit colormap, non-interlaced\012- data
Size:   14173
Md5:    1af66614da195185d503b3d671bd79bd
Sha1:   c716243f03562ac39aecd69f8f7c293e7bc41d62
Sha256: f297092f262db7f75cd80b23074a773b8990d9159c555f6f4ee9dd3976fc3f65

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/btn_item.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 4525
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1399x347, components 3\012- data
Size:   4525
Md5:    731a846e35ad590b7791b89e0b4c6a45
Sha1:   0d51af12d44cced53ba1b0d3cadc4e092acba129
Sha256: 17f19d72f340550da9db39b2f0a4f0b70023639f642f78af6dec7e4def9fb7b4

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/rewards/3.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:07 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 16:31:41 GMT
Accept-Ranges: bytes
Content-Length: 512088
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced\012- data
Size:   512088
Md5:    81b84f229e6e2cf580c9d851e95d5f38
Sha1:   2a40dfc6db34435b93834e3b815c4d2cee8f884c
Sha256: d27e9e7b240c38bf3a5701776a5fd1ce80a931012c28588f68cf00a13cfd9773

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: X8AKZW5MFCy11Mzul3rqYQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.163.196.193
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NQdmanetwaXyOt39bahD8OoLCgg=

                                        
                                            GET /img/rewards/2.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 16:31:36 GMT
Accept-Ranges: bytes
Content-Length: 524381
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced\012- data
Size:   524381
Md5:    a3a1aee36107edc13ef3119149dbbd34
Sha1:   fb220b3c21028574e74f8f0dd777d4cccf34e596
Sha256: fb0b0ac0bdb67fa16cd5d9f72b5995a6ad6a2a8c29e10870bfbb6c4e4c4edd26

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/rewards/8.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 17:06:47 GMT
Accept-Ranges: bytes
Content-Length: 47295
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 540x540, components 3\012- data
Size:   47295
Md5:    4b13f65710be2959d578b6b0d89793d5
Sha1:   e2865c614523884b3489d8d31c37bf397a482c4c
Sha256: 9eecf78323564185e6c75de738fcc14a41c7069c794a548a607b3543dc31794d

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/rewards/6.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 16:40:44 GMT
Accept-Ranges: bytes
Content-Length: 104010
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1080], progressive, precision 8, 1080x1080, components 3\012- data
Size:   104010
Md5:    5e245415e18dbe86d3f317c95d22e1ab
Sha1:   d851c58726feb0caa3467b78a6491763db053aff
Sha256: 88491093eafaa4d8ca320cf15158aa71fa9b14a5f815c97031231beeb0f433dd

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/header.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 35997
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x394, components 3\012- data
Size:   35997
Md5:    62bbfcfabccbf138c9aa9c2d84fe8694
Sha1:   ef6bf3bb352e19c797517efb8cb5df508b011bc4
Sha256: 8ee2fbf1547b720918d38f558adad2614515a7988b9d1fbdcac26ea2f3e6c934

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /img/popup-close.png HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 422
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Size:   422
Md5:    d45afd0750df1473f2835dceb7933be8
Sha1:   25fe98b2ed17c8d857094d1d254fcc2a2f34c363
Sha256: fd5d4a16b40eb27ac0372e93f5f0f9faa21032d1004a980838024f99798b37c8

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            GET /js/Nizam.js HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Fri, 09 Sep 2022 16:46:34 GMT
Accept-Ranges: bytes
Content-Length: 5245
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5223)
Size:   5245
Md5:    1c0bc4ee6269a78e646823fd245b07f7
Sha1:   72d2d04e1bdd7dda8b4206f0ddf2fd65776922de
Sha256: 0c2f2fb4cea2e6b2ac9c06a6c27c4c65e18b233d7ab6008deef20efab921d991

Alerts:
  Blocklists:
    - openphish: Tencent
    - fortinet: Phishing
                                        
                                            GET /img/rewards/1.jpg HTTP/1.1 
Host: bgmiofficial.monthly4end.cyou
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

search
                                         20.25.67.90
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Tue, 20 Sep 2022 20:31:08 GMT
Server: Apache
Last-Modified: Sat, 10 Sep 2022 16:30:51 GMT
Accept-Ranges: bytes
Content-Length: 697957
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced\012- data
Size:   697957
Md5:    01aa3fc45cea98e94e553278f32168fb
Sha1:   274947f8362ffcef737bd084dd53ce3f3d1055ce
Sha256: 9dceebf92c63823f169a4848681f6c577a97c1062f9e569e966ed77ae1c2c682

Alerts:
  Blocklists:
    - openphish: Tencent
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:31:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:31:09 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:31:09 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1d1af9c9-23b5-42e1-b7c6-655c21db6627.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9873
x-amzn-requestid: 7171299f-e6e3-40ef-a292-33779346e1ee
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI-FDIIAMF-xg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-31f9413434a6b00e77e7709b;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: evL3aL1ULo6B2a8Rp6iILKCX7F14O9HMSbEqkEY3XHFhmMptE8FaVw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 21:50:04 GMT
age: 81665
etag: "0e14f5062e40ce94346494ff947bfcf74b5e88c1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9873
Md5:    7ca0c1a7f205ad07f1cce80b26448873
Sha1:   0e14f5062e40ce94346494ff947bfcf74b5e88c1
Sha256: ebc960279032671136749823c126ec807334d9eaf2b019abcc63b41bcdbf4a7f
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "741815F43B76661B9EDDE512BC9061CB4BC659B297E7D822BF8E68E5AAC9D23D"
Last-Modified: Sun, 18 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Tue, 20 Sep 2022 21:36:25 GMT
Date: Tue, 20 Sep 2022 20:31:09 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1b9b6fcc-4a98-463a-8c9c-a60812d5b535.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9865
x-amzn-requestid: 7eeeff5b-cb13-4060-96a6-bf5a4be57331
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugokGQVoAMFXmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e169-4211dbbe1a22d0255a45aff0;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:38:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zDPKSOJ7SJImKcluUMhGvVMHv4t2oKLD2AJfGKAFSfedsdSA4VgZ_g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:56 GMT
etag: "b8484fb5443344b03e52dd56b1d6c5682eb6221a"
age: 80893
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9865
Md5:    1a7d863845e96c5927e812f325c08c16
Sha1:   b8484fb5443344b03e52dd56b1d6c5682eb6221a
Sha256: fcb382029332a44deaf212298b618074a752d674d0c735a1b8b861ab4bb6ff0f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28b8af49-2631-4a57-aeca-43e33f0f6d83.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11145
x-amzn-requestid: dcb726a6-2f43-4170-a53c-4f0d2883309e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yuh7yHfHIAMFu4g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e37e-11bf06e96123e01c11854cbb;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:47:42 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: DwufJXA1yHz_jnJL0PWjCQYF9fa3jlJ0e-2hIomInAXCpmPISX3mjg==
via: 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:02:33 GMT
age: 80916
etag: "ff8286c4d2cf87a1865d56d082bc5235dba60ad7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11145
Md5:    c283017ec789693602177a2785177e21
Sha1:   ff8286c4d2cf87a1865d56d082bc5235dba60ad7
Sha256: 520db2567ad5529d35d2ac63b94d4186848382e9c86d0c4355ab979b34f0e0ab
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc72c9eb8-103b-4d09-b405-97d1a7ae99a8.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9543
x-amzn-requestid: 17be04c9-54f0-4988-82dd-f13911a2a629
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugINHN1IAMF8iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09a-35496b4c21c23dec75257964;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: y3urrVdjZEds_DKf3yL2XfaOy-5UPBwU-YVWe5eKYsDpl3JPmqffsw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:23:30 GMT
age: 79659
etag: "a852edb64a7220532aa619ab2a440c3a7e11b97a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9543
Md5:    30fbdfee7ec4513a5ff3dfcb7282f816
Sha1:   a852edb64a7220532aa619ab2a440c3a7e11b97a
Sha256: 4adee59f97bea412c6a0a786d0a27e431a497198b9047a75841b0a530803bdfe
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c2e0de8-088f-449b-a3cb-bbb83e3883a6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11832
x-amzn-requestid: 75065a71-5f2d-4987-915b-9bddc772c76a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YugI_EsLIAMFdmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328e09f-1248d25405209da3353d4a4a;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 21:35:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7sCevVX1nGXxZxnrXSURjUcap1a7vCZwrMMIXfzcBPR1srMxJHLGUg==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 19 Sep 2022 22:07:05 GMT
age: 80644
etag: "8b91bc3069a3217bc719c27959d578b353b5d9dc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11832
Md5:    2ed7323b395e757f7766ea0045efdaca
Sha1:   8b91bc3069a3217bc719c27959d578b353b5d9dc
Sha256: 8daf8cb1464daa5f72bc4f1049adb4aba00b2c2dec11cb3ade3454ec2ebbfb63
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a91bc33-86f4-4bda-af70-da083ceb7c72.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10894
x-amzn-requestid: f7aad96e-af80-4db7-8bc1-d1e09a9b37e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeJQGHhOIAMFYuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322559a-538534e91448af217c59ab3d;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:28:42 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: P7aZQzmAvqn2rcHJUQjHo0Dcg8dsrqseey5mNOabfq1b857M4SUMDQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 02:46:17 GMT
age: 63892
etag: "ebd83f29edd95217dfa4f4c7a94eddf34dd58b14"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10894
Md5:    d3e70b2859ca89b353682d03f6b46b93
Sha1:   ebd83f29edd95217dfa4f4c7a94eddf34dd58b14
Sha256: 43ad8f8b0a664bbec39e0410c1201498a2d2e36e5bd7d5ece8d65b15230ec50b
                                        
                                            GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bgmiofficial.monthly4end.cyou/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 20 Sep 2022 20:31:07 GMT
date: Tue, 20 Sep 2022 20:31:07 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---