firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 08 Sep 2022 17:05:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -Bpwx2gSbtlyghkeJdK_jSyMieeR98tFcFq9wdibG14vUknPOvd_2A==
Age: 2230
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b9adda4796e3cda8d92753c46964621c
5f1eba1f6085b23dea088a91fe6f8947172f9f62
a0577a8fcfa81b3f86d99566eb4429655b93a238ffd1a3752bc9aae3d969deea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A0577A8FCFA81B3F86D99566EB4429655B93A238FFD1A3752BC9AAE3D969DEEA"
Last-Modified: Tue, 06 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3663
Expires: Thu, 08 Sep 2022 18:43:32 GMT
Date: Thu, 08 Sep 2022 17:42:29 GMT
Connection: keep-alive
dreaming-world.net/molestiae-repellat/documents.zip
301 Moved Permanently 0 B URL HTTP/1.1 dreaming-world.net/molestiae-repellat/documents.zip
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /molestiae-repellat/documents.zip HTTP/1.1
Host: dreaming-world.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 08 Sep 2022 17:42:30 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
Location: http://www.dreaming-world.net/molestiae-repellat/documents.zip
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Thu, 08 Sep 2022 03:46:35 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: V0aEaC4rtC080dRj74YnWubP64STYEtUDLjByGDm7Fx-yovpqqvBPg==
age: 50155
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Thu, 08 Sep 2022 17:38:18 GMT
Expires: Thu, 08 Sep 2022 18:28:51 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cPake9ESyp9LSKW8DD1_UcITQbbtDRfFn7WKRpoDEvLrPY2im2np0Q==
Age: 251
www.dreaming-world.net/molestiae-repellat/documents.zip
200 OK 785 B URL HTTP/1.1 www.dreaming-world.net/molestiae-repellat/documents.zip
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash c68e8f730ccc045e2d0454649c81300a
05bb95ab95e3a347eb2d676def9e963e2cf65780
9ead7017b010fa747a1800c862b3fb95f4eca2fcb509e8577d9a43880454f18b
Analyzer Verdict Alert fortinet Malware
GET /molestiae-repellat/documents.zip HTTP/1.1
Host: www.dreaming-world.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 17:42:30 GMT
Content-Type: text/html
Content-Length: 785
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 042105f89c8d64b470d84e052cd412d1
a26c7e2559b3760ea2765b16a3f8d1be27f5dcf4
fadb8cdd22f4d7773d5c20d576f6400ab25e20e1efe3e3fe50d2ae39ca6f2725
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6565
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 08 Sep 2022 17:42:30 GMT
Last-Modified: Thu, 08 Sep 2022 15:53:05 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
www.dreaming-world.net/tj.js
200 OK 520 B URL HTTP/1.1 www.dreaming-world.net/tj.js
IP
File type ASCII text, with CRLF line terminators
Hash be5007b1f85544e98db2cd6a789f56f2
1cf747b44880dc53753bfa31e2e3bf8c169055be
8a7a4060dba641671ad4ad96169155475ae7f93fe35b72f35f97527da8d433e4
Analyzer Verdict Alert fortinet Malware
GET /tj.js HTTP/1.1
Host: www.dreaming-world.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dreaming-world.net/molestiae-repellat/documents.zip
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 17:42:31 GMT
Content-Type: application/x-javascript
Content-Length: 520
Connection: keep-alive
www.dreaming-world.net/common.js
200 OK 1.1 kB URL HTTP/1.1 www.dreaming-world.net/common.js
IP
File type HTML document, ASCII text, with very long lines (389), with CRLF line terminators
Hash b3756430558b9abf41edbf97e2585631
9dcc86de0fa3f8a668356153b0bb1c26f5d275cc
d049a61472df33a1e060571cd10d5a1b7f7be228fdbb5396058584e8c3aab84e
Analyzer Verdict Alert fortinet Malware
GET /common.js HTTP/1.1
Host: www.dreaming-world.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dreaming-world.net/molestiae-repellat/documents.zip
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 17:42:31 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xsNw4NU6k8Rgj+Be4Xt2jQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: g/mtG499VTpdKwRTggiXkV66+oI=
push.zhanzhang.baidu.com/push.js
200 OK 227 B URL HTTP/1.1 push.zhanzhang.baidu.com/push.js
IP
ASN #9808 China Mobile Communications Group Co., Ltd.
File type ASCII text, with no line terminators
Hash e548b6ce15bb616c2bfba36e9cfbf307
a348285d9928a6548a57569f1fb9d62bdd747f33
7be3e4c53cc47ce5cfa40a5e79b42848a90acee0d7ff71f10ac31a49c81aead5
GET /push.js HTTP/1.1
Host: push.zhanzhang.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dreaming-world.net/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Content-Encoding: gzip
Content-Length: 227
Content-Type: text/javascript
Date: Thu, 08 Sep 2022 17:42:30 GMT
Etag: "4078521116"
Expires: Fri, 08 Sep 2023 17:42:30 GMT
Last-Modified: Wed, 25 Nov 2015 07:47:55 GMT
P3p: CP=" OTI DSP COR IVA OUR IND COM "
Server: apache
Set-Cookie: BAIDUID=758FFEDC0C0CC9976E8C172F5F855A16:FG=1; max-age=31536000; expires=Fri, 08-Sep-23 17:42:30 GMT; domain=.baidu.com; path=/; version=1
Vary: Accept-Encoding
api.share.baidu.com/s.gif?l=http://www.dreaming-world.net/molestiae-repellat/documents.zip
200 OK 0 B URL HTTP/1.1 api.share.baidu.com/s.gif?l=http://www.dreaming-world.net/molestiae-repellat/documents.zip
IP
ASN #38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s.gif?l=http://www.dreaming-world.net/molestiae-repellat/documents.zip HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dreaming-world.net/
HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Thu, 08 Sep 2022 17:42:30 GMT
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 066605d9d7372b364f689590d919c7e7
19406ef4dc2134c00b4a797f3e56f3b370a3aa2a
60072ee24eaac6b3f35856b6d3e54377215cff0bc8cad9bc679f5d40469c7ab7
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 12 Sep 2022 16:44:33 GMT
ETag: "19406ef4dc2134c00b4a797f3e56f3b370a3aa2a"
Last-Modified: Thu, 08 Sep 2022 16:44:34 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 383
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74797b2b8deafab8-OSL
www.dreaming-world.net/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.dreaming-world.net/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7ef1f0a0093460fe46bb691578c07c95
2da3ffbbf4737ce4dae9488359de34034d1ebfbd
4c62eef22174220b8655590a77b27957f3518b4c3b7352d0b64263b80e728f2c
GET /favicon.ico HTTP/1.1
Host: www.dreaming-world.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dreaming-world.net/molestiae-repellat/documents.zip
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Sep 2022 17:42:32 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Fri, 01 Jul 2011 08:14:23 GMT
Connection: keep-alive
ETag: "4e0d81df-47e"
Expires: Tue, 13 Sep 2022 17:42:32 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
zerossl.ocsp.sectigo.com/
200 OK 728 B URL HTTP/1.1 zerossl.ocsp.sectigo.com/
IP
Hash b8cadd4934daa96c73d8d037d11a41c1
0044180593d90f11d578212bd09a55a09c130408
a0efdd00da60cff3dfd6a62232657716934284435de45afded508ca8a32e905e
POST / HTTP/1.1
Host: zerossl.ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:31 GMT
Content-Type: application/ocsp-response
Content-Length: 728
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 03:46:17 GMT
Expires: Thu, 15 Sep 2022 03:46:16 GMT
Etag: "0044180593d90f11d578212bd09a55a09c130408"
Cache-Control: max-age=554024,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b2bfb27b4ee-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2671
Expires: Thu, 08 Sep 2022 18:27:02 GMT
Date: Thu, 08 Sep 2022 17:42:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2671
Expires: Thu, 08 Sep 2022 18:27:02 GMT
Date: Thu, 08 Sep 2022 17:42:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2671
Expires: Thu, 08 Sep 2022 18:27:02 GMT
Date: Thu, 08 Sep 2022 17:42:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2671
Expires: Thu, 08 Sep 2022 18:27:02 GMT
Date: Thu, 08 Sep 2022 17:42:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0fbe5627b19e9ad7ad4d40c96514ae9
d9d361271987c5947d96ddacc67efb3f3a32bbd3
48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217"
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2671
Expires: Thu, 08 Sep 2022 18:27:02 GMT
Date: Thu, 08 Sep 2022 17:42:31 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ee600c8-d25e-4cb3-93cb-f1970d300d9c.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ee600c8-d25e-4cb3-93cb-f1970d300d9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c316fd8a538a8c998ef49d399e9b0692
1fbcbd73de88723e5a42ec1ecb131b94deb1c88e
1a34abee1bf6b76733ba2ca97a5c053b67bd6cd48f6953fc53798c77385cd781
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ee600c8-d25e-4cb3-93cb-f1970d300d9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8643
x-amzn-requestid: 663e595c-db96-40aa-af51-7628b4c536fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YDkkoFTvIAMFimw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6317b483-7a2d96f41413f89f1fc3acb4;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 20:58:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: CZ1qUdeqBSDB3XHDy6QYWptdZ1aFWLSBTYwWwOvec0H0-m921E5s_g==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:05:02 GMT
age: 70649
etag: "1fbcbd73de88723e5a42ec1ecb131b94deb1c88e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1cd778a615e9a4ca3a25119790398434
d6daca74fc85d39274b3c7536f34528bef93ae97
e6b5a7a525e314e09c30985b22da7c34806df09cbe98ad52b00dcbf93a0dc054
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ba17b3c-58f5-4458-8dc2-8e4a7cf8d782.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7251
x-amzn-requestid: 26b2021a-4440-47ce-8dba-d971cae60cc1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9bmHcmoAMF3Fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f7d-5471edce7de2374c3b8af888;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: d3MrDEyDFDylQKyfxONQ12_7IBvRAg8o0rSZ64WNRGNvDHqQyDmqJA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:16:27 GMT
age: 69964
etag: "d6daca74fc85d39274b3c7536f34528bef93ae97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6f73ee4e91b38eaa36cadd4c437785f8
6ceea057f5ae50b9cef505da0a358e3d3b7d6a38
778d28e14b28c154843403470136d0efdcdd5e93e4b5aab784c12d4344e7af6f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F822fb287-f1f6-45a1-be54-4fa7385bb163.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11365
x-amzn-requestid: d50039cd-381c-4221-997e-9231d40ecfbb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9V0EHEoAMFeag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f58-11cab61904bd14462cd13d0d;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:32 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: z7RyNwWgq5r9B2WMa5ibpo3d8DXFSFCCrEHpMvc0Q5SqE2x1ovaV-g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 020978022b22df6352245f09cfbc410c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 22:41:33 GMT
age: 68458
etag: "6ceea057f5ae50b9cef505da0a358e3d3b7d6a38"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ca5b5d4ac26d97b5729a30ecdc688bc
3e633bc6c4ab9adfe84899e5209d73bef1d097eb
2c8275d1819d933f86df9685b76aea030842ba5a341c59ea88ffd2da99a5a3d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6069f6c-2029-46b3-9867-5eaeb96d65e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7885
x-amzn-requestid: 305dc6b7-eb3d-40ad-af89-8b60be935637
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG9ThE3DIAMFRtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63190f49-7c0b58644e26de7f27c5b388;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Ry2D03udnweYHan_7KhC9IDhT01g9_73G40Fa10BdIX21tgK0Cgjiw==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:48:35 GMT
etag: "3e633bc6c4ab9adfe84899e5209d73bef1d097eb"
content-type: image/jpeg
age: 71636
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
pg.doitalie.com/news/index.php
200 OK 7.5 kB URL HTTP/2 pg.doitalie.com/news/index.php
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 907e57e1b6f53adfbbf6990f804ed23d
4ffd1fdf8e0cc272ca905f3e8ed51f809f4747a0
5e18a86727a682180a9b16aa0da8c2eaf0653ee2e28acf30ea9b3710369bd775
GET /news/index.php HTTP/1.1
Host: pg.doitalie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dreaming-world.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.6
date: Thu, 08 Sep 2022 17:42:31 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
x-country: NO
x-cache: BYPASS@waxm3g7zj00000f
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faea8d298-d4be-46a2-9c14-670bdae204cd.jpeg
200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faea8d298-d4be-46a2-9c14-670bdae204cd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 675756a44be6f9bbe341fa4c866c941b
6502050805e53baeb44d82e55d4b15b82e34d2eb
cd1d16b5feefddfd89ac4bfcff21e80c49f07b0428aa57e8de365974f813e755
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faea8d298-d4be-46a2-9c14-670bdae204cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8820
x-amzn-requestid: e2c909d0-f781-48e6-805e-a43940e67c4c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YG_LpG1OIAMF_8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6319124a-37f3458a2905bd947cf01f93;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 21:51:06 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: xZfSJCNKiAOumLXDwm496KBZqoY1FtqF6T6GkMAdHCJ3Ikq0brbdjw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 27fe6f224e0cfa3f3a446471ee256e56.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Sep 2022 21:51:13 GMT
age: 71478
etag: "6502050805e53baeb44d82e55d4b15b82e34d2eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?a003bc555cb7a55f093ee9b839eb6f87
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?a003bc555cb7a55f093ee9b839eb6f87
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (627)
Hash d8c5274c294aa0771203240e8092ea37
10a50650918e11655a9fb00223d238d1c752525c
598dbd1fab9a9b29372080b89348e11f9938d771619542e003d35507e5cd7f6d
GET /hm.js?a003bc555cb7a55f093ee9b839eb6f87 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dreaming-world.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11340
Content-Type: application/javascript
Date: Thu, 08 Sep 2022 17:42:31 GMT
Etag: 271bf51a15e66f9566c1ab1f27ab6657
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=E2175206368779DB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?3ab4d7900bc286fab05881fe19fc34c8
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?3ab4d7900bc286fab05881fe19fc34c8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (625)
Hash a8f0dcb00d34ba52a4c7294c3a282c70
8ce060a3bab05efc37526d1bea84e5710fc6760b
afabd773ef899c73ce01f2f2cb9674dc19afeec12916d368c9efbf08a10574f7
GET /hm.js?3ab4d7900bc286fab05881fe19fc34c8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dreaming-world.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11338
Content-Type: application/javascript
Date: Thu, 08 Sep 2022 17:42:31 GMT
Etag: 5787dabc78f59ffbd0fe249ef57d6722
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=638F63FDB095275A; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1090478875&si=a003bc555cb7a55f093ee9b839eb6f87&v=1.2.97&lv=1&sn=35994&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.dreaming-world.net%2Fmolestiae-repellat%2Fdocuments.zip&tt=%E5%92%B8%E5%AE%81%E5%AB%8C%E6%96%A1%E6%96%87%E5%8C%96%E4%BC%A0%E6%92%AD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1090478875&si=a003bc555cb7a55f093ee9b839eb6f87&v=1.2.97&lv=1&sn=35994&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.dreaming-world.net%2Fmolestiae-repellat%2Fdocuments.zip&tt=%E5%92%B8%E5%AE%81%E5%AB%8C%E6%96%A1%E6%96%87%E5%8C%96%E4%BC%A0%E6%92%AD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1090478875&si=a003bc555cb7a55f093ee9b839eb6f87&v=1.2.97&lv=1&sn=35994&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.dreaming-world.net%2Fmolestiae-repellat%2Fdocuments.zip&tt=%E5%92%B8%E5%AE%81%E5%AB%8C%E6%96%A1%E6%96%87%E5%8C%96%E4%BC%A0%E6%92%AD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dreaming-world.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 08 Sep 2022 17:42:32 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=CA19EDB2F642CBA5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=236182018&si=3ab4d7900bc286fab05881fe19fc34c8&v=1.2.97&lv=1&sn=35994&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.dreaming-world.net%2Fmolestiae-repellat%2Fdocuments.zip&tt=%E5%92%B8%E5%AE%81%E5%AB%8C%E6%96%A1%E6%96%87%E5%8C%96%E4%BC%A0%E6%92%AD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=236182018&si=3ab4d7900bc286fab05881fe19fc34c8&v=1.2.97&lv=1&sn=35994&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.dreaming-world.net%2Fmolestiae-repellat%2Fdocuments.zip&tt=%E5%92%B8%E5%AE%81%E5%AB%8C%E6%96%A1%E6%96%87%E5%8C%96%E4%BC%A0%E6%92%AD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=236182018&si=3ab4d7900bc286fab05881fe19fc34c8&v=1.2.97&lv=1&sn=35994&r=0&ww=1280&ct=!!&u=http%3A%2F%2Fwww.dreaming-world.net%2Fmolestiae-repellat%2Fdocuments.zip&tt=%E5%92%B8%E5%AE%81%E5%AB%8C%E6%96%A1%E6%96%87%E5%8C%96%E4%BC%A0%E6%92%AD%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dreaming-world.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 08 Sep 2022 17:42:32 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=1C87A85F59C85471; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e0cdaaf822f6e020519ccc67c3b3c2a
af136fe57930077bacbb17b518a6abf09ecace32
6cba7b311572a51c5e7cf8ab45ebef35660e8834b7692b7eec0c2f4c61d8eeec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6CBA7B311572A51C5E7CF8AB45EBEF35660E8834B7692B7EEC0C2F4C61D8EEEC"
Last-Modified: Tue, 06 Sep 2022 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3676
Expires: Thu, 08 Sep 2022 18:43:48 GMT
Date: Thu, 08 Sep 2022 17:42:32 GMT
Connection: keep-alive
www.pgurg.xyz/template/pgysvip/css/honglou.png
200 OK 19 kB URL HTTP/2 www.pgurg.xyz/template/pgysvip/css/honglou.png
IP
File type PNG image data, 255 x 95, 8-bit/color RGB, non-interlaced\012- data
Hash d4c105833ccca617cb46bee0056a3c41
a2f68b0ede6aa3dd8d3f0e4107edeca86db20d1e
a8afa5703a09165e8d7ed63daed1d4ea87e49a3598a8b16c118d37366975f45e
GET /template/pgysvip/css/honglou.png HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: image/png
content-length: 19004
last-modified: Sat, 22 May 2021 11:01:31 GMT
etag: "60a8e48b-4a3c"
expires: Sat, 08 Oct 2022 17:42:33 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/images/1.gif
200 OK 254 B URL HTTP/2 www.pgurg.xyz/template/pgysvip/images/1.gif
IP
File type GIF image data, version 89a, 16 x 17\012- data
Hash b013f8fa3ec997fe20dc80b82af0ad0a
e02ce6c30d5c0abfaa3e008d1a3ce7d11f299ed9
119bff063d1d402fdf6e48bc7e681d48aabfb9bc65378dfcf64a8845ec3fceef
GET /template/pgysvip/images/1.gif HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: image/gif
content-length: 254
last-modified: Fri, 07 May 2021 10:47:38 GMT
etag: "60951aca-fe"
expires: Sat, 08 Oct 2022 17:42:33 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/html9/ad/zxf88.js
200 OK 614 B URL HTTP/2 www.pgurg.xyz/template/pgysvip/html9/ad/zxf88.js
IP
File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Hash 5544a44cad5faf09138fde07c5d2ff1a
b435357e5621bc4c023c289943638f84c560f644
e3e64dcfb2cb1868e64c1e44053032a1477e862b982567ae0003203f77115ba8
GET /template/pgysvip/html9/ad/zxf88.js HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: application/javascript
content-length: 614
last-modified: Wed, 17 Aug 2022 09:23:39 GMT
etag: "62fcb39b-266"
expires: Fri, 09 Sep 2022 05:42:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
www.pgurg.xyz/
200 OK 18 kB IP
Hash b8baef4599f2f59e6caffc12c30ac84d
3f4d54a93e9b066ce0b33647f6c4f95b789f2a85
4cadcc6d583d1e2ecd4d0f92aab1a4b7641e757e5ae8e25db2defede1d2b0961
GET / HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pg.doitalie.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
kvkaa.com/3c52792939dec2a456e9f2a839a41642.gif
301 Moved Permanently 162 B URL HTTP/2 kvkaa.com/3c52792939dec2a456e9f2a839a41642.gif
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /3c52792939dec2a456e9f2a839a41642.gif HTTP/1.1
Host: kvkaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: text/html
content-length: 162
location: https://kvtbbb.top/3c52792939dec2a456e9f2a839a41642.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 94d79c81f12a99d3daa53b1b6f56cd43
606e885462939affb1f7b68112b68a74038a6a9d
d61fa661902e81fa36579e8cee58ef53c6aec57be87956ba7043446f5adcfd66
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D61FA661902E81FA36579E8CEE58EF53C6AEC57BE87956BA7043446F5ADCFD66"
Last-Modified: Wed, 07 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14163
Expires: Thu, 08 Sep 2022 21:38:36 GMT
Date: Thu, 08 Sep 2022 17:42:33 GMT
Connection: keep-alive
kvtbbb.top/3c52792939dec2a456e9f2a839a41642.gif
200 OK 196 kB URL HTTP/2 kvtbbb.top/3c52792939dec2a456e9f2a839a41642.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 196 kB (196497 bytes)
Hash d00955c977d5037971037e8636e6e3fc
543dd6c4ba60647bdd10cdaa77487a688f3a13e5
ec4311d990968747d453095fe6ae0bbc000e16e25d288b96170c7a5a56a5ca24
GET /3c52792939dec2a456e9f2a839a41642.gif HTTP/1.1
Host: kvtbbb.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pgurg.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: image/gif
content-length: 196497
last-modified: Mon, 01 Aug 2022 10:55:20 GMT
etag: "62e7b118-2ff91"
expires: Fri, 30 Sep 2022 15:18:08 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 699865
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tc%2BynKupiDiH13kaN4kCoNoP8EhvI%2FeWRIOf6hJas7iWoIKrI1mkS01s8jMmFMsEQCEfC%2BvIrXmVdJreNpcMhmtSgDqhQw6hLNS9pq%2F5lYEDohqTDiaPzRopEXK%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3d6ed6fac8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 94d79c81f12a99d3daa53b1b6f56cd43
606e885462939affb1f7b68112b68a74038a6a9d
d61fa661902e81fa36579e8cee58ef53c6aec57be87956ba7043446f5adcfd66
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D61FA661902E81FA36579E8CEE58EF53C6AEC57BE87956BA7043446F5ADCFD66"
Last-Modified: Wed, 07 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14163
Expires: Thu, 08 Sep 2022 21:38:36 GMT
Date: Thu, 08 Sep 2022 17:42:33 GMT
Connection: keep-alive
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 5b47abf9f120dab082a44f7704d0be12
6c3fa19ce7526a715328ba0b15af9715fa47fa10
cc9d7fa05ff92ce8d22b8eeb436e225b1ad655a952fba2d149341d164cd1c84d
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 17:42:33 GMT
Ali-Swift-Global-Savetime: 1662658953
Via: cache2.l2de2[184,184,200-0,M], cache2.l2de2[185,0], cache5.se1[206,205,200-0,M], cache5.se1[207,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 08 Sep 2022 17:42:33 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916626589536338939e
cdn.staticfile.org/jquery/1.9.1/jquery.js
200 OK 80 kB URL HTTP/1.1 cdn.staticfile.org/jquery/1.9.1/jquery.js
IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash a3932a941cb998342ce964fdd83697f1
1b0e6eca41925e7cd470ea29b16cea49c1ec58af
8e7c4734517c05d78c341883dc3ad3ee4167b9d09dd63e91cf4087311194a2ab
GET /jquery/1.9.1/jquery.js HTTP/1.1
Host: cdn.staticfile.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 80123
Connection: keep-alive
Date: Thu, 08 Sep 2022 14:15:17 GMT
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: X-Log, X-Reqid
Access-Control-Max-Age: 2592000
Cache-Control: public, max-age=31536000
Etag: "FpJXr9LUbDoYnsDUCkVyJwHUfpyl.gz"
Vary: Accept-Encoding
X-Reqid: UbgAAADdbr8y6BIX
X-Svr: IO
X-Qiniu-Zone: 0
X-Log: X-Log
Accept-Ranges: bytes
Content-Disposition: inline; filename="jquery.js"; filename*=utf-8''jquery.js
Content-Transfer-Encoding: binary
Last-Modified: Tue, 16 Feb 2016 04:22:55 GMT
Ali-Swift-Global-Savetime: 1662646517
Via: cache15.l2de2[0,0,304-0,H], cache21.l2de2[2,0], cache7.se1[0,0,200-0,H], cache8.se1[1,0]
Content-Encoding: gzip
Age: 12436
X-Cache: HIT TCP_MEM_HIT dirn:5:467721566
X-Swift-SaveTime: Thu, 08 Sep 2022 14:22:52 GMT
X-Swift-CacheTime: 85945
Timing-Allow-Origin: *
EagleId: 2ff62c9c16626589538482479e
cdn.jsjsjs.xyz/happy/newyear/kongkong/960x60ns.gif
200 OK 406 kB URL HTTP/2 cdn.jsjsjs.xyz/happy/newyear/kongkong/960x60ns.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 406 kB (406419 bytes)
Hash 91949a67089d61d1c111d50f6e101660
fab540d8a71b28159836bf995e398a9569314e47
35ede3c11832a2e4f6562a484535420d010601981e3b07fdc271f160b0a81507
GET /happy/newyear/kongkong/960x60ns.gif HTTP/1.1
Host: cdn.jsjsjs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: image/gif
content-length: 406419
last-modified: Wed, 16 Feb 2022 13:39:39 GMT
etag: "620cfe9b-63393"
expires: Wed, 05 Oct 2022 01:58:46 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 315827
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PuH2ycdo3lLsiTHTCLhatwyGcD6%2FTdOW0waJ7FMr8UandW%2BZ7IMWOY3g5HblASRsFhS%2B9ox6U7OmoSpFXdpXe%2FtHw6wjf9820Krd%2FeaWiP1yj8duHBLNdWRF%2BJZI25uPNA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3e2c6cb4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d0ab17f1ddbf1cc70575ad1b44b67923
d12f3cf2b6ff9d89e938eb1ad3d785f016bb5832
54c3c5b69c90003530e01166a124b7c90c8b08da598877e9ebef60a3f87d009e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54C3C5B69C90003530E01166A124B7C90C8B08DA598877E9EBEF60A3F87D009E"
Last-Modified: Wed, 07 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21400
Expires: Thu, 08 Sep 2022 23:39:14 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash c2f24ab89c24f9249296950d18defcf1
abb7192f88a20112393d304bff6b4d13f4bdea4c
38dea82cab192640a86a6f220435cfa39c05747636d1398fb5cac66264566ce4
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "38DEA82CAB192640A86A6F220435CFA39C05747636D1398FB5CAC66264566CE4"
Last-Modified: Tue, 06 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9137
Expires: Thu, 08 Sep 2022 20:14:51 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/09-08/12/gwwaedcoo4n1241gwwaedcoo4n552051.jpg
200 OK 14 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/gwwaedcoo4n1241gwwaedcoo4n552051.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 8825b3cd0287f3c42ededecddfe21a48
4bd00ccf51e38003d7a6974cb07e4b6982fc5278
a6fd37e7b5e697b6c5f81691890d61bd32cc81e15191f35230b749db24480f5b
GET /upload/vod/2022/09-08/12/gwwaedcoo4n1241gwwaedcoo4n552051.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 13611
cf-bgj: h2pri
etag: "e34b85523dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:41:55 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5131
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OTmfRyQNjT0Gpu0eDf6eZWXX7J8fLr8rb2zB%2BS0JDDtTxEzkId%2FTgU1tvMLLHR5CVXTdrcJJmXBpOIS%2F%2FyVPMEZ3ZGk0d4rr01P9V20PbEuibqnqAWohhbac3KxVxnHichPW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3ece8a8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71bb993c5194f56777991572e78d5299
4b90a34a56515c1e0ee7faf2531c9f2867e182ae
18aaefdaa8bcfabf7347e0428f406de7b2d74c39c551bc8a2a7031c826144137
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18AAEFDAA8BCFABF7347E0428F406DE7B2D74C39C551BC8A2A7031C826144137"
Last-Modified: Thu, 08 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3459
Expires: Thu, 08 Sep 2022 18:40:13 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71bb993c5194f56777991572e78d5299
4b90a34a56515c1e0ee7faf2531c9f2867e182ae
18aaefdaa8bcfabf7347e0428f406de7b2d74c39c551bc8a2a7031c826144137
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18AAEFDAA8BCFABF7347E0428F406DE7B2D74C39C551BC8A2A7031C826144137"
Last-Modified: Thu, 08 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3459
Expires: Thu, 08 Sep 2022 18:40:13 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
fmlb.netlbtu.com/upload/vod/2022/09-08/12/lylz41egj4g1241lylz41egj4g522045.jpg
200 OK 6.6 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/lylz41egj4g1241lylz41egj4g522045.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 90cd283aa389fa58214e555794e19b24
e1b530dd928c2abca47b0229207ec5d4c5baa8e1
4fd311072feee7e25fd8b2546b9a37ad5607a28fe27856376529069849af63da
GET /upload/vod/2022/09-08/12/lylz41egj4g1241lylz41egj4g522045.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 6566
cf-bgj: h2pri
etag: "8c20f7503dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:41:52 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5131
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5qH2aLm9iP79K1GbfDQxsnjqik1y5cKy4a25Gzd9TWknK7wdhVMtAJUNPeWwbY6A5wAgtoD%2FmxFCPJ5xpK7xMQrVql1rm%2FDE%2FqeLbK2riwmJ1xZyRmMjNHQrb77UdyOORpzh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3ede9b8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/j5xtx302mqm1241j5xtx302mqm532047.jpg
200 OK 9.0 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/j5xtx302mqm1241j5xtx302mqm532047.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash b6f7fb0d03dafb03099cb1f9a7fdf518
0e25c6b98a09bdc86991fb894ba9f527bffa3968
ced74cabf8f98bf3d249e2c7fefd2ce83432fa7f564feb51b3d4a399406e3b32
GET /upload/vod/2022/09-08/12/j5xtx302mqm1241j5xtx302mqm532047.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8954
cf-bgj: h2pri
etag: "c9437a513dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:41:53 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 912
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zbgHruonOj9yYVWKaxDSwAtnVHJUW1PIDSEwGa9HrtKC%2BZc%2FXZbXyqt7HybMui5xxldJlAXghRazbHFGhZOuNxtelPWuvjeJ5WNIzihfzFDYqlHzl9uEmebEpEeJgkcqSgVF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3ede9d8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/1tb4o34xapz12441tb4o34xapz242189.jpg
200 OK 9.0 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/1tb4o34xapz12441tb4o34xapz242189.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash fe685a055eb9d103644ae44ece153fdb
8ffb4d665a575b0474727bc8876d2b419648598a
be01779d1d6c382ae6562c8fc8688e67b6b957ba501b6457dd827cbb46e61c61
GET /upload/vod/2022/09-08/12/1tb4o34xapz12441tb4o34xapz242189.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9020
cf-bgj: h2pri
etag: "c46a8dab3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:24 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5131
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qgY%2BWtx1FVQrDZ7SlO9KY5nYsa2I5%2B38YXLdZmbSg9QT0opIoS8F1sJJmt592v38sYF9nBXqMbGPZgZDPl5pKcIJAp9GlPOJN7%2FAyWbH0PoNPTOyrx2huCs%2FC%2Bl167wpdygu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edea28e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/bvdfg1dnge11241bvdfg1dnge1562055.jpg
200 OK 9.9 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/bvdfg1dnge11241bvdfg1dnge1562055.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 6e9cd3ef572b8dfc9f82254e295066fe
aac2c9d7d4211e310df971037755a21e2f058848
eab4c31193284b347d37b07409f41d408ed3f323f9a620f6e62e7462a8958d2b
GET /upload/vod/2022/09-08/12/bvdfg1dnge11241bvdfg1dnge1562055.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9933
cf-bgj: h2pri
etag: "ef838e533dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:41:56 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O5iboHffwUNfwJy0uvpEvo3lCRAFbzj%2BzrXjwGyAXWMAZ8DEHI8xRIkCZW3En9kk%2By7poFklwiiv23X3nJfhWqcyu%2BwQzipahm%2BtIsiC7ggwHI715341327eRXdi7a734KFS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edea08e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/lchcxz4wbxn1244lchcxz4wbxn272195.jpg
200 OK 11 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/lchcxz4wbxn1244lchcxz4wbxn272195.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 9ab95843524cdc9900eae77647effd57
3d4e41ad7b220fefc055171c8644dd2cbc89e045
82bc212e3ab2f35c5d5660f95e51f5b1b6c8d080cfc7f6a5534ff25993e8f36c
GET /upload/vod/2022/09-08/12/lchcxz4wbxn1244lchcxz4wbxn272195.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 11005
cf-bgj: h2pri
etag: "4d6e25ad3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:27 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ffS9m6m5qq4JDn9AZsrjwMZxOJ2%2BVdPclzsoqDCzBBIxIswuv7q5pP7T7OFPTqDOZjfqi1qm4%2FZOkqmLU%2BcCT0dt7OzwRnpE5PP8wdg%2BUC%2Fl%2F6iuFQNgGJ27pI20dhkIcJQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edea68e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/nfqtyxdvbrn1244nfqtyxdvbrn252191.jpg
200 OK 9.6 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/nfqtyxdvbrn1244nfqtyxdvbrn252191.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 310468afe34853111281d39a42901c32
e40e443da1e7d6948d336e7452acfdf5f1468bc8
9831444f18388dc975e4b20b4d1373c1c8cb13298fcde48d5d72455ee002d905
GET /upload/vod/2022/09-08/12/nfqtyxdvbrn1244nfqtyxdvbrn252191.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9570
cf-bgj: h2pri
etag: "3af012ac3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:25 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=libZAPSYccgKnq3RuVbibC9wskccb1E%2BA0Xyomh4M6zXFBkyVVvt6%2FvqsB7CI1uuKwtLRxFLjyTRckqBg9Y8s%2BF7pCnPs6IMXVFWB0I%2BcyDUxnBuCVfVQ90%2FT0%2BZjiDHHjX%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edea38e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/1dau21zp22t12411dau21zp22t542049.jpg
200 OK 13 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/1dau21zp22t12411dau21zp22t542049.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash ac8546778ea3f167abd4878f6dbbb2c0
f5f07a1e666b7ddb487a9833592f8040a7bdae58
eac4f695ea30e45929a544ec724c12848df7a22ca1945f412f420ac431fde505
GET /upload/vod/2022/09-08/12/1dau21zp22t12411dau21zp22t542049.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 12917
cf-bgj: h2pri
etag: "4ec7ff513dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:41:54 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5131
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lDo09yZWpgRhta%2FmdMIgPgyMK6MN2iW6Vk0RY16gFgq5PmlfCxanOZpKjxAX%2BClHEXIMbj6S7YktGGVTAyUY4elcAk%2FS3b5E5Ov76QveU9OqmdZQliFj2iGvGNCgSPJU8sRP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3ede9e8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/pftsewhpgkn1244pftsewhpgkn262193.jpg
200 OK 7.7 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/pftsewhpgkn1244pftsewhpgkn262193.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash e09895fa4ce71f116fc0a0583f6c678e
585f534d36de378581d637ed084a3c66980a9711
f619c51e1f2e3e5c60dc69122f0cf7ebbe9683ed41a9d4f516bb9d9e3a4052b1
GET /upload/vod/2022/09-08/12/pftsewhpgkn1244pftsewhpgkn262193.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 7681
cf-bgj: h2pri
etag: "e69a9fac3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:26 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4472
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SYSk%2FaQCM%2BBpRw2i%2BU3uaH1sZSlqVB22PnUplfkTLA%2B6ygi9tyUY%2BnBD%2BqpQOLtE7HYADP3KfysI5FVUVP3S%2FmMRZqSNYtT60nB3ZnWZaG%2Btnq4JDxn7klH0OEFmzTQX%2BfxI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edea58e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/mtzthlfmzqc1244mtzthlfmzqc292199.jpg
200 OK 6.8 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/mtzthlfmzqc1244mtzthlfmzqc292199.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash 745fc6ef1682b16c84c8e9fa5de3451d
162ce743b9ef8eeb3a691a76155b64240e226a83
85f0ea1707c5d83ac57481116ea1978bc025cc03620f4f6807d7fb4d26712f62
GET /upload/vod/2022/09-08/12/mtzthlfmzqc1244mtzthlfmzqc292199.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 6751
cf-bgj: h2pri
etag: "321a3aae3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:29 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=98XqHlaHN8mWhopLCBxv7lDs%2FvnKI5zJmrZjotjoZYYshVhQrX3t%2FN1SYlq%2F4iIG2QUKQn%2FialNINX5bK70TulyVHpaU9r2pm7N6%2FeMIb%2BfKbOfoRuuCYmOy7SlDkqMWGAXO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeaf8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/ni3lyyhsxk41244ni3lyyhsxk4282197.jpg
200 OK 14 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/ni3lyyhsxk41244ni3lyyhsxk4282197.jpg
IP
File type JPEG image data, baseline, precision 8, 240x320, components 3\012- data
Hash b788906495b33c9627b733cd55a6ba85
771af835c63d167277d7e9c93132c1fc40c79fce
e8ab0a0763fe9029a706e585bcb73fb75cd3d8a7b4458fa80dde90ec01ddbed1
GET /upload/vod/2022/09-08/12/ni3lyyhsxk41244ni3lyyhsxk4282197.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 13551
cf-bgj: h2pri
etag: "9d2afad3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:28 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i6erQtk3415rxynLDOGokre4TkhR3RXvqqr4hN9m1F2anqGblCpTVF7MEXn0oTiI9K4OxoP7Q%2FB5NOoD0BjBGUWmOo15Y8PQfaeO7fEvO%2Bz7kJ1XIBeIIdg9kseSZiKI14b8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeae8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/gmuchqje10v1243gmuchqje10v562157.jpg
200 OK 7.4 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/gmuchqje10v1243gmuchqje10v562157.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash a56aa66f7a927d0b8897c4ba02480246
36971c140a55836a56b529cb3c3c30bf291146e0
09074989df619c691ce48291019102f146b434ec57bee872838497081ce586dc
GET /upload/vod/2022/09-08/12/gmuchqje10v1243gmuchqje10v562157.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 7410
cf-bgj: h2pri
etag: "d9bf149b3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:56 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6245
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Hjw3uKDpUFUyk0mMQ8pMj05JvICOzumkmVsLLnxpsmQl9Xu4HE%2F%2BDAxEP7KIul87p%2Busx1aWVjDCuDNpKJeQRs9uMFvlGpqlHDHW0itLtqPAwTsJVRhRnjwPo3Wb8XILnlGK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeb18e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/zc2zdgaegwl1243zc2zdgaegwl572159.jpg
200 OK 6.5 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/zc2zdgaegwl1243zc2zdgaegwl572159.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash f02ab6a3d5b8e3af7230d03c65bccf73
d1ba77ab397bf09fabbbc1d84ebcafbc8ce271e6
164bb673b9b605ccce45833f57cd38c231e33f44ea1b61fd2f2276ec4452edee
GET /upload/vod/2022/09-08/12/zc2zdgaegwl1243zc2zdgaegwl572159.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 6491
cf-bgj: h2pri
etag: "8d449a9b3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:57 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5821
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BGf0wWw9coRE6kU7SE79TWmQNvsbysZH2eIKDgMnyVYnsduZpCJ0EpMeVqUkWcgaNcACfcCVqzTOjbSC66cis1A7du8HchHnCu34cMRpMCPuF2sm8GM3kiHqJpfssk3Ne27X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeb28e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/pydpim4qp5s1243pydpim4qp5s582161.jpg
200 OK 8.3 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/pydpim4qp5s1243pydpim4qp5s582161.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash f66067a56ba98961cade8b5de46bed8c
6deaabc4086a824d77c74a6d170f783bef34a7a2
a3cb587b88d9f70a015e538c3388dbd0afb4b680d41417204eb7acb23b344105
GET /upload/vod/2022/09-08/12/pydpim4qp5s1243pydpim4qp5s582161.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8275
cf-bgj: h2pri
etag: "2ac91f9c3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:58 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 6273
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2FWajboPl39eFJwtPWzXKrJFrVEK5UdrABy6A7uVD%2F48qk1e63IQCFViUo5amjY3dPaHl%2B5zBAYe6l9%2BDAV7TSzeN%2FFKEug03rS7LGtnwKQ29TrjTfFi6OGB8bVFSjacvCCL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeb48e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/vds5yxmr3qb1243vds5yxmr3qb592163.jpg
200 OK 9.2 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/vds5yxmr3qb1243vds5yxmr3qb592163.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash c96da9610af4d80f3306df3311d66209
d84e04fc6f7e9b12fa1c36e0f688885dda410bf8
d9cfc729664374832809373b1a3629356cfbf7535f3b1f6935ea3e2a1ff035d0
GET /upload/vod/2022/09-08/12/vds5yxmr3qb1243vds5yxmr3qb592163.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9178
cf-bgj: h2pri
etag: "6052a59c3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:59 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5170
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tOnJo4wTKWRmJOyBzv01e8qTwnBiAY%2Fm00H0oZERQQCBCHGBUj0KPk5CWb4zUFNgtQN5nouBlJoITDzBFz9InWgG6im8lT0uQ7LkKQmgmGmgUIdEK0F3FOlEnTOp5F50kBkQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeb58e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/b4o2f1s0zx11244b4o2f1s0zx1002165.jpg
200 OK 9.3 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/b4o2f1s0zx11244b4o2f1s0zx1002165.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash 884e48d848c697796b8b151c5d552701
50a174be2759e7ec7c9cb6030473f924e7f4b38e
8721115d74491c1d86d8e4c2aeff7b0c740dffbc7496ee6920110402e891d0aa
GET /upload/vod/2022/09-08/12/b4o2f1s0zx11244b4o2f1s0zx1002165.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9287
cf-bgj: h2pri
etag: "ea8c3b9d3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:00 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NXLzuFvHbxIX6V8YXmbXfoZsg9EfN%2BwBPJ2hCM%2F4cRs7C9D2DupkUrykgRg73CVzXxWki7BWRd9xCVqDFBwtjUQzFwBY0Nvxh7hN7WXkjbKGs%2BPtkH0UkSZhW5eQw9Dt18oX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeb68e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/images/video-mask.png
200 OK 107 B URL HTTP/2 www.pgurg.xyz/template/pgysvip/images/video-mask.png
IP
File type PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced\012- data
Hash 6a5ee87ff75437cb480df839f36004fd
eac66370f99601cb7febef320c9540d4593cd856
c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa
GET /template/pgysvip/images/video-mask.png HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/template/pgysvip/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/png
content-length: 107
last-modified: Fri, 07 May 2021 10:47:36 GMT
etag: "60951ac8-6b"
expires: Sat, 08 Oct 2022 17:42:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/htg10ngxaml1244htg10ngxaml012167.jpg
200 OK 8.1 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/htg10ngxaml1244htg10ngxaml012167.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 3x4, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 240x320, components 3\012- data
Hash 4e2ed1e206015404defe055ff8237d35
23ecdc7f2d9d1380db79b55ecddca35ddcdc079f
49088ca680e077cd5815c7279e527adf51972e545812af393e9b612bf21acae5
GET /upload/vod/2022/09-08/12/htg10ngxaml1244htg10ngxaml012167.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8114
cf-bgj: h2pri
etag: "f3c1d19d3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:44:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5868
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SYcIeSUoYS0hRgqDwesR7nzNK69JFtKL3KAe7%2BNdUovtceqYbLpvUsu6FCPwkKea0jgI6VLNTMABt256mCKp9O7yq4b2LT9F3ELC2W3rAcM8oTRqBp%2BnWMjqOaxWfz3xZmPe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edeb88e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/mdu3kwdvsen1243mdu3kwdvsen082121.jpg
200 OK 8.6 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/mdu3kwdvsen1243mdu3kwdvsen082121.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash c49435c66080909b9097d7178ee0d683
38cb01e215fa08d3ec33518e7e5ddded5cf281de
b1f6ee7840623fd92053ea06995b87c23e89debef84ed74e710888a48e1b1eba
GET /upload/vod/2022/09-08/12/mdu3kwdvsen1243mdu3kwdvsen082121.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8593
cf-bgj: h2pri
etag: "bb50827e3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:09 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6LOWjuetxnVBl%2BHFUGYDcEVN3Md9QlXT1jyb2wjYUS4enxLLi7XiaXC87R8cM68GzQ%2FLN3ZPy2qq4eq4yXnpwWUF2G%2BneW1G3qfIAoa1ZrLm0%2B0kVDHbxUBBHcQmhz38drX9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edebb8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/dgmgu4hdern1243dgmgu4hdern092123.jpg
200 OK 8.3 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/dgmgu4hdern1243dgmgu4hdern092123.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 1fdfac2480ad966de02c3aeeaeadef1a
d3ea2dd3b81e5bb6c15cfe35ddbf768d608a20d6
87cfd5abb22077e6012e2eee52627f7157eb3a16b554b165cde412ffddd00e73
GET /upload/vod/2022/09-08/12/dgmgu4hdern1243dgmgu4hdern092123.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8270
cf-bgj: h2pri
etag: "a99ac7f3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:09 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s%2BQAr4eSLdxFEmXBl10f%2F96xS6O6yOadirR8p0t36vbHSnmLSqNJUmAHIOVTyYqGcHg3M6PE6P1SFbgtr4L4g2KAs7Koy60%2FGCjHB5l5Wj87ng6b6ZYngT%2BD0G%2F2qtE0TY2E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edebc8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/ddleiarq2vo1243ddleiarq2vo342131.jpg
200 OK 12 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/ddleiarq2vo1243ddleiarq2vo342131.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash db5771fa8ac54a4bfc86708cde3f99b1
23aabe07934f48ef095831ad5bbfee76e2e23200
dc9b10aa8623e59a849f061532168f28788c760a0a1e24184f45f5a9de7b5b07
GET /upload/vod/2022/09-08/12/ddleiarq2vo1243ddleiarq2vo342131.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 11980
cf-bgj: h2pri
etag: "90a4b28d3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:34 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KraxJ8PW%2BrqrhebEPYXvVYkoVew60Wpxup4KoRdZOmfL7fUPUy3Wg6fHoP2AmwvGOX2272wauS0Bm9%2FskmQ2216mJN6pKs0YybR8RdkL6glSyLx5ag%2FUrdM29w%2FQmfJ%2B7V25"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edebd8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2020/04-23/18/eej3kbyyncp1807eej3kbyyncp0311689.jpg
200 OK 2.5 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2020/04-23/18/eej3kbyyncp1807eej3kbyyncp0311689.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash d7028abeb47f2503c243e692da4dfc10
0ad6b85dedcd944fee59ae39dcd0925749280297
73f21b9feaab778c62a05670fbc50ff69e2372d133f6e0ffbbf3961e8c803183
GET /upload/vod/2020/04-23/18/eej3kbyyncp1807eej3kbyyncp0311689.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 2548
cf-bgj: h2pri
etag: "4aaaf0ef5619d61:0"
last-modified: Thu, 23 Apr 2020 10:07:03 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 151
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQMtYCKqah8oDwf8mgG4IST3BgPhSnffMHkR4zCIao4CPEPjl6%2BZD6ZWpoLBDwK%2FKh2ahSbIX5efmmAz1D10xH7cEVy6Q4H26jrf5V%2FcJd2G8hRzijX0GcmwWJRrrcCOAFea"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edebe8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
pg.doitalie.com/news/data.php
200 OK 348 B URL HTTP/2 pg.doitalie.com/news/data.php
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
Hash 38347476771341814842f5646c2d19d1
d3bdba496e71742a9adb9e1c3a235dbb15f002b8
09cdbfd28b686fadb24180011f5f44b47902069fa8db66e268e098889c22aaa1
GET /news/data.php HTTP/1.1
Host: pg.doitalie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://pg.doitalie.com/news/index.php
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.21.6
date: Thu, 08 Sep 2022 17:42:32 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-encoding: gzip
x-country: NO
x-cache: BYPASS@waxm3g7zj00000f
X-Firefox-Spdy: h2
kvhdd.com/3a18042ae802ca6796e7d42a7d4a8b3a.gif
301 Moved Permanently 162 B URL HTTP/2 kvhdd.com/3a18042ae802ca6796e7d42a7d4a8b3a.gif
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /3a18042ae802ca6796e7d42a7d4a8b3a.gif HTTP/1.1
Host: kvhdd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: text/html
content-length: 162
location: https://kvtlll.top/3a18042ae802ca6796e7d42a7d4a8b3a.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2020/04-23/18/luh0p2hm4c51807luh0p2hm4c50411691.jpg
200 OK 12 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2020/04-23/18/luh0p2hm4c51807luh0p2hm4c50411691.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash cacc7b74767c01932eba1916f0729045
8ad02785272527b018ea2357d4eccdf1aa42c7a1
a010c85463613688a1556c6bbdd4e34782094a04831438ef75a9ba1d5c93bfc4
GET /upload/vod/2020/04-23/18/luh0p2hm4c51807luh0p2hm4c50411691.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 12490
cf-bgj: h2pri
etag: "816971f05619d61:0"
last-modified: Thu, 23 Apr 2020 10:07:04 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5664
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vh%2BQqKXwUkMDipImGK8mEAKoA34STkDMr7TPCNNxqkb%2FDiNfgyhJ2zOp91AKKrq13YGzEVYUVZ1m6MG8U6tPOkoVFjXISCqt%2B4ieb3eYteAyP%2B8yP8Bx8LaqIiLCpr0Sftpy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3edebf8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2020/04-23/18/prkdyel1dqm1807prkdyel1dqm0511693.jpg
200 OK 15 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2020/04-23/18/prkdyel1dqm1807prkdyel1dqm0511693.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 19ab30c15468a108ce2541cf79b79913
d3165efd74728488f79c984b51eac251809306fe
b829ddcdebc967ac2fffe345bb570991fb404736fbd33dfac42551df3eba55b4
GET /upload/vod/2020/04-23/18/prkdyel1dqm1807prkdyel1dqm0511693.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 15125
cf-bgj: h2pri
etag: "a78bf4f05619d61:0"
last-modified: Thu, 23 Apr 2020 10:07:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5664
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L0ZJtvpgnF6bZ%2FDWDdIBPL6VOu0HK53PdXRkEg2nJKM8vW94Y%2FOgSeqnhUjMnBmAg65Ic1TALFDQzsnoDKqLC3QHBt3gD2rLVRwAb4D%2FrRfGcHgRs45%2FsohWMJQgqCMRx9Ol"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3eeec38e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2020/04-23/18/2g2anqxndhs18072g2anqxndhs0711697.jpg
200 OK 9.8 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2020/04-23/18/2g2anqxndhs18072g2anqxndhs0711697.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 66d0623b24e228e2949d70c0722eb204
d7e16b26087a96b671004d1001ac3242fa64c787
2acdad83ad6ad4885d9cfa695146b4ac773ca5cb709f9e2f7455b8a2bc620564
GET /upload/vod/2020/04-23/18/2g2anqxndhs18072g2anqxndhs0711697.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9812
cf-bgj: h2pri
etag: "26bf6f15619d61:0"
last-modified: Thu, 23 Apr 2020 10:07:07 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5664
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fxmcEpfAJCVPS%2B5wD2JgPk7E%2F6vZhergL9BcNS%2FZiaYzYPC7k8QHuZHrZIp%2FMT0lDwUFOfcGVP5vs2iQQoZF%2B26hYZ4fX7koURah%2BldwI9EZf9TS%2BbLHjpjox%2FEMQEbIXwSZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3efece8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2020/04-23/18/ctb55cojkya1807ctb55cojkya0711699.jpg
200 OK 9.3 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2020/04-23/18/ctb55cojkya1807ctb55cojkya0711699.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash e21af3c4a2630e2f591be7cce8806d17
8e88ce24e7049ea1a799a15caba6f1be91c60cb6
85c9dcf920460e2f0c6c92c9f0ec062c475407509d1653d21a582fb8541ae9ca
GET /upload/vod/2020/04-23/18/ctb55cojkya1807ctb55cojkya0711699.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9330
cf-bgj: h2pri
etag: "8c672f25619d61:0"
last-modified: Thu, 23 Apr 2020 10:07:07 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5664
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EsrTHgRLxYLQ18kOBoiBx3kkNcjrpSQDn5WZutQJl8r%2BW0PWPDt4nRDccq8Y6PhdruodB47Rx1LjAtWIlDfsW0zMVshq0H9T%2B6Zahez%2FYiUAl29xFWx2hNpnzR%2BLdLoKwIot"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3efede8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/1ismbmqd4oi12111ismbmqd4oi591797.jpg
200 OK 12 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/1ismbmqd4oi12111ismbmqd4oi591797.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f5060893a67ddab96b5bd3f02022aed5
e9fbdcb3b622898047f2829395746ced55daf1cf
4704c9fd5064c08afb58b3fb6850b05fc677703b51c72f2dcd686d46139b257d
GET /upload/vod/2022/09-08/12/1ismbmqd4oi12111ismbmqd4oi591797.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 12202
cf-bgj: h2pri
etag: "9e2782439c3d81:0"
last-modified: Thu, 08 Sep 2022 04:11:59 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ztIBwGdhT1%2Bzp6XsZm5FqPLafGHI%2FPsGh3U5ht6JHhU4hSlR7pjjnSPoVG48fo6bpAKOwb2GC92YbQEA5RwlhllHaovCZrSYx9TPjUCWwEaV8Ztow1zsOf9a0sn04c7vlu0f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f1efb8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/t5wko5bpyyk1212t5wko5bpyyk001799.jpg
200 OK 9.3 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/t5wko5bpyyk1212t5wko5bpyyk001799.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 1a9f3e13fccb9f62d768a1ed3d7735e1
2a32f2c16a962256a7d3ea64c19a27c07c42ea7a
d78b4115cd2a087ce22a13ff118f9db4788e6bc2a3a0cf47da2f97d661d3bfea
GET /upload/vod/2022/09-08/12/t5wko5bpyyk1212t5wko5bpyyk001799.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9274
cf-bgj: h2pri
etag: "b4bc52539c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:00 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 151
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o3lB6htyh%2BsVYZF14wQ9TBlCj9YGr0G6jYF8EVxvkbzVdNcNuWxpFqNg4%2FUk9v10XVU4uCc7eLkdoElsnwz1LPrYMHyR0dGVxqqu9HUmuwDV5%2F1U4Ki91oId9cXcGiVsMh2Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f4f398e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/yyntzfjms2z1212yyntzfjms2z011801.jpg
200 OK 8.4 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/yyntzfjms2z1212yyntzfjms2z011801.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash fa26cacf0312fd47e2ec9124dcb3c245
f68f92344e0885e8745f5e0a16406ce991f9e7eb
fa2ba77df47a4e52c28b85b300c93516f3ff6d5168d346efe604869e6ec87136
GET /upload/vod/2022/09-08/12/yyntzfjms2z1212yyntzfjms2z011801.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8376
cf-bgj: h2pri
etag: "f15902539c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:01 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 151
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uND4zXSn%2Fh%2F7D3AjRgSn10%2F89vDWZ%2B7FPqgZHCyqSkHdm%2BN%2BhyeNTKWRUAGgp5mpPefL59kWRZa69jKlkstDUyWhBdUw58TpnL9Z60RAw%2FxMe4O9Vh3jO77JlUyJ135SErls"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f4f3b8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/images/video-play.png
200 OK 1.6 kB URL HTTP/2 www.pgurg.xyz/template/pgysvip/images/video-play.png
IP
File type PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced\012- data
Hash be7ca0a4a7c0317398a11162b1e09b75
5dbe6a02524cfbf5f5111478a71f91a9259056b5
cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4
GET /template/pgysvip/images/video-play.png HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/template/pgysvip/css/zui.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/png
content-length: 1567
last-modified: Fri, 07 May 2021 10:47:38 GMT
etag: "60951aca-61f"
expires: Sat, 08 Oct 2022 17:42:34 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/hl1ggbvpn0f1212hl1ggbvpn0f021803.jpg
200 OK 7.2 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/hl1ggbvpn0f1212hl1ggbvpn0f021803.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash eccdd1479627792b2d884ae8598351b5
90725d22ba3623a13a6d09d54051fed551f5e287
9de78b0c4cb17ce30bfa9e0fe5ec612d38fe3d18845a28b9aa868fc739e4a8bc
GET /upload/vod/2022/09-08/12/hl1ggbvpn0f1212hl1ggbvpn0f021803.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 7224
cf-bgj: h2pri
etag: "deec172639c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:02 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 151
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FHEmM%2BWgbB1BiPvUhheCGf2Uzu64hSmBSouZiK5kTEScrRTGvJ%2F8JyTi5NJMFH3rL45Z2CeIbU%2FrxhaXpME2AG7%2B%2BL1GFS6QN09ySaT4MTLdJT9tarsHbl2Q0ZLKmEGrYgip"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f4f498e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/axhh3tp1rlz1212axhh3tp1rlz031805.jpg
200 OK 11 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/axhh3tp1rlz1212axhh3tp1rlz031805.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash cbcd620bdece6cf11607c31e34a512b9
c53b8179786eb802ef72ac64bfec374d1ee240b4
7892a8c505907bd4b8799f581553eb78bf89d8e48152b5f5bd22f319252e8a8d
GET /upload/vod/2022/09-08/12/axhh3tp1rlz1212axhh3tp1rlz031805.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 10856
cf-bgj: h2pri
etag: "bccfa22639c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:03 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4539
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UkWgRgyKQ28iBV%2FquHIp2KUhEZ%2BjNLI%2BulAG4C0u5EaE6IPggi50pUrXwSG3uNyDrpknnSm6Dycz6C%2FNzGV0nbvUWWTv1tGaFmaYA9nXDuNknFpWX4ek9duQihO1yjD%2Fsiqn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f4f4b8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/iyuxrccucar1212iyuxrccucar041807.jpg
200 OK 14 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/iyuxrccucar1212iyuxrccucar041807.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash b055d254c41308f78dd123458b36d37b
9194e7981d514688963f2c71c87acf8b0c897bfb
296b4ec3bf406709f64c1419f35db09f7662ffd98e7c4f137d1ead48480595ac
GET /upload/vod/2022/09-08/12/iyuxrccucar1212iyuxrccucar041807.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 13610
cf-bgj: h2pri
etag: "b87b2f2739c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:04 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VYF2k7SzHBkolJsxuhJjDFnsat7kDVn7gXMwAKVbhm9Z0CR7WQ%2FnpiWNij3wfg6FAo8JB6werLiKNCVRpOvDOZa7eyhNpSG8owAI3InC5nEvE5UWMxawMySavh4Tt0DpSNLm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f5f5c8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/1oi1tynenxy12121oi1tynenxy051809.jpg
200 OK 9.0 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/1oi1tynenxy12121oi1tynenxy051809.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f317295015916b5fab7a00d5ca2aa372
e51bc4921661e1dd4f4189237a8a4f10d27d4836
d3a8f39ec399fc722338a403c5315bdea52a18de9ad5a80660daa022a3465de4
GET /upload/vod/2022/09-08/12/1oi1tynenxy12121oi1tynenxy051809.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 8979
cf-bgj: h2pri
etag: "7662b72739c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:05 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5129
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E%2Bz5QW32GzI2G3umXJ0mOJQr%2BPPfQxVgbJ8TVwUo3ETXRsi7wxF8TtkHXJi1fLCxhV1uDWCCJRCkdll52JEEUCMk5TZ9l8%2FH3A6sr8VtiSa0bGDZwbNmbeeR0Eu60p5T67EG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f5f5f8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/1whk3en35yj12121whk3en35yj061811.jpg
200 OK 16 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/1whk3en35yj12121whk3en35yj061811.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 5e49fa2578afff56510698c7f6b90a30
43da9cf4c39f533b4ec0f6a687be05dc7ba2ff82
c815bf05b1c97657cb435cae26bfd78a171a32f40adb004430958007d40711be
GET /upload/vod/2022/09-08/12/1whk3en35yj12121whk3en35yj061811.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 16483
cf-bgj: h2pri
etag: "c8d442839c3d81:0"
last-modified: Thu, 08 Sep 2022 04:12:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5134
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dFfDuX2UrLh7cuzyCTHssDCaVsGNb04Veam2AOnrMSPv4tFY6cIeSEk%2BYrHfzTh2QlTxwU%2BIbhbCDnDINDeVzR%2FzZgD5JmZJYNmhexEad6yHi%2FP5YfiDFnWvY7PVU4IvsCuj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f5f628e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/yuoitq2e5zc1241yuoitq2e5zc562053.jpg
200 OK 9.2 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/yuoitq2e5zc1241yuoitq2e5zc562053.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 3501798fa3433b6945d1bd68ea172e10
279e7428c07b16cf3feacc64f70ca1d04bffc81c
46a34abc56966ac6d18598e01596d75f1bb8aafc3a4742f834eb8f1d4e67a2a5
GET /upload/vod/2022/09-08/12/yuoitq2e5zc1241yuoitq2e5zc562053.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 9224
cf-bgj: h2pri
etag: "50dda533dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:41:56 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=avNxVcXEimN6fTsvS5jQMpFN%2BgczpTEFExYuOg6YP9Ay0mPTqnWAdLJzabXXjvGCTGk3Db7CZpi%2F03xCOawdcS7tZodL4U%2Bqmp20new0Gw43MgWWubsX3%2FbqnCHK9iwQRAUD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f5f648e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/srnu2iofvop1243srnu2iofvop312125.jpg
200 OK 6.9 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/srnu2iofvop1243srnu2iofvop312125.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash a6056c30200694fbc2c26e088d091885
e64eac6c04a077cd79b6d2e6c2a6a2d6d502c4b3
8635ab349568e0d6eea26b085c77baee56e943e7e910d1d93f20c59b5c45eef0
GET /upload/vod/2022/09-08/12/srnu2iofvop1243srnu2iofvop312125.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 6850
cf-bgj: h2pri
etag: "2bdb1a8c3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:31 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5867
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xvx70bfokMF5VHPCnhzmG2dbBq780UJwXTIEtjbNADC2OcIk%2BDtl5Us%2FmmyVW1Rlmetfnxg4vzPXcvUmpHj4p%2Bw07fxaetKj%2BpWW1N2TG%2FlY6Qy7rSTvm%2FcRPEmpwGZ0Al2s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f7f988e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2022/09-08/12/rbkjl1bsovo1243rbkjl1bsovo322127.jpg
200 OK 7.0 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/rbkjl1bsovo1243rbkjl1bsovo322127.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash f81a69dbdb1e5f0b6ec2279e6fad3b61
d194f43f49dea7cf50fe973b9e4acb482c12cdbb
36eb14b2382513caafd1b054c5f32ef3b5eaec5d3247a9de52bc81270e727f05
GET /upload/vod/2022/09-08/12/rbkjl1bsovo1243rbkjl1bsovo322127.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 7048
cf-bgj: h2pri
etag: "7274a08c3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:32 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5130
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F7GkLtF%2BpFU6MoGjST%2Bq4tLIiwGTOF8Yx9S%2BzIHgQ0ARxtLa%2B6HhK7J%2BcqfmW5DjI00uPs4OmGuJR1jaelFtUla020i%2FtBc2f5QAhx6VuaDk%2Fx7%2BZ7BbnOLFbi7J%2F1ExKshL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f8faa8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5413af3e08787e79f84bba6dde632028
eb65a3d99a1bc9ded4d9ac432e37075ad048170b
dc45a9a27a79f02ce66a40d8ffe1ed8b3e5f8a9889cb265f5f26f66181d6731b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 04:29:50 GMT
Expires: Thu, 15 Sep 2022 04:29:49 GMT
Etag: "eb65a3d99a1bc9ded4d9ac432e37075ad048170b"
Cache-Control: max-age=556634,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b3f8e97fab8-OSL
fmlb.netlbtu.com/upload/vod/2022/09-08/12/mr1cour4jie1243mr1cour4jie332129.jpg
200 OK 12 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2022/09-08/12/mr1cour4jie1243mr1cour4jie332129.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash 35095e50172e723c39c15902b927805b
7473fd4d74dabbaa5d7bbbf36c7e185cf1a72af8
850c42bff144accc9a3923276feeb8971963293ea7458c676f85f6e1156f9d3a
GET /upload/vod/2022/09-08/12/mr1cour4jie1243mr1cour4jie332129.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 12200
cf-bgj: h2pri
etag: "5cbd2a8d3dc3d81:0"
last-modified: Thu, 08 Sep 2022 04:43:33 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 4312
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4rKJnA0YaCaXtPJjiENkUTjdaqAlldGSt%2BQwhOLPczoNQMNtzhBlenfH%2FL7mvwDRJrEfHnHqxBZLS0NezT8e3tSgzqUv9hvjj4grdoBC6N2cJ2rmtaKFNhDRGq4NG7yam3lk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f8fab8e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ab483a98502e51c84bf374d9adc7047
5ffedd577d6421015e705a8e7a90942b8e415ab3
78bc15f4bbcab3723772fe69d73676c5c9c194b7901031f31ea9fae40dc690f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "78BC15F4BBCAB3723772FE69D73676C5C9C194B7901031F31EA9FAE40DC690F2"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 08 Sep 2022 23:42:34 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
kvezz.com/95ca29ec3907b3bf2d8a24b35e3eda22.gif
301 Moved Permanently 162 B URL HTTP/2 kvezz.com/95ca29ec3907b3bf2d8a24b35e3eda22.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /95ca29ec3907b3bf2d8a24b35e3eda22.gif HTTP/1.1
Host: kvezz.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: text/html
content-length: 162
location: https://acoossu.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/html9/advertised/advertised.json?refresh=202298Thu%20Sep%2008%202022%2017:42:26%20GMT+0000%20(Coordinated%20Universal%20Time)
200 OK 3.1 kB URL HTTP/2 www.pgurg.xyz/template/pgysvip/html9/advertised/advertised.json?refresh=202298Thu%20Sep%2008%202022%2017:42:26%20GMT+0000%20(Coordinated%20Universal%20Time)
IP
File type JSON data\012- , Unicode text, UTF-8 text, with CRLF line terminators
Hash 7e2ab1db554297f4b9fd0d06cf5ba4fe
c65fdf752d0a4885529625e7fe2a7b6cf50cfc48
5f545fdc187a2303f79c1cb96bc1977f6aaad75bde6c6a6c584ababd48a0077e
GET /template/pgysvip/html9/advertised/advertised.json?refresh=202298Thu%20Sep%2008%202022%2017:42:26%20GMT+0000%20(Coordinated%20Universal%20Time) HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: application/json
content-length: 3083
last-modified: Wed, 24 Aug 2022 12:58:26 GMT
etag: "63062072-c0b"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
fmlb.netlbtu.com/upload/vod/2020/04-23/18/3yop3ror3rg18073yop3ror3rg0611695.jpg
200 OK 16 kB URL HTTP/2 fmlb.netlbtu.com/upload/vod/2020/04-23/18/3yop3ror3rg18073yop3ror3rg0611695.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 4x3, segment length 16, comment: "Lavc57.89.100", baseline, precision 8, 320x240, components 3\012- data
Hash dfe4957db347c6c41954d562296a72bd
2016bbf5d41239b95619fe1380d96b276b48ac88
2740fe8320a00a2f7eb0a50b6108d0b84ff98eb1c2e55e5adfeea29cce22241e
GET /upload/vod/2020/04-23/18/3yop3ror3rg18073yop3ror3rg0611695.jpg HTTP/1.1
Host: fmlb.netlbtu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/jpeg
content-length: 15614
cf-bgj: h2pri
etag: "4aae77f15619d61:0"
last-modified: Thu, 23 Apr 2020 10:07:06 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 5664
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Pn7qO6sgU90yeYGitIcup3VGm6LN6W2CsuFGxEjR3GyV0%2B%2BC3MXJizWSJtcdz1BvBCZr1Cf%2BSh4VUYN647BvSwrk9jNb5nCSDQO9On%2Fr6bUqtaSo0JCn2oUnKDsfrVue1Nq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f7f968e18-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash c2f24ab89c24f9249296950d18defcf1
abb7192f88a20112393d304bff6b4d13f4bdea4c
38dea82cab192640a86a6f220435cfa39c05747636d1398fb5cac66264566ce4
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "38DEA82CAB192640A86A6F220435CFA39C05747636D1398FB5CAC66264566CE4"
Last-Modified: Tue, 06 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9137
Expires: Thu, 08 Sep 2022 20:14:51 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash cce8687237706b7848ffaf04043d15b5
daa8c631b93e97c0baf95374248524c6b4250479
84a21f2f83df49569e22f495c48a0f4f1d23ffa17d3f37b2ad1ff4e655054243
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "84A21F2F83DF49569E22F495C48A0F4F1D23FFA17D3F37B2AD1FF4E655054243"
Last-Modified: Thu, 08 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17282
Expires: Thu, 08 Sep 2022 22:30:36 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash cce8687237706b7848ffaf04043d15b5
daa8c631b93e97c0baf95374248524c6b4250479
84a21f2f83df49569e22f495c48a0f4f1d23ffa17d3f37b2ad1ff4e655054243
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "84A21F2F83DF49569E22F495C48A0F4F1D23FFA17D3F37B2AD1FF4E655054243"
Last-Modified: Thu, 08 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17282
Expires: Thu, 08 Sep 2022 22:30:36 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
acoossi.top/3acd6109c1789c68133976726c0d3a33.gif
200 OK 1.0 MB URL HTTP/2 acoossi.top/3acd6109c1789c68133976726c0d3a33.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 1.0 MB (1024160 bytes)
Hash 52748c8ca30fe48c822541046bceafc0
8640926f83b9c0d635fb28403505a7c0f0753857
2e292531362f37bf7a1cd01330efb234450b1f836e975c55f2b2179c0be32ae6
GET /3acd6109c1789c68133976726c0d3a33.gif HTTP/1.1
Host: acoossi.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 1024160
last-modified: Fri, 21 Jan 2022 10:02:31 GMT
etag: "61ea84b7-fa0a0"
expires: Sat, 08 Oct 2022 08:10:12 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 34342
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C2dxIy%2BZBgLCe1GRY%2FVzB6yH%2FoMQa%2Fn2wsBI9xmYxYR4FIIRKG2nD01W7zGw%2BsG6qsahEYH7m15ONxsAStYermhC1FDjTLTE6L%2BrNeZyVNpSzKHNIruv4Ax6jTOo4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b3f4a64dc83-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 33cd005b39d1c050e01c74924ef88ba0
c63e1cc27c6c39a6d9555cd7a21d57cc453fe763
a41b7598ab90236451f91775aaeedbf7d3bbc934946d73198d89e09368a3becb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A41B7598AB90236451F91775AAEEDBF7D3BBC934946D73198D89E09368A3BECB"
Last-Modified: Wed, 07 Sep 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8671
Expires: Thu, 08 Sep 2022 20:07:05 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
kvtlll.top/b1cdf3ca8d11b7c0b5f95c8cbe5f0f86.gif
200 OK 729 kB URL HTTP/2 kvtlll.top/b1cdf3ca8d11b7c0b5f95c8cbe5f0f86.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 729 kB (729369 bytes)
Hash 53d9d1d54befa25cdc0fffcae0123c91
50faead5d2778663e39eb8f7c99f0d6e0b9b7d54
db9f74a15518df5af75769bd98d3d72eb69641c257ea220e9b52cd4cc98cd112
Analyzer Verdict Alert quad9 Sinkholed
GET /b1cdf3ca8d11b7c0b5f95c8cbe5f0f86.gif HTTP/1.1
Host: kvtlll.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pgurg.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 729369
last-modified: Sun, 07 Aug 2022 13:16:57 GMT
etag: "62efbb49-b2119"
expires: Sat, 08 Oct 2022 09:18:56 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 30218
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7nHMq%2BOSJHXlPMt%2FvcOPCybI485IhdNTlH96sUleUOjUzBirSGde5OFbTF9X9LQm81dyM0522eh364NW8N62XPeNIFVWZRZqIt3L4FrfBltTPvfIZoFhmItltJrY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b4089c9b51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 4cb07c7229eef648ccb224515baa8cf9
7d2d13eccc7e22ab0ff12977143f3f2cb7434133
4c91b1e7c177e9bea51fad7722ae6a4632199b849a3a53d4a5495edc496beb78
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 14:36:06 GMT
Expires: Thu, 15 Sep 2022 14:36:05 GMT
Etag: "7d2d13eccc7e22ab0ff12977143f3f2cb7434133"
Cache-Control: max-age=593010,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b3f495f1c12-OSL
kvkaa.com/3b519146003914bff4ecede8a7b76f26.gif
301 Moved Permanently 162 B URL HTTP/2 kvkaa.com/3b519146003914bff4ecede8a7b76f26.gif
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /3b519146003914bff4ecede8a7b76f26.gif HTTP/1.1
Host: kvkaa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: text/html
content-length: 162
location: https://kvtbbb.top/3b519146003914bff4ecede8a7b76f26.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
kvtlll.top/3a18042ae802ca6796e7d42a7d4a8b3a.gif
200 OK 1.0 MB URL HTTP/2 kvtlll.top/3a18042ae802ca6796e7d42a7d4a8b3a.gif
IP
File type GIF image data, version 89a, 960 x 120\012- data
Size 1.0 MB (1001238 bytes)
Hash 4bd2014f3b4f56252da35a5af5628cfd
0a6f7d35317885b9e4a6d5a388c6f44686628f27
ed7fdbb2d11646a7ceb15c6531bd911fd2dc5989afff8219c124e1d61a81b315
Analyzer Verdict Alert quad9 Sinkholed
GET /3a18042ae802ca6796e7d42a7d4a8b3a.gif HTTP/1.1
Host: kvtlll.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pgurg.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 1001238
last-modified: Wed, 17 Aug 2022 05:38:46 GMT
etag: "62fc7ee6-f4716"
expires: Sat, 01 Oct 2022 01:03:51 GMT
cache-control: max-age=16070400
cf-cache-status: HIT
age: 664723
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sPV8I6Cmneybw9uWykse0Y5AXz3c0y%2BSk%2F9THrNLSaJcdQcfxi8gpVU0UI7%2BuitQhZoDdKooXru%2Bwnu1pYYiTr0P2bKGIn0TD9JtKslGXVxZAlWd4GK8K6LJx5x2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b4089cab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 37bd69d53e1db0abbd522440ce0fba07
be280da3df8f87886001bd94799ca78249844292
c190f14bea67c0a81c64601ea06d5c4f503c14153b36b2d0e8a48452bccdcf22
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:34 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 05:45:33 GMT
Expires: Mon, 12 Sep 2022 05:45:32 GMT
Etag: "be280da3df8f87886001bd94799ca78249844292"
Cache-Control: max-age=301977,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b3f8e49b50f-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 213953ccfddd416f7559cc083cd0dd81
1b31e62bfd8444eb1ce09c13c52857dc0e977cad
301823580f26f05e00ec877ed4fc3580c7a41b9266db991844092edecd8a940b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "301823580F26F05E00EC877ED4FC3580C7A41B9266DB991844092EDECD8A940B"
Last-Modified: Wed, 07 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12185
Expires: Thu, 08 Sep 2022 21:05:39 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
hm.baidu.com/hm.js?825d1f32fc06ddc604b6ed5cc0c7d6cb
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?825d1f32fc06ddc604b6ed5cc0c7d6cb
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (625)
Hash 4b03b2c180a31816f400a01cb4fb6f39
e29d6f70dc29041c38f729b110f3393a841d9fbc
78f4ac793457ff7696762468692487adaf2cb498ec4ca35f32726d14aa239047
GET /hm.js?825d1f32fc06ddc604b6ed5cc0c7d6cb HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11338
Content-Type: application/javascript
Date: Thu, 08 Sep 2022 17:42:34 GMT
Etag: 08c113bbe92f814ad7df5c1516c52e51
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=52357525262D8FD9; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash cce8687237706b7848ffaf04043d15b5
daa8c631b93e97c0baf95374248524c6b4250479
84a21f2f83df49569e22f495c48a0f4f1d23ffa17d3f37b2ad1ff4e655054243
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "84A21F2F83DF49569E22F495C48A0F4F1D23FFA17D3F37B2AD1FF4E655054243"
Last-Modified: Thu, 08 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17282
Expires: Thu, 08 Sep 2022 22:30:36 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
ttsetupian.cc/lm/cstggspk01.gif
200 OK 246 kB URL HTTP/2 ttsetupian.cc/lm/cstggspk01.gif
IP
File type GIF image data, version 89a, 320 x 190\012- data
Size 246 kB (246207 bytes)
Hash e9d0b8904ffb196466d811f2eec57882
4da1e9b9265080e1c692414460f7e5986d9aaf3c
91728f3daddc85394ce7e774a07c7945064566983ce19aaeb3fd3e1b4e7c4318
GET /lm/cstggspk01.gif HTTP/1.1
Host: ttsetupian.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 246207
last-modified: Wed, 24 Aug 2022 10:34:31 GMT
etag: "6305feb7-3c1bf"
expires: Fri, 23 Sep 2022 14:30:45 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
age: 1307475
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UBVbopdCx3nOMp4cjOqeUhXiS8yktQXgWKzzii2OWln3iZAfAnK3nQcnvJssOaUDyy%2Bs0S2UvOQJlG2h2xPgybp%2B%2F2M26kJ3l%2FSASTGJEvhNi5KTKkBaL%2Fn99ZuNaZnS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b412afcb51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 47255f6ac216a73aabb32744d9610250
ef056b56bea82dc4aa872627e6b3c1f23edbf8a8
df4f103340e80af5a0cadfda1974820f7317a9f091be243d52ac2a59732215ca
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:34 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Thu, 08 Sep 2022 13:29:07 GMT
Expires: Thu, 15 Sep 2022 13:29:06 GMT
Etag: "ef056b56bea82dc4aa872627e6b3c1f23edbf8a8"
Cache-Control: max-age=588991,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b412b2f1c12-OSL
acoossu.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
200 OK 400 kB URL HTTP/2 acoossu.top/95ca29ec3907b3bf2d8a24b35e3eda22.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 400 kB (400264 bytes)
Hash b722c3905b96f11823e04826aafdd50e
68b63b572a042d40ab210aa313b7ebbc372be5a1
630c6a955789d5bb6311db75ce52e57ff4c12074ef5a5a080cf5459f907e9dc1
GET /95ca29ec3907b3bf2d8a24b35e3eda22.gif HTTP/1.1
Host: acoossu.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pgurg.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 400264
last-modified: Mon, 02 May 2022 19:22:39 GMT
etag: "62702f7f-61b88"
expires: Tue, 04 Oct 2022 23:47:23 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 323711
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CbedQeOEOhUEj5QxsQefty9n2GcDFqHvRn6fZXEps31d%2ByFB%2F6C7MX98xeXBkgAial%2F%2FtfOMJBdtR1ZK9OaxRBRHNMpxdokl3ar6GcqKGPbvvfivThVSrWaTFRGbFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b417d72b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.cn/
200 OK 471 B IP
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Hash 7be147857a5ce684a41a4f0cc175c30e
dd6331f51068aa089dbfc468e0fb3133782eab0a
03a1f29a66e211e5171dcac7cbf4fb3c5f560ffc8fc94ed3150e09a909967098
POST / HTTP/1.1
Host: ocsp.digicert.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Thu, 08 Sep 2022 17:42:34 GMT
Ali-Swift-Global-Savetime: 1662658954
Via: cache16.l2de2[5,5,200-0,M], cache16.l2de2[6,0], cache5.se1[26,26,200-0,M], cache5.se1[28,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 08 Sep 2022 17:42:34 GMT
X-Swift-CacheTime: 0
Timing-Allow-Origin: *
EagleId: 2ff62c9916626589544521533e
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b329117fec9182d8099098aab5110171
ab0d51780fe8aa7f2ee2bf37e95336b2607956bc
8aca2f4d5f3984dba4a15ae1f47772d4f90fd59517773188ffe3804839fe790f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8ACA2F4D5F3984DBA4A15AE1F47772D4F90FD59517773188FFE3804839FE790F"
Last-Modified: Wed, 07 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21554
Expires: Thu, 08 Sep 2022 23:41:48 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
si1.go2yd.com/get-image/0wut3IuOIN0
200 OK 51 kB URL HTTP/2 si1.go2yd.com/get-image/0wut3IuOIN0
IP
ASN #54994 QUANTILNETWORKS
File type GIF image data, version 89a, 320 x 240\012- data
Hash 7a02a69b00eebfc2977f6d8417cf8141
2203e026eacda489b6e3aa673d5c14bb1526a6dd
e994a6c450acbc20fdca555a5a30d15af3af102f608bbd8a6a5bd295a1ee41ac
GET /get-image/0wut3IuOIN0 HTTP/1.1
Host: si1.go2yd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 50826
server: Tengine
x-application-context: application
x-kss-request-id: 385cb47819904891b6a20cdd2df33e9d
etag: "7a02a69b00eebfc2977f6d8417cf8141"
content-md5: egKmmwDuv8KXf22EF8+BQQ==
last-modified: Sun, 09 Jan 2022 13:06:09 GMT
accept-ranges: bytes
age: 1
x-via: 1.1 PSbjwjBGP2ks135:6 (Cdn Cache Server V2.0), 1.1 PSzjnbsxlb228:4 (Cdn Cache Server V2.0), 1.1 tb118:13 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1se91:11 (Cdn Cache Server V2.0)
x-ws-request-id: 631a298a_PShlamstdAMS1cc96_32919-8450
access-control-allow-origin: *
ws-s2h-acc-level: 1
X-Firefox-Spdy: h2
kvemm.com/ec9fcd758df74f805f29f72e8545d13b.gif
301 Moved Permanently 162 B URL HTTP/2 kvemm.com/ec9fcd758df74f805f29f72e8545d13b.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /ec9fcd758df74f805f29f72e8545d13b.gif HTTP/1.1
Host: kvemm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: text/html
content-length: 162
location: https://kvkaaa.top/ec9fcd758df74f805f29f72e8545d13b.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsorganizationvalsha2g2
200 OK 1.5 kB URL HTTP/1.1 ocsp2.globalsign.com/gsorganizationvalsha2g2
IP
Hash 38592ab6d7fad339e85579eb1c8aab01
847f065c2277a3fb9bdcf7cd1be206164a8bc753
d8eeb708db99714c3ecbbb140473003940382bbdd568dbf3820d6662a5ebc796
POST /gsorganizationvalsha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:34 GMT
Content-Type: application/ocsp-response
Content-Length: 1459
Connection: keep-alive
Expires: Mon, 12 Sep 2022 15:01:59 GMT
ETag: "847f065c2277a3fb9bdcf7cd1be206164a8bc753"
Last-Modified: Thu, 08 Sep 2022 15:02:00 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 337
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74797b424b15b4f4-OSL
kveww.com/1a182b41455cd11a06b7a6c90623f9cc.gif
301 Moved Permanently 162 B URL HTTP/2 kveww.com/1a182b41455cd11a06b7a6c90623f9cc.gif
IP
ASN #201106 Spartan Host Ltd
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /1a182b41455cd11a06b7a6c90623f9cc.gif HTTP/1.1
Host: kveww.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: text/html
content-length: 162
location: https://kvhqqq.top/1a182b41455cd11a06b7a6c90623f9cc.gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
hm.baidu.com/hm.js?8f32379eee08be6bc3f64bc742c8e9e1
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?8f32379eee08be6bc3f64bc742c8e9e1
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (626)
Hash 7f773202e45f98a9dec7adc6eca24b9f
8a1c5fd510db2cf87830d833df0c174cc7c04181
dbe8492b9d7570655dc4f83aecf50a2d01758e1e83d61d2b6182657930a1935a
GET /hm.js?8f32379eee08be6bc3f64bc742c8e9e1 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11339
Content-Type: application/javascript
Date: Thu, 08 Sep 2022 17:42:34 GMT
Etag: 13d15dafb83f3d8285a5eaa681bcd42f
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=BE32AD8D43FEE3A4; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
hm.baidu.com/hm.js?b592edaa246104be8e56d27ec22c9125
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?b592edaa246104be8e56d27ec22c9125
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (625)
Hash b90bb8fcc58b47c7becac4cc009c6e64
6439aaf2fa22de40c430bf5e17b5bd8f3def81a7
7ade33d81c3929121170e0cd6894c3905efa0bc2d6bf846354f5b132ff9b7c5b
GET /hm.js?b592edaa246104be8e56d27ec22c9125 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11338
Content-Type: application/javascript
Date: Thu, 08 Sep 2022 17:42:34 GMT
Etag: 6d8e576af6ea547c9f75aa0098c63273
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=5515F65E124E4080; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash eef6b70a45b7dc331629e8fc97da7e2b
e872e7ba0709d18dd7e3b749c8672f90874e0e65
e28d6f446a20dd4cd15bf63586f24407ec4c5ceb84c6fb81e11de71c54d9e3e7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E28D6F446A20DD4CD15BF63586F24407EC4C5CEB84C6FB81E11DE71C54D9E3E7"
Last-Modified: Tue, 06 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10045
Expires: Thu, 08 Sep 2022 20:29:59 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
hm.baidu.com/hm.js?e585e103707cbfb334332e7e88896efc
200 OK 11 kB URL HTTP/1.1 hm.baidu.com/hm.js?e585e103707cbfb334332e7e88896efc
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type ASCII text, with very long lines (629)
Hash 8fc9258abfaae02a9ffeb2efe2418f59
72e087092583845fe407651642499f6cdc7c497c
34b48d76e2a5e9f699f7cec0c9c239369d82043640b4b45d7e799a1cc52a8227
GET /hm.js?e585e103707cbfb334332e7e88896efc HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11342
Content-Type: application/javascript
Date: Thu, 08 Sep 2022 17:42:34 GMT
Etag: 3ffd837cb84f784c9e511a3e61f11a80
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=624410214F4DAC10; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
kvkaaa.top/ec9fcd758df74f805f29f72e8545d13b.gif
200 OK 902 kB URL HTTP/2 kvkaaa.top/ec9fcd758df74f805f29f72e8545d13b.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 902 kB (902313 bytes)
Hash 8b4a95ea7cfbb7fb4d2b18efca5145f3
d2966ecbeb7369620cce5dbcd15d0fe591d79648
dd5ff25f4d6931bd3d2ef86c1a8901853ee2503fd2d6edb264a61abb37c2b002
GET /ec9fcd758df74f805f29f72e8545d13b.gif HTTP/1.1
Host: kvkaaa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pgurg.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 902313
last-modified: Sat, 12 Mar 2022 15:17:28 GMT
etag: "622cb988-dc4a9"
expires: Sun, 02 Oct 2022 11:33:18 GMT
cache-control: max-age=31536000
cf-cache-status: HIT
age: 540556
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tFjBawTs0SE58WCsa%2BuYba86cHfFQSIztc1DwZSQpze7Ioz1HT8FjzbURKdjWZqecJwWNnVLyI58bpDIBaL8VayEmk16X9jwUgGBv94DWrL300V6kqhme5LuKc6M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b432fe276b7-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1177066816&si=825d1f32fc06ddc604b6ed5cc0c7d6cb&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1177066816&si=825d1f32fc06ddc604b6ed5cc0c7d6cb&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=1177066816&si=825d1f32fc06ddc604b6ed5cc0c7d6cb&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 08 Sep 2022 17:42:34 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=8F57A214E68006CC; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 34018132f1cde683348d042c969ca3ac
432455ea4f65ce313293ad0f1f04512e0280138b
45c738ee71c5c897b1223a1202efdd34917a1de513dada9a32c485d40e181383
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "45C738EE71C5C897B1223A1202EFDD34917A1DE513DADA9A32C485D40E181383"
Last-Modified: Wed, 07 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19989
Expires: Thu, 08 Sep 2022 23:15:43 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash eef6b70a45b7dc331629e8fc97da7e2b
e872e7ba0709d18dd7e3b749c8672f90874e0e65
e28d6f446a20dd4cd15bf63586f24407ec4c5ceb84c6fb81e11de71c54d9e3e7
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E28D6F446A20DD4CD15BF63586F24407EC4C5CEB84C6FB81E11DE71C54D9E3E7"
Last-Modified: Tue, 06 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10045
Expires: Thu, 08 Sep 2022 20:29:59 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62b1de1ac8be68445ceaa870a59faf3
fe887f1c903a22cc51c496b6098bd79cabefcc5c
d72db5deec8e47e3d91fbc1ae2d730c49e78fd047b0bddfd51a14f9306a47901
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D72DB5DEEC8E47E3D91FBC1AE2D730C49E78FD047B0BDDFD51A14F9306A47901"
Last-Modified: Tue, 06 Sep 2022 13:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21494
Expires: Thu, 08 Sep 2022 23:40:48 GMT
Date: Thu, 08 Sep 2022 17:42:34 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ddd396d59914d698defdc83110517259
4fa05dc73cc73e3dda5242bec4a1d222b58eebb6
9752f81cf3ba994fe291a054d476eefeafa837feff19cdffac8923c08c6a6c58
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9752F81CF3BA994FE291A054D476EEFEAFA837FEFF19CDFFAC8923C08C6A6C58"
Last-Modified: Wed, 07 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6723
Expires: Thu, 08 Sep 2022 19:34:38 GMT
Date: Thu, 08 Sep 2022 17:42:35 GMT
Connection: keep-alive
kvhqqq.top/1a182b41455cd11a06b7a6c90623f9cc.gif
200 OK 832 kB URL HTTP/2 kvhqqq.top/1a182b41455cd11a06b7a6c90623f9cc.gif
IP
File type GIF image data, version 89a, 960 x 60\012- data
Size 832 kB (832544 bytes)
Hash 8a1b22cb6be2662f8c75ace7480ea0e6
380d85b1d74b702a780ee04965fdb9908ab73171
928c9088a24d775a399ba9d24854b26a8a6a48bb1dd064d95b32c98d86dde7d0
GET /1a182b41455cd11a06b7a6c90623f9cc.gif HTTP/1.1
Host: kvhqqq.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.pgurg.xyz/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:34 GMT
content-type: image/gif
content-length: 832544
last-modified: Thu, 30 Jun 2022 12:03:43 GMT
etag: "62bd911f-cb420"
expires: Sat, 01 Oct 2022 21:09:24 GMT
cache-control: max-age=2678400
cf-cache-status: HIT
age: 592390
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bcfky7l5hQcec1vVmDBHlApRZHRDK03KP7KKiRs6NaMBzKdJuxtklLlbWokStv%2BJS%2FK2Z7%2FtZ1slx4L7pBiC91tXPeSpi53Of7OgVNwoFn0N6hH5wcM08nG2ehBE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74797b443b7075e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash cd4c00c6e07c253769c50f245c2984e7
ccb06309c629c402ae887e94cd4bfcb27c771384
530345bd146e96146fb9defd487cc4f87f5f68b4dd0cc4aa85da2cc6fd1c5402
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:35 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 17:53:28 GMT
Expires: Tue, 13 Sep 2022 17:53:27 GMT
Etag: "ccb06309c629c402ae887e94cd4bfcb27c771384"
Cache-Control: max-age=432051,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b441e4f1c12-OSL
u0071.com/9ef4f1d640934338bea53d331173f9a1.gif
200 OK 139 kB URL HTTP/1.1 u0071.com/9ef4f1d640934338bea53d331173f9a1.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 960 x 60\012- data
Size 139 kB (139388 bytes)
Hash a5b0e74df1797465e01cfc87422f9202
be7e59e32ba0f8a1d52759d7113521d591c4425b
2156bac1f7a54267c0bc620da31f7ea354f8f08ba2e7af1ea2114175c338df82
GET /9ef4f1d640934338bea53d331173f9a1.gif HTTP/1.1
Host: u0071.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:34 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 29 May 2022 12:22:41 GMT
ETag: W/"62936591-4f6da"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=595616895&si=8f32379eee08be6bc3f64bc742c8e9e1&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=595616895&si=8f32379eee08be6bc3f64bc742c8e9e1&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=595616895&si=8f32379eee08be6bc3f64bc742c8e9e1&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 08 Sep 2022 17:42:34 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=5E11E51F518F76AB; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=176509077&si=b592edaa246104be8e56d27ec22c9125&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=176509077&si=b592edaa246104be8e56d27ec22c9125&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=176509077&si=b592edaa246104be8e56d27ec22c9125&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 08 Sep 2022 17:42:34 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=8B27E88E114DFFD2; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
93533557591.com/109e604a3c6249d594c56004b700f28c.gif
200 OK 720 kB URL HTTP/1.1 93533557591.com/109e604a3c6249d594c56004b700f28c.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 80\012- data
Size 720 kB (719745 bytes)
Hash a371336a677886333a1e0e87f32df904
5d17beeea80b18e70073f0e54dfa9ad61e71b25f
18543a39e003823862ca88f74a899b953e82fc6f1771682b37d0b435d40644cc
Analyzer Verdict Alert quad9 Sinkholed
GET /109e604a3c6249d594c56004b700f28c.gif HTTP/1.1
Host: 93533557591.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "62ee26b9-afb81"
Date: Tue, 23 Aug 2022 20:58:55 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sat, 06 Aug 2022 08:30:49 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-21
Content-Length: 719745
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash eb8018f99f3a5acbaa71beedcc8b54f1
708e5148a797f4c2d18bceac978fd814e053247d
3904c9be53ac9a0dec6554c8845023af812b6c11274c2409759fba2475b6bca3
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:35 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 12 Sep 2022 14:37:58 GMT
ETag: "708e5148a797f4c2d18bceac978fd814e053247d"
Last-Modified: Thu, 08 Sep 2022 14:37:59 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 785
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74797b45cb4dfab8-OSL
hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=873056276&si=e585e103707cbfb334332e7e88896efc&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
200 OK 43 B URL HTTP/1.1 hm.baidu.com/hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=873056276&si=e585e103707cbfb334332e7e88896efc&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86
IP
ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd.
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /hm.gif?cc=0&ck=0&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=873056276&si=e585e103707cbfb334332e7e88896efc&su=https%3A%2F%2Fpg.doitalie.com%2F&v=1.2.97&lv=1&sn=35997&r=0&ww=1280&ct=!!&u=https%3A%2F%2Fwww.pgurg.xyz%2F&tt=%E8%8B%B9%E6%9E%9C%E5%BD%B1%E8%A7%86 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Thu, 08 Sep 2022 17:42:35 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=BD3418D4DE9D79CF; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff
ocsp.sectigo.com/
200 OK 472 B IP
Hash bb6b7ec09f93d6405822baf1f388ede6
32d4a165ca310b8c90d567aba2a3f60a2f5910be
3178fa09e9aaa6996e8ab46ead93961c39a0982f43824342d2ac8d86b060acf7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 19:10:52 GMT
Expires: Mon, 12 Sep 2022 19:10:51 GMT
Etag: "32d4a165ca310b8c90d567aba2a3f60a2f5910be"
Cache-Control: max-age=350295,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74797b449a59fab8-OSL
taiwtp1.com/img/960120.gif
200 OK 121 kB URL HTTP/2 taiwtp1.com/img/960120.gif
IP
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 960 x 120\012- data
Size 121 kB (120952 bytes)
Hash 8b1ce22d19b73e71ec05f04491df7cae
101ed504920b13424231d6fb3540fb7dfdba69e3
5a7a72fa04186d44d08de8b590fcf1644ad8370bc65007e51ba9300af2541dce
GET /img/960120.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:40:59 GMT
content-type: image/gif
content-length: 120952
last-modified: Thu, 10 Mar 2022 10:55:56 GMT
etag: "6229d93c-1d878"
expires: Sat, 08 Oct 2022 17:40:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
65686232255.com/53218c3090e04eccae534334cb03ed4a.gif
200 OK 580 kB URL HTTP/1.1 65686232255.com/53218c3090e04eccae534334cb03ed4a.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 580 kB (580315 bytes)
Hash 1a429adb0604b6dd52d269910a16df11
0e6e0b7135822c02ae159c14a1b4aebfa75b0982
819a4224605c47089d7456012a957beef9f0a59191a8a63e4c0aefa6c3ece6b7
Analyzer Verdict Alert quad9 Sinkholed
GET /53218c3090e04eccae534334cb03ed4a.gif HTTP/1.1
Host: 65686232255.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "630cc146-8dadb"
Date: Tue, 30 Aug 2022 03:37:47 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Mon, 29 Aug 2022 13:38:14 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-11
Content-Length: 580315
n6579.com/b8ca9e8def054d5284828d03b701ef43.gif
200 OK 654 kB URL HTTP/1.1 n6579.com/b8ca9e8def054d5284828d03b701ef43.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 654 kB (653713 bytes)
Hash 6e1b913d233fb64271527a796618f37b
a858c96c304244dfa9d5cd159a3a5c80c6b98598
4dc0708abb2de56eaee1961f8143ec911357863a2b259c4154701ddd128d3a37
GET /b8ca9e8def054d5284828d03b701ef43.gif HTTP/1.1
Host: n6579.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "62d16582-9f991"
Date: Fri, 15 Jul 2022 13:07:45 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Fri, 15 Jul 2022 13:02:58 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-36
Content-Length: 653713
89958716765.com/14112a98f9104043bc1d7e2e4ec39ac2.gif
200 OK 584 kB URL HTTP/1.1 89958716765.com/14112a98f9104043bc1d7e2e4ec39ac2.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 960 x 60\012- data
Size 584 kB (584025 bytes)
Hash ebf4ee75bbd43b703e1b1b861ba166e2
c241029604f77ad6b4f56894bc51decfededfde7
d6655adbfa7089435d168e9b1432e524f0bf11be8b80ddc499bef69bd5a376ea
Analyzer Verdict Alert quad9 Sinkholed
GET /14112a98f9104043bc1d7e2e4ec39ac2.gif HTTP/1.1
Host: 89958716765.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "630b2c84-8e959"
Date: Mon, 29 Aug 2022 02:06:29 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sun, 28 Aug 2022 08:51:16 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-36
Content-Length: 584025
taiwtp1.com/img/200200.gif
200 OK 75 kB URL HTTP/2 taiwtp1.com/img/200200.gif
IP
ASN #3462 Data Communication Business Group
File type GIF image data, version 89a, 200 x 200\012- data
Hash 03c13356e00c2033df2c88cb919251eb
f3a334a0366ddda6a87034f7d6c889c4d159dc8d
0c184e206259e8d0c54d3fc12d3d5332e9f6ff5f0404630fcb2daefe65fe1bfe
GET /img/200200.gif HTTP/1.1
Host: taiwtp1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:40:59 GMT
content-type: image/gif
content-length: 75259
last-modified: Wed, 09 Mar 2022 04:51:10 GMT
etag: "6228323e-125fb"
expires: Sat, 08 Oct 2022 17:40:59 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
u0053.com/ee2552e0433e4f19ab771ef923ba5299.gif
200 OK 37 kB URL HTTP/1.1 u0053.com/ee2552e0433e4f19ab771ef923ba5299.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 320 x 240\012- data
Hash 910f18fdc66120d774b5e52a309b0cfd
cf303808e3664ff87c387824d6f32df1df8af56c
01c54f3caed68e21a22c348b63a3e13e26a36ae0625f12d30d704f6d5d49db41
GET /ee2552e0433e4f19ab771ef923ba5299.gif HTTP/1.1
Host: u0053.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:35 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 29 May 2022 12:22:58 GMT
ETag: W/"629365a2-92cd"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
img12.360buyimg.com/ddimg/jfs/t1/139066/39/15574/959138/5fbb91e3E3869a786/8b3504e1a1356dd4.gif
404 Not Found 62 B URL HTTP/2 img12.360buyimg.com/ddimg/jfs/t1/139066/39/15574/959138/5fbb91e3E3869a786/8b3504e1a1356dd4.gif
IP
ASN #54994 QUANTILNETWORKS
File type JSON data\012- , ASCII text, with no line terminators
Hash 35345e84ce91218b0a5b76b672dc9091
2d5ae90e1fe8ad1eec3c6b47e0d4b0552e4c76de
7adf8138ed1c9dd83091779bb2e02e3b5f263d61b3ef8de74906e19affb0f054
GET /ddimg/jfs/t1/139066/39/15574/959138/5fbb91e3E3869a786/8b3504e1a1356dd4.gif HTTP/1.1
Host: img12.360buyimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 08 Sep 2022 17:42:35 GMT
content-type: application/json;charset=utf-8
content-length: 62
server: nginx
cache-control: max-age=60
via: http/1.1 ORI-CLOUD-HUN-MIX-18 (jcs [cSsSfU]), http/1.1 SSHXbaoji-UNI-01-MIX-47 (jcs [cHs f ])
access-control-allow-origin: *
timing-allow-origin: *
x-trace: 404-1662658953253-0-0-0-10-10;404;404-1662658953231-0-0-0-47-47;404-1662658955326-0-0-0-13-13
x-via: 1.1 PSygldLON2xi13:3 (Cdn Cache Server V2.0), 1.1 PShlamstdAMS1se91:19 (Cdn Cache Server V2.0)
x-ws-request-id: 631a298b_PShlamstdAMS1cc96_32480-18138
X-Firefox-Spdy: h2
33869213.com/83ba7e533208445fa097e17c23a48e1c.gif
200 OK 37 kB URL HTTP/1.1 33869213.com/83ba7e533208445fa097e17c23a48e1c.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 320 x 240\012- data
Hash 7ded2042a95c6c192a2c06e07075236e
1fc93212b6c5296bb2e0b403884c9b37e93c27a6
8095fedc5bd55fab27f9e37eed655234aab58b2925ea2494b04dcf5ae089f699
GET /83ba7e533208445fa097e17c23a48e1c.gif HTTP/1.1
Host: 33869213.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:35 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 24 Jul 2022 07:53:43 GMT
ETag: W/"62dcfa87-b269"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
n0355.com/4cb9d81b8882419cbeeb73a2ee309b60.gif
200 OK 60 kB URL HTTP/1.1 n0355.com/4cb9d81b8882419cbeeb73a2ee309b60.gif
IP
ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK
File type GIF image data, version 89a, 320 x 240\012- data
Hash 6656d5ba1f702e4338255e951b70173c
85082b9f04b84c937868b59a57eebd3e44f1fa78
5d675c4e1a501b8c0a542c1d6a1ed8a64f3670bdff6f74231ccf708c14591657
GET /4cb9d81b8882419cbeeb73a2ee309b60.gif HTTP/1.1
Host: n0355.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 08 Sep 2022 17:42:35 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 29 May 2022 12:22:27 GMT
ETag: W/"62936583-eb62"
Server: WAF/2.4-12.1
X-Cache-Status: HIT
Content-Encoding: gzip
unpfqc9.com/1000c6da2a3c4746b97daa78f8f1b65f.gif
200 OK 112 kB URL HTTP/1.1 unpfqc9.com/1000c6da2a3c4746b97daa78f8f1b65f.gif
IP
ASN #7483 Skycloud Computing co., Ltd.
File type GIF image data, version 89a, 320 x 185\012- data
Size 112 kB (112447 bytes)
Hash 41a695940d0c5bd9d1f0ad33ab681ccf
f6e7d43fa8b39e8cd6cca9ad9c5aaad86a82a318
92459e1266396e2ec84ff14b58a73bf069e195fcda3836f45a2550847e3df1a6
GET /1000c6da2a3c4746b97daa78f8f1b65f.gif HTTP/1.1
Host: unpfqc9.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Cache-Control: max-age=604800
ETag: "62935fa0-1b73f"
Date: Fri, 15 Jul 2022 00:02:36 GMT
Content-Type: image/gif
Server: nginx
Last-Modified: Sun, 29 May 2022 11:57:20 GMT
Accept-Ranges: bytes
X-Cache: HIT from yd11_13-cdn-g01-la2-26
Content-Length: 112447
6655cy.com/cdn/ashkad.gif
200 OK 311 kB URL HTTP/2 6655cy.com/cdn/ashkad.gif
IP
ASN #133199 SonderCloud Limited
File type GIF image data, version 89a, 200 x 200\012- data
Size 311 kB (311408 bytes)
Hash 99ed707e8993e93bff73dbb369e89b3e
21d1ef9c09316253b35c31df246c4cef8766df62
99d1c91a54ee659b7055b38390708fb6405f9b8e8f4d70a20616ced03adbfb62
GET /cdn/ashkad.gif HTTP/1.1
Host: 6655cy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Sep 2022 17:42:35 GMT
content-type: image/gif
content-length: 311408
last-modified: Mon, 15 Aug 2022 08:53:58 GMT
etag: "62fa09a6-4c070"
expires: Sat, 08 Oct 2022 15:41:03 GMT
cache-control: max-age=2592000
server: cdn-ddos-cc
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
p.qlogo.cn/hy_personal/3e28f14aa051684245c4e0cfebfbd4b5cd5c322c76272c5e26cad46e1f3c6ce7/0.png
200 OK 1.5 MB URL HTTP/2 p.qlogo.cn/hy_personal/3e28f14aa051684245c4e0cfebfbd4b5cd5c322c76272c5e26cad46e1f3c6ce7/0.png
IP
ASN #132203 Tencent Building, Kejizhongyi Avenue
File type GIF image data, version 89a, 960 x 80\012- data
Size 1.5 MB (1495356 bytes)
Hash af737e86fc083a958d9f25203333f0be
cb0ee5d9a71efdf61b622bd4175998bdeecca900
e1cf6ef72cde6e3f9bffa69e86e769e09e82d18f781a235fc977a5644e141a9a
GET /hy_personal/3e28f14aa051684245c4e0cfebfbd4b5cd5c322c76272c5e26cad46e1f3c6ce7/0.png HTTP/1.1
Host: p.qlogo.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Qnginx/1.4.4
date: Thu, 08 Sep 2022 17:42:35 GMT
content-type: image/gif
content-length: 1495356
vary: Accept,Origin
last-modified: Mon, 18 Jul 2022 17:08:11 GMT
cache-control: max-age=2592000
x-delay: 885 us
x-info: real data
x-bcheck: 0_1
x-cpt: filename=0
user-returncode: 0
x-datasrc: 2
x-reqgue: 0
size: 1495356
chid: 0
fid: 0
x-nws-log-uuid: c91cfec4-978e-46bd-930d-0cb330d7fa80
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/css/zui.css
200 OK 0 B URL HTTP/2 www.pgurg.xyz/template/pgysvip/css/zui.css
IP
GET /template/pgysvip/css/zui.css HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: text/css
last-modified: Fri, 22 Apr 2022 03:05:22 GMT
vary: Accept-Encoding
etag: W/"62621b72-16462"
expires: Fri, 09 Sep 2022 05:42:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
www.pgurg.xyz/template/pgysvip/js/jquery.config.js
200 OK 0 B URL HTTP/2 www.pgurg.xyz/template/pgysvip/js/jquery.config.js
IP
GET /template/pgysvip/js/jquery.config.js HTTP/1.1
Host: www.pgurg.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.pgurg.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 08 Sep 2022 17:42:33 GMT
content-type: application/javascript
last-modified: Tue, 07 Dec 2021 05:56:06 GMT
vary: Accept-Encoding
etag: W/"61aef776-1469"
expires: Fri, 09 Sep 2022 05:42:33 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
172.120.206.91
93.184.220.29
103.170.15.91
20.205.46.66
23.36.76.226
43.154.254.32
104.21.63.42
78.46.107.74
163.171.140.79
47.246.44.211
39.156.68.163