5.189.148.101 21 kB IP 5.189.148.101:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (11300), with CRLF, LF line terminators
Hash a6f7d60bd7777cf53a2b3a0e824a9554
25bf63cc1f50f245e47c876e3a39e89f4adfd37e
6d38884753de4f6e38c6a535c4960e6fea1121752adc650d9ac1627fc54b20a4
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ETPRO INFO DYNAMIC_DNS HTTP Request to a *.25u.com Domain
GET / HTTP/1.1
Host: nejbgcj17j.25u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 02:29:10 GMT
Server: Apache
Link: <https://nejbgcj17j.25u.com/wp-json/>; rel="https://api.w.org/", <https://wp.me/QEbw>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js?ver=1.3.6.9
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js?ver=1.3.6.9
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js?ver=1.3.6.9 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/codedropz-uploader-min.js?ver=1.3.6.9
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hYpzKlb%2BWSi2OVdgHbim8GHa8qABHPkOLLQVRk5VR8423St7k4X2ANNs6ZDqZvHY24%2FBpVRXCPgUH2kAjGsSWjx62sK4Caj9ZbL34hyQU1FaRLwWSsQCF79nX%2FiNrUedaQdtTA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447a9a2db50b-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s56oXpYxigd7K6hHksh1sOK%2BEL8b3mnSM48yF82PyRbVrmBBBC9YSGysHacfQ6O8pdBVQixemaLkq6P3KqnmhmD1UNsxkbk3EbPy3mY1H%2FijoLqt93Sn66p3sEXmfCPzof1I4g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447a9c6db517-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.4 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwaJBs75Zkr0JZvjpYoQTYAjozN9KzeceSyXZqUQVNpl1neOcg0pAkr2S4C8WaNQGfaZPDNpMz8ZA9y3GkEGc81WQVHeeonYh%2F%2FWtmSwicDClKU4r0siyqjxqYTlpx8geT1NaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447a9c4fb505-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2taTUTB2sdzSuSF9%2FuT7UcJ%2FSTnTNot%2Bpwb233SdjCfQmYuOTicsfbXr1J%2BDdqCyLPDF6z8Pl7uLRwJ8nfAmJtSrcqm3%2B3g9qH4%2FsQsK8P3PJxaEx0sr6lQ2Y%2B%2Bhjm793M0kew%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447a9d92b4f3-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EmtNslRY0IwChfA7R47ilZgUBrSAFo8apiunYcZzaGcBR17Byje5vUi4V1s5jILOL9Y%2Bf%2Fwox3yrwjC3QBFhfsINqwc10zB8A0Cz%2BCOXq63MX63z2uAYJJcXHcjNKmDbDHFZRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447a9ca10b4d-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/disqus-comment-system/public/js/comment_count.js?ver=3.0.23
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/disqus-comment-system/public/js/comment_count.js?ver=3.0.23
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/disqus-comment-system/public/js/comment_count.js?ver=3.0.23 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/disqus-comment-system/public/js/comment_count.js?ver=3.0.23
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MqpT1JhuyXV2P0%2Ffyt1VU6w2j5p8KEEAFAepwlvqtdrA4LqbtOf3g3qFNqV3eBJTXFJZm5jyR7y%2B1AaqvttSsvt1RowmkCYBIxs2uCbD7nqjOF0oBnYE0f3O8H59MtXLWXTFYA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447aba38b50b-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/themes/fairy/js/navigation.js?ver=1.3.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/js/navigation.js?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/js/navigation.js?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/js/navigation.js?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6ELBufGBI6sEzXwiLnGYizimJ3BJLgV4quC96xDfjeRBAC7sAIOL7xRpNABcfiKOWVbZNGRV%2FtxWF56DZFdlG2OofzEZNgciJSEtWboUr%2FzoyzIJrLmpMA2ujxwOt%2BVdqk%2Ba%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447abc83b517-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.3.7
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.3.7
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/theia-sticky-sidebar.js?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lEB7lCq%2B3laRO9YwLfC48X9hgrINutMChckW9pcIOu175NquH4eKGMs%2FesvO5BJqjrEXjvfvlH1BPkA%2BAggWH%2FnOi2D7qpv1fuTh76PozWJnbJ6R69aLdplYLl%2FEbdYfbSWdaA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447abc5db505-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TMEeJT1dX3jf%2BlEWS%2Fw2VPkRhOetHvhExwt%2BAlpcuReSkdAN9a9VngRLvXcL2ZfpUwrEIpVoNT7weNb%2FlUpYhqFCO%2B2fpwm5MTUsHHCH0g%2BIAF3ZyIUPQxdzugMqCYOvaef%2B2w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447aa888b50c-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/uploads/2019/06/Golden_Diamond.gif
172.67.208.241200 OK 86 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2019/06/Golden_Diamond.gif
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type GIF image data, version 89a, 1170 x 100\012- data
Hash def86695d60e8a12f09b49210a5d47bb
fc66c7994232dae38c2bd1461000690b88488c25
72fd0962d4aae8f5c84837907ed126f028c297ca3c559031b9cd24f849c71ad0
GET /wp-content/uploads/2019/06/Golden_Diamond.gif HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/gif
content-length: 86068
last-modified: Sun, 11 Sep 2022 00:24:10 GMT
etag: "15034-5e85bcc4b6903"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lr%2FQcfSNv7A1dZdZ%2Fi8JdgRJ6k7djKz0Jf2rxSzbP6FdtU5ZX0kL3bfoxwJYV%2FE7W4%2FK3C4PS4igz2eIb4v%2B54YtiaZse3f0lE43yhbQYoh7qcol6M9ItSp7ZP4Yw2kyBHw%2BxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ace540b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/06/48%CF%87%CF%81%CE%BF%CE%BD%CE%B7-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%AF%CE%B4%CE%B1-MILF-0011.jpg
172.67.208.241200 OK 120 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/48%CF%87%CF%81%CE%BF%CE%BD%CE%B7-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%AF%CE%B4%CE%B1-MILF-0011.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 759x1000, components 3\012- data
Size 120 kB (120420 bytes)
Hash 23834bcac347369df239c6ebc2ec0505
2e87fdc5dbf27a68fdccca99950cbf012c7cc1f5
c8ffe794a1718daa0f0bddc85ced473b0b77178eb14e236df8a0462a4e8fbacf
GET /wp-content/uploads/2023/06/48%CF%87%CF%81%CE%BF%CE%BD%CE%B7-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%AF%CE%B4%CE%B1-MILF-0011.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 120420
last-modified: Thu, 01 Jun 2023 05:31:36 GMT
etag: "1d664-5fd0ac007f1bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1910
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MNXj0iGJqwJmiX5HTrJe38noD7sz0aiznHGHXxg8sCjEYj0SOF2lYUeSEXvKTFjUL%2F4E0msVpO8f4aTQRpPnKH%2BCWEKFXaRlLQ4sWXIeMERnf2RXfzszO9dWh%2Ft%2B7I39kvtoYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade5a0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001-1.jpg
172.67.208.241200 OK 141 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001-1.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1150x720, components 3\012- data
Size 141 kB (141263 bytes)
Hash 7f77bf52bb6b3465cdebccf085d8d36e
5f56aba9aac7afc2e5dc88558af85442483b1689
ff0f279d93c80a16292cb580b6e6f4808af8abb353ed341d2a3d1edc1271872a
GET /wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001-1.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 141263
last-modified: Thu, 01 Jun 2023 05:33:26 GMT
etag: "227cf-5fd0ac68cd6e9"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fGZ%2FVBIOw9v3eaWRIuHp9tbY5obdQFxKd%2Fwj%2B9IiJd0IUF1agCDrzsfK%2F0ZaQ6wT6AIJGdp02IDQlvQ1FcFKVMVjypoh0xRLyR2QYOG1B%2B5Irx%2FgPOI4UdMSc8QS%2F8mMLMlEvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade5b0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/06/%CE%9B%CE%AF%CE%B1-0001.jpg
172.67.208.241200 OK 70 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/%CE%9B%CE%AF%CE%B1-0001.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 813x1000, components 3\012- data
Hash d990a0bf866179ad27326de15782f9db
12903a78679bf748363619b5244edb38be7979ff
eb2f64280b88638d90a5c43be979a662fa61a4941d9ffe9363df7222a58a3312
GET /wp-content/uploads/2023/06/%CE%9B%CE%AF%CE%B1-0001.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 70273
last-modified: Thu, 01 Jun 2023 05:37:09 GMT
etag: "11281-5fd0ad3dca2aa"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1910
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sQ4UEnghFbrk2XUmmrB6wbTcBMu8i8wwFwp8pvzG%2FBkSZZAkNptnAF5HgZ%2FLpctvPQ24uZg3%2FY4FD3hEJCeErxhf%2FdPUJoLReRQug%2Fm3zobYdeRtAxQMrZDOxhQBy5WRuVgOig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade590b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/06/%CE%A0%CF%81%CE%AD%CF%80%CE%B5%CE%B9-%CE%BD%CE%B1-%CE%B1%CF%81%CF%87%CE%AF%CF%83%CF%89-%CE%BD%CE%B1-%CE%BA%CE%AC%CE%BD%CF%89-%CF%84%CF%8C%CF%80%CE%BB%CE%B5%CF%82-%CE%BC%CE%BF%CF%85-%CE%BB%CE%AD%CE%BD%CE%B5-%CF%8C%CF%84%CE%B9-%CE%AD%CF%87%CF%89-%CF%89%CF%81%CE%B1%CE%AF%CE%B1-%CE%B2%CF%85%CE%B6%CE%B9%CE%AC-0012.jpg
172.67.208.241200 OK 58 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/%CE%A0%CF%81%CE%AD%CF%80%CE%B5%CE%B9-%CE%BD%CE%B1-%CE%B1%CF%81%CF%87%CE%AF%CF%83%CF%89-%CE%BD%CE%B1-%CE%BA%CE%AC%CE%BD%CF%89-%CF%84%CF%8C%CF%80%CE%BB%CE%B5%CF%82-%CE%BC%CE%BF%CF%85-%CE%BB%CE%AD%CE%BD%CE%B5-%CF%8C%CF%84%CE%B9-%CE%AD%CF%87%CF%89-%CF%89%CF%81%CE%B1%CE%AF%CE%B1-%CE%B2%CF%85%CE%B6%CE%B9%CE%AC-0012.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x750, components 3\012- data
Hash 504ee773cfc00cb49e7b720f9afcc5f5
1fad1f435b0a8154ae394a5fb54db0e80478e8c8
7cd91c6d65b4973ae2962b4979c4de2adbab9ede8cdb62e8ca78bafe205f2635
GET /wp-content/uploads/2023/06/%CE%A0%CF%81%CE%AD%CF%80%CE%B5%CE%B9-%CE%BD%CE%B1-%CE%B1%CF%81%CF%87%CE%AF%CF%83%CF%89-%CE%BD%CE%B1-%CE%BA%CE%AC%CE%BD%CF%89-%CF%84%CF%8C%CF%80%CE%BB%CE%B5%CF%82-%CE%BC%CE%BF%CF%85-%CE%BB%CE%AD%CE%BD%CE%B5-%CF%8C%CF%84%CE%B9-%CE%AD%CF%87%CF%89-%CF%89%CF%81%CE%B1%CE%AF%CE%B1-%CE%B2%CF%85%CE%B6%CE%B9%CE%AC-0012.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 57598
last-modified: Thu, 01 Jun 2023 05:09:46 GMT
etag: "e0fe-5fd0a71f4de5a"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1910
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yCjiz7PayRavrdIaRj5Le8%2Bns53jpoHy7bJV0aspXDRLHvZnw64WT2VevkwqbFuk2LJHCMnpbixAmaG%2FRJGKMiC4RYPyH3NEaeMl%2FAnXEkhZdZc3VpO0HUvA1jhW2%2Bw8dNyxkA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade5d0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/05/%CE%9C%CE%B5%CE%BB%CE%B1%CF%87%CF%81%CE%B9%CE%BD%CE%AE-%CE%B1%CF%86%CF%81%CE%AC%CF%84%CE%B7-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%AF%CE%B4%CE%B1-MILF-0006.jpg
172.67.208.241200 OK 146 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/05/%CE%9C%CE%B5%CE%BB%CE%B1%CF%87%CF%81%CE%B9%CE%BD%CE%AE-%CE%B1%CF%86%CF%81%CE%AC%CF%84%CE%B7-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%AF%CE%B4%CE%B1-MILF-0006.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 941x750, components 3\012- data
Size 146 kB (145883 bytes)
Hash daf47079d99e721038e70363c1267789
e7cf194921340498a3a597867e4af452bcde3a93
911dc918065bdbdabe30877b0b5832ccf822362697440ecbda7db2ac4edf9bc1
GET /wp-content/uploads/2023/05/%CE%9C%CE%B5%CE%BB%CE%B1%CF%87%CF%81%CE%B9%CE%BD%CE%AE-%CE%B1%CF%86%CF%81%CE%AC%CF%84%CE%B7-%CE%95%CE%BB%CE%BB%CE%B7%CE%BD%CE%AF%CE%B4%CE%B1-MILF-0006.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 145883
last-modified: Wed, 31 May 2023 02:19:16 GMT
etag: "239db-5fcf3f2535a8e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1703
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rqJSOoFAMklt2hrghgeLxhG%2BbIwUVvRiBU4KsKuYU4aE3lR0if8%2B6Hjnn9xLoPdqmXUQBw%2BGvTB9mCvNwgnRao9%2FIgIJMchRL%2BR%2BwvdtGqKMw8Y7Z1vbtfoIY%2BRkqWjm9NGKBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade5e0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001.jpg
172.67.208.241200 OK 188 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 188 kB (188415 bytes)
Hash f5279a43d6a97ded1c4e9ee672f4736e
79d78a44c0c6b03d6e58a42dd296179155083c9f
6a2353c2c4bf7cd84e15481be6cc94cc0382009c4e77e3ebdac6bf4571e6d247
GET /wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 188415
last-modified: Thu, 01 Jun 2023 05:17:18 GMT
etag: "2dfff-5fd0a8ce3706e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oNiKjuCNplNa1wDmemw%2F5tK4zTRa3XIsCpZl6yEDFX2KGHNU5i9BUwzfYR3aPRlpSlB2Pfxp4YdP7Xyf86AsboRJevBOzzXvKtL5aRjBhIJEyJ55XxDUOIJbnKbhqz%2B20xpQ4Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade5c0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/05/%CE%9C%CE%BF%CF%85-%CE%B1%CF%81%CE%AD%CF%83%CE%BF%CF%85%CE%BD-%CE%BF%CE%B9-%CE%B5%CE%BE%CF%84%CF%81%CE%AF%CE%BC-%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CF%84%CE%AC%CF%83%CE%B5%CE%B9%CF%82.jpg
172.67.208.241200 OK 286 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/05/%CE%9C%CE%BF%CF%85-%CE%B1%CF%81%CE%AD%CF%83%CE%BF%CF%85%CE%BD-%CE%BF%CE%B9-%CE%B5%CE%BE%CF%84%CF%81%CE%AF%CE%BC-%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CF%84%CE%AC%CF%83%CE%B5%CE%B9%CF%82.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1000x663, components 3\012- data
Size 286 kB (286395 bytes)
Hash 85e3f98770cedc6ea5505323d341a3fb
edbc719fc80d5954d678d768d6153f80036958de
d0e65dbfe30a6b947d73b3e0b463fc5886eda93d68bd871d5e5422109bc529db
GET /wp-content/uploads/2023/05/%CE%9C%CE%BF%CF%85-%CE%B1%CF%81%CE%AD%CF%83%CE%BF%CF%85%CE%BD-%CE%BF%CE%B9-%CE%B5%CE%BE%CF%84%CF%81%CE%AF%CE%BC-%CE%BA%CE%B1%CF%84%CE%B1%CF%83%CF%84%CE%AC%CF%83%CE%B5%CE%B9%CF%82.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 286395
last-modified: Wed, 31 May 2023 02:41:53 GMT
etag: "45ebb-5fcf4433846fe"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1703
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1OrWhkItbaFxnsUxc6NpNC6gP6muJ9XsRqcqFdF3uUlL%2FRdecdys0tJlCBcul6YyIYKT1yODQAzQ%2FI0kDJmo3HDtKkA2fnq6WtOvuuZamQcnKQWzZPtUE%2Be%2FzmUN0QRP43McTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447ade620b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-includes/js/masonry.min.js?ver=4.2.2
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/masonry.min.js?ver=4.2.2
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/masonry.min.js?ver=4.2.2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XWbOU7hrY3MbuGaLolsKp2yEOqZkDMBA1IKrqZjeCbu05GjaVORddbO3%2B6L4to6IwBfMjGZUs%2F%2FVNjMVOKcgbk%2FapmJloN4UII7DlpyFn98ewF4oOrGjmvMCv8Ilf6TnzaF2pg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447aca3eb50b-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.3.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.js?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=24uzEgdkC9Ge1p10qDJzNogv%2FrYfmdcdzo2moj1QMekBZ7MuhiaziSYjDxeuvd29XMv4yPXoFrCCc59csdM6uXzSo8mPBFTb%2BWaCe2WPocNHlylaaHAdYFt8olntC7ie1AfVgA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447acdbab4f3-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/imagesloaded.min.js?ver=4.1.4
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/imagesloaded.min.js?ver=4.1.4
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=scWIKt47mQAr5v%2Bu1t0kXyNE751YdjRQ0PRWHRk8hFi%2B52ywe0pfonjevrSBVkgIredNFKEl4pwwo3Ao5yOm0x%2BN1KwN%2BjeaoWvH4PPCKZLT3wcHFEdle32PKxTVxgCzuR46bg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447accad0b4d-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L684iw3w36ncoq59KjTH27ggBi0%2FngCtDFkAfVr%2FiEgzExDVXYYOTiUYQFPSGG%2BmNubZCE22CFInYBoQPDXtZyLJ6j6SFaq4VTbyWwa07EF8ZLbMSQ1bpc2XCnaZEgCgszeZhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447acc88b517-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.6
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LY7kz%2FikCU6hemBOLfsObAZMq3U7P5qbZq5jx1H1h0KiWYkM0829ahfIXTEV%2F3MZzJ%2FAtPx%2BEqfdz%2B2DLF2u8MYVLntiFMDkxlZVJi2k%2B76207jP7Vqm3K%2FhkV8%2Bw39B7Zkpmw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447acc61b505-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E8Dnc0HV8GFYmnknplpf%2BXhWUEE%2Bp0Tb5li%2FeWG%2Fa7idM8ShD7SraFwA3%2FqyhrBTqYgviegv1J5obQ%2BDsgSfgObOW7Y1PRnpG94bBm1GttDLrPFXugHvUyjEY%2B8aiBg4z3UgQw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447ac897b50c-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/uploads/2021/02/Greek-Porn-Koursaros-Ellinika-Gamhsia-0005-1.jpg
172.67.208.241200 OK 60 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2021/02/Greek-Porn-Koursaros-Ellinika-Gamhsia-0005-1.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 750x563, components 3\012- data
Hash 7b32296cd616f53af5f960a06adfc1c6
f496335a5dae7f970374831581870504e0057263
ba4c185292e233e020be9f49baf01d0c8129beb42aa4cca1f044f78e85645963
GET /wp-content/uploads/2021/02/Greek-Porn-Koursaros-Ellinika-Gamhsia-0005-1.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 60349
last-modified: Thu, 25 Feb 2021 17:01:04 GMT
etag: "ebbd-5bc2c18d34ded"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1703
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DPECU2trSfK7HKZ4fJ9NoyQBIz49Sy5%2B9G%2FQx3tVekRCsKVSTojtaJAwXgGknuXxDSwAoLKwI4FeOdVV8wnkMzfwh%2FBW7wtVFyeir9ZaJ6K8TE6fMlVMydi4m8VPG8hd0tgwLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447aee660b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2019/06/eroticportal.com_.gif
172.67.208.241200 OK 82 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2019/06/eroticportal.com_.gif
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type GIF image data, version 89a, 1003 x 90\012- data
Hash 0dd722468ff282b07e40987b6176e0c1
36e54c097caebe8826b3bcf99a36950938f4a195
6cb6e9c14fd6d87e4522981c630e9531dd326194cfcaa79c7281608cf37e6efb
GET /wp-content/uploads/2019/06/eroticportal.com_.gif HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/gif
content-length: 82016
last-modified: Wed, 25 Aug 2021 12:38:42 GMT
etag: "14060-5ca6187cb8532"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F6Jx0eH1AGGEsFIllgMkOEddSAe78F1799n%2BxZwh7Y%2BWEGOJ2g3Qk8Loc6xaOjoEwlQggecTeFlCPlA%2FvjKLLJyWI8FxjyYvwVIolbepgRMEfiicymAHKUcbKJ%2FNtP7DR8AHag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447b1e750b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001-2.jpg
172.67.208.241200 OK 41 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001-2.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 720x401, components 3\012- data
Hash da9fd29dcd3c05111ed2b86412f91385
f6959822bc86fb1460c0cb1eb39850e91d2a9593
ae47d92d9df3b10dbaea49ac8faec1930732577af868659d1307ef76a52375a8
GET /wp-content/uploads/2023/06/Greek-Porn-Video-Koursaros_00001-2.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 41375
last-modified: Thu, 01 Jun 2023 05:49:03 GMT
etag: "a19f-5fd0afe6ae716"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nuwUiJFj%2BSJYg%2F2tUJXLjJQQlmKSsv5w1eHFQQxK7ofJJFG2rQJmmQrMtKX9mj1sm1ubY3ayugsY7UDUowftD7FrV5PYswbKTuRJkMPSfE29jQULc%2FV6ae5bxKEFLkMAhmQP0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447b2e790b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.7.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lz4aDqO8D8KnzcijdVncBBPy71ACaVoVtQp6nBbriS7FyF8BDFVnSydcuITm6cxhzXlrc66GYv2ukYSMd0NwJcFyAe5adnCgfaZXztBKgVDnMjqBVHQQAyAuBRGi3kN3HQGF6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447b4ca2b505-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/uploads/2023/06/%CF%84%CF%81%CE%B9%CF%87%CF%89%CF%84%CE%AE-%CE%BC%CE%BF%CF%85%CE%BD%CE%AC%CF%81%CE%B1-0032.jpg
172.67.208.241200 OK 61 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2023/06/%CF%84%CF%81%CE%B9%CF%87%CF%89%CF%84%CE%AE-%CE%BC%CE%BF%CF%85%CE%BD%CE%AC%CF%81%CE%B1-0032.jpg
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x751, components 3\012- data
Hash 87922d78ab46a5edf1ccdb84d76d6ed2
1df970aad1166103a3a8c1dd394d861ff6a40bfc
e6a6c755947601bda43d716badc081ac5dde41e785e2b44051009579cda91370
GET /wp-content/uploads/2023/06/%CF%84%CF%81%CE%B9%CF%87%CF%89%CF%84%CE%AE-%CE%BC%CE%BF%CF%85%CE%BD%CE%AC%CF%81%CE%B1-0032.jpg HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/jpeg
content-length: 60690
last-modified: Thu, 01 Jun 2023 05:43:36 GMT
etag: "ed12-5fd0aeae752f3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1910
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BqhfY5wEvi1pjFTnF5E%2F5FVjuOg9kEh5g9FnqcuaPKIQw9kuHwkahR5XLy1MUpmebOrA8SUEeBhbr3OjQjaXddDVj1UbRrkn8fjkvsRuCGcNs7puk103nagWYeyndGJAJrrWqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447b2e7a0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.koursaros.net/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.2.2 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/css/dist/block-library/style.min.css?ver=6.2.2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KSvK1g4FY%2FrIfgSLcS%2B%2FBz0TBG%2BdStbmZLl2gYi3Kc%2BLcBQJ4wV3zNcz3ZGueZhaEnv4vnOrvpDjrfpSnTb1ypZSz%2BuZZfYfJGU8oOPAStCqxSLh2Tb97oThAyLTDGL8wGt7XA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447b48c1b50c-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YPeLSQWXhKzcg5Pn3QI9jT4qU7PAQannaxftbsfTZNbNKXR%2BALrnkhCM00TFlXnjt3jdDVDa3inDKuTdQWFOdZtmOJQF85lKm0d4X%2Bdu7dTqhlNEEHZIQudsVdGz7bRN%2FQt48Q%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447b4a66b50b-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2PvxzSFL%2FkNoTusrxzg%2FK34%2FExq%2BdtNWZq8DC1Jj21YqDepVJR8a%2BdqkMxQ5k40DZapbypK17ckxXxTAuGnigccHmK2j8Q5heT0yti8QVk2Ot3zr6X%2BE1yzDhVQA9CWiyuxJHw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447b4e1cb4f3-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.11
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gvFLHJCVwd8114oXG9qNCR3r9uZRxl24hRQwfMDAshp0pKd52UdRcgvhsmUIRSTd1Jh4YkK2pi%2FCAecojocLxbMjmZa9GGJGn3BV72RZURPlHSjRz%2BbIx%2FyhVS1N8K2dgllEnw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447b4ccc0b4d-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:14 GMT
Location: https://www.koursaros.net/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LN59tLSUffsPmj34jy4lOQ5crMmjsdjJDOjXCZmBNmMe2irVb%2FGczJv%2FBbIaEzcEJEQhkyRIIVMz6hzYAhmSePUkT1bjOFXy0STf22XTpCaY7L4efh0hWoKB0FCnZ%2B9HJHy46A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c447b4cbab517-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/uploads/2019/06/yourangels_escorts.gif
172.67.208.241200 OK 188 kB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2019/06/yourangels_escorts.gif
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type GIF image data, version 89a, 1200 x 90\012- data
Size 188 kB (187608 bytes)
Hash 917c98f4dc4f2be6bd54f86a140e48df
e2147f428a5c75e64417f237ba5e973a9c1f5db7
49ddca32ad5d2c635bbd81b195feddc2cdea343ee52f6a11cd292baaf175fea0
GET /wp-content/uploads/2019/06/yourangels_escorts.gif HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/gif
content-length: 187608
last-modified: Sun, 13 Mar 2022 06:31:34 GMT
etag: "2dcd8-5da13b711b6a7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XeNh4yUNtzPQSPADqCFT8jk5%2BhODBGzVM%2BKMwkPt2gGglpCr8m7IoxPadHXr7EuqFJRyhoDSdzAUD%2Bze4S9fTQ59U4qIa5afLk6rHjqgxIuFf7DA11GbJAabFER7q7cYNAmmsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447b7e8f0b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
theporndude.com/favicon-32x32.png
104.19.128.100200 OK 1.6 kB URL GET HTTP/2 theporndude.com/favicon-32x32.png
IP 104.19.128.100:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint36:7E:5F:96:4D:A3:4E:39:D0:AF:4A:A0:B9:F4:DC:61:4A:06:9A:15
ValidityMon, 01 May 2023 00:00:00 GMT - Tue, 30 Apr 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash e05d03cbbf9dc784d2f4a3ecb4ad6987
113aaa3555a1e3646fbfd19b4eb8156084e14db3
fadc546b6a83cd7a968038d42d7dc6b98b25f4c535d95e0607877faaceaa4bad
GET /favicon-32x32.png HTTP/1.1
Host: theporndude.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/webp
content-length: 1576
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1823
content-disposition: inline; filename="favicon-32x32.webp"
vary: Accept
access-control-allow-origin: https://s1.myteamdev.com
alt-svc: h3=":443"; ma=86400
cache-control: public, max-age=31536000
etag: "71f-5dbddefb-94cda11995fd4df4;;;"
expires: Sat, 01 Jun 2024 02:29:14 GMT
last-modified: Sat, 02 Nov 2019 19:54:35 GMT
strict-transport-security: max-age=31536000
x-frame-options: allow-from https://webvisor.com/
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1094968
accept-ranges: bytes
server: cloudflare
cf-ray: 7d0c447b8cbbfac4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 9c320af7047f9368e0536de66d6d2658
2cdb5bfd4bb4ddf85559ff29d06ed964e04119ab
64bb80bd8947d7d658ce8f20fc2bebab85d391bf2baa953c67201ebd194cd1b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 02:29:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash e652bad2b09a182c5ecc3fbbe94a3216
c04ac4c3f7ff96d5e7d9830c49568eef3410f923
7cf7221b2d9a88eb9f7e15943c0bf9b9a65c7138763ebf472a56ee96ea6b9d50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 02:29:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&ver=3.0
142.250.74.132200 OK 585 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&ver=3.0
IP 142.250.74.132:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint48:E3:15:66:FC:EA:15:BF:D2:34:C1:DD:60:D4:23:A3:63:57:89:8D
ValidityMon, 08 May 2023 08:25:18 GMT - Mon, 31 Jul 2023 08:25:17 GMT
File type ASCII text, with very long lines (884), with no line terminators
Hash 4141c1ac9cc1ffacdc784b125f0d7244
89c325ce8b22908a023bbad51aea1387b746b956
204e6468292c36632bd940817ef002fa771f0a7de448602d9fe7fcaafb48a194
GET /recaptcha/api.js?render=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Fri, 02 Jun 2023 02:29:14 GMT
date: Fri, 02 Jun 2023 02:29:14 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/uploads/2019/06/Banner_GlamourEscorts.gif
172.67.208.241200 OK 2.5 MB URL GET HTTP/2 www.koursaros.net/wp-content/uploads/2019/06/Banner_GlamourEscorts.gif
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type GIF image data, version 89a, 1003 x 90\012- data
Size 2.5 MB (2480627 bytes)
Hash 68b704fa145381922ea57c256d8e191b
d1243036d47253cd9c8f9f22de62ec387bd9dd36
5e793c5943c43e35704db52d7f1c97ec8885f916953388701aeb8b2415f8ea22
GET /wp-content/uploads/2019/06/Banner_GlamourEscorts.gif HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: image/gif
content-length: 2480627
last-modified: Mon, 25 Nov 2019 06:47:52 GMT
etag: "25d9f3-5982624867841"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vXieGUzLQVL42%2Be27ZfJH9YwGdkkXpJOqMq24s83n39H7qm7%2BpGg8wy%2FX%2FSX1zxmioznGZca%2Fp0Ybcwu%2FRxf%2FSX43Yb8zRaQYhizPX9sYD9As%2BLzXSAHM8ojBigGSuJWTAJoow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c447b5e820b49-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-G4J05LPZPV
142.250.74.168200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-G4J05LPZPV
IP 142.250.74.168:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintEB:A2:AF:B3:20:F1:B1:77:23:0B:85:D2:B1:16:33:A7:97:49:EE:51
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type ASCII text, with very long lines (4537)
Hash 8bbae6e06bc7840867cf99f129b565c5
2ee88ce18a3707861dd3086771d0aa3f4a7dec0b
53de2d86178acc3bfaaafb73121ac66d1a1a18ce31073466eb829a6ebfafa8c3
GET /gtag/js?id=G-G4J05LPZPV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 02 Jun 2023 02:29:14 GMT
expires: Fri, 02 Jun 2023 02:29:14 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 86270
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
172.67.208.241200 OK 4.6 kB URL GET HTTP/3 www.koursaros.net/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type HTML document, ASCII text, with very long lines (12943), with no line terminators
Hash 5bc2b1fa970f9cecb3c30c0c92c98271
7c6bb87aaa24714b7b3b3c86dd932736a80270a9
1060091178cbd6c843b802f516f230f1a3a1e85f1afbd6ef84d80e5430ba457e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Wed, 31 May 2023 15:45:03 GMT
etag: W/"328f-5fcff3405b6c6-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TBoh3PQeyVZVwWll58D1ybnPTk6%2F%2FG3O%2Bp0zTS5YAvmEBIF%2B8u%2FmgxBJpBDKXYHUPGXIsghhzFI5Bafx0s4m8Ja4UN4LXH8iPFw32orqkAk1BpsWcld55RlccziULBGrpkay2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f4c0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash 9c320af7047f9368e0536de66d6d2658
2cdb5bfd4bb4ddf85559ff29d06ed964e04119ab
64bb80bd8947d7d658ce8f20fc2bebab85d391bf2baa953c67201ebd194cd1b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 02:29:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.koursaros.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
172.67.208.241301 Moved Permanently 49 kB URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/jquery/jquery.min.js?ver=3.6.4
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with very long lines (65447)
Hash 0e850a69bc7fd0acc2e92ce6eee87959
8be6d9e7f7a61ccf0b8eac8a8144d770b608a19c
afacce23cb4feaaaef37997f8439819d8f827df4951f3ff02704c9f16fb7f53a
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.4 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Thu, 30 Mar 2023 04:09:00 GMT
etag: W/"15ed7-5f81640a38adf-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QWdZTeJrGXlstXohLqYEeWJZOEexi%2B8JdUFssOp7QkCyB03HnBM87CfqW75BwQ88QfXQI0Q4HvExvjkZaTUV%2B%2BudODz3Wpp%2FlE4xVFzkD4IqHHp7QEE1lk1rvnsmN7B1y1aeYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f530afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.9
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.9
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.9 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/css/dnd-upload-cf7.css?ver=1.3.6.9
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3Zb%2FFF4j7m8VhBawSCsmZEvLhVXXRsjBEeB6YrARQ5Ja1x12%2BvqI99yBJCiUwvpZBZHHp5mcyylePJvoGWwC%2Fk5xKQtYVtYoAKB%2FbDgOH2QHe900FiF8wXOl3D8CD7ZgCKC8pA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c44819f44b505-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/css/classic-themes.min.css?ver=6.2.2
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-includes/css/classic-themes.min.css?ver=6.2.2
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/classic-themes.min.css?ver=6.2.2 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-includes/css/classic-themes.min.css?ver=6.2.2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t7G8SdyI6NWTQ3HgWJN2foumYMuz3a0EzGiafe01bWzFAIqFbH3WcM2DkP5%2FtTrTknK9HMeG3oWRPchFN0Xl82glKHAPfPEdu3o4t3LFrOyp5ZqHjAoD7CPrZR963Ex15BIwVw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c44819ba8b50c-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9
172.67.208.241200 OK 1.0 kB URL GET HTTP/3 www.koursaros.net/wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with CRLF line terminators
Hash f9341a7fadb42d823e89288af1efce90
e57b4060013e9d5bc1f98670b99208ea48c8a289
db71ca026f0fe23da093b81b732f0fe9062bacaa90fde9dce5bef7f1e7e03c15
GET /wp-content/plugins/drag-and-drop-multiple-file-upload-contact-form-7/assets/js/dnd-upload-cf7.js?ver=1.3.6.9 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Wed, 29 Mar 2023 15:45:00 GMT
etag: W/"9b5-5f80bdbdf8c84-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G7dbWnmenTSyifxbsimz78f5NYOAcyaiKc2KdfplXpSxDFQVkea%2BPZv%2Fa%2Fj51z%2FNqKDmmbyNzDSI7DoHhv4FuzaMK4IN58serF2zB0o8coUsSUBCMhMm9VWWZqHBHNf9EStJxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f540afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/themes/fairy/style.css?ver=1.3.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/style.css?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/style.css?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/style.css?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0OTExaQAG5fUQPBNQ0yGmuZ2ITFY9cTZHy%2B5XRririQ2WCmau4agRoQK0eW8Yye2Ld8Ub8wADBJQQ9tze2GG%2BjfRa%2B6EnzyzGmbkVHDNwdblEfHMX5Hml5D857w10LnUUaKBQA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c448198b6b4f3-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WkHG1fkz%2BiJmetWDJ3P2%2Fd5degD6oXcy3zqSeuLU0BxBll1tuHIeOV2NFCwehEN2mwMbZz9CKWlknm6qabNySsQIV9EluG2AI4y9HA6V8X%2Fs7XlexGiTbEHxme8ZkO4DXsRhig%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481af4bb505-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
172.67.208.241200 OK 1.0 kB URL GET HTTP/3 www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (2415), with no line terminators
Hash dbd2c18733ff907be35d6ce7012cda58
ab99ef32c7c79407b2781a0b2d492fb9b00467f9
c8be1269a134d7df5a75a02b0fce70d409e6d6984554acef232eabdaa4c39d66
GET /wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/lazy-images.js?minify=false&ver=2e29137590434abf5fbe HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Wed, 31 May 2023 15:45:05 GMT
etag: W/"96f-5fcff3421ca13-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BXQynF2hFVWIDsVkO1ZoRnjR1wG2GIkfasrPv%2FcGZTmQ1bn2fd1%2FS%2BX1%2Bw5a52Ohb0sfDZ2g6lBdfmB0HEfegrrELFBHSycNifxHkMNXy%2BC3VcnYnQDRBPS1ubhCco4iSpy6GA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44806f5e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.2.2
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PoGazerfP0sC4LOQQu98ldSoeiN4qnhgwPRvlSZcjRppc8ix9oSCF0KRE%2BoEfNOxBfmgcFTkOsc8djwDQWERl6un1XAJOPrKJXIYFcxm%2B0e8gJvx1BEg5fKyqlA8dkDDjlvCGA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481abb0b50c-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EryM4GBDsE74WCZCwtdbNJqelxG7W70rouYbpnVFu7iPc8%2FAfKUgSbtMpN6vKTZiCVUAk%2F7zNwEWC5AWz4ERkJPJu%2F79dqsQ4CRe4cTXyin2c6tgNeI8D0J8o5giWozb4JrBVA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481ad48b50b-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick-theme.css?ver=1.3.7
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick-theme.css?ver=1.3.7
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick-theme.css?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick-theme.css?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g0cAD1Qw5bVEd8BbvDDlryZy9ShaY2EjUiDNm38bShjixVXKXYYkOgKSj9YEWTYfzn0kO9%2F%2F2xytdd9n9BVXg9UziK%2B6cWnWsqpC%2BeRFEELDA0jxhUd9LUNIrYXCI3mUSIci%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481ae1f0b4d-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
172.67.208.241200 OK 0 B URL GET HTTP/3 www.koursaros.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qu%2Fi7zLgcxBIcggQPZtLFfkvtqOkAHwizqYj%2BJDevm%2BLMkC%2F39tJqkZ7hof%2Fv6GdLSwebN94zH4vhccwgCQnEdcEmCUcDiLLsdLjdeCWPNlsY7CJQBvcYwInEZkneiP5HBG14w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481a8bab4f3-OSL
alt-svc: h2=":443"; ma=60
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/css/font-awesome.min.css?ver=1.3.7
172.67.208.241301 Moved Permanently 0 B URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/css/font-awesome.min.css?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/css/font-awesome.min.css?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/css/font-awesome.min.css?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s1Ycw2YqiEYMw%2FtH2L2CTXKCfS6uJt5sgaB8e%2FoiboVYfgNlmoMJtOdgHRR6g3gVhSV1Tepa3Rn%2BFzgxmNKruJvKfzmnjfMykbMMt7Bn6bvztHPHuCPjNL62ZHqo6E5Aw9ZSgw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481ef67b505-OSL
alt-svc: h2=":443"; ma=60
pixel.wp.com/g.gif?v=ext&blog=12547530&post=0&tz=3&srv=www.koursaros.net&j=1%3A12.1.1&host=nejbgcj17j.25u.com&ref=&fcp=3225&rand=0.6394454302897398
192.0.76.3200 OK 50 B URL GET HTTP/1.1 pixel.wp.com/g.gif?v=ext&blog=12547530&post=0&tz=3&srv=www.koursaros.net&j=1%3A12.1.1&host=nejbgcj17j.25u.com&ref=&fcp=3225&rand=0.6394454302897398
IP 192.0.76.3:80
Requested by http://nejbgcj17j.25u.com/
File type GIF image data, version 89a, 6 x 5\012- data
Hash e4d673a55c5656f19ef81563fb10884c
1f2d8ed221d39329251ad3a6ff1edb20b7219443
f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
GET /g.gif?v=ext&blog=12547530&post=0&tz=3&srv=www.koursaros.net&j=1%3A12.1.1&host=nejbgcj17j.25u.com&ref=&fcp=3225&rand=0.6394454302897398 HTTP/1.1
Host: pixel.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 02 Jun 2023 02:29:15 GMT
Content-Type: image/gif
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *
www.koursaros.net/wp-content/uploads/2012/12/Koursaros_Logo_Height_60.png
172.67.208.241200 OK 23 kB URL GET HTTP/3 www.koursaros.net/wp-content/uploads/2012/12/Koursaros_Logo_Height_60.png
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type PNG image data, 381 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 372934dd93ebb855d73c61afac1f6e23
e5abfa3f269c0e7dd92fe4f49f415cdc5f2e693c
0196789d0923534a9de90ad11007e669596bd04d5a270698c45a5a73033a21c5
GET /wp-content/uploads/2012/12/Koursaros_Logo_Height_60.png HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: image/png
content-length: 22939
last-modified: Tue, 20 Dec 2016 04:10:52 GMT
etag: "599b-5440f38d16b00"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I20gmddd8MBgbOlQpO6Toia99DCxO%2BMGaLTdHjJAwSrU72FtTwyWPP5S5reiYYo2zzJ1g88ICi9Zp6wDQu6uURHRa8yxLOHX4anJ25HUCbGRgidPsFaBZ0QtvOKUiWXFNpXlvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c4482e85c0afe-OSL
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
172.67.208.241301 Moved Permanently 3.4 kB URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with very long lines (11256), with no line terminators
Hash 2b0dd7eecea03b4bdedb94ba622fdb03
703becba85161118dd6fc66af465428ef43f561c
b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646
GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/css
last-modified: Wed, 09 Dec 2020 05:44:55 GMT
etag: W/"2bf8-5b6018f14277e-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s142Sp9byG3c4M7JibH5qTgLAs6rNkwEczQToIqq6oXQVz804Cq0oAZM2nfPAiV1NvQyy9BIbp5s4P69WSDQqyhclu17%2Bti8yMqdtRm8YcTVzkQflQNi78si01BjkMLsO6%2FhLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4482f8650afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
172.67.208.241200 OK 1.2 kB URL GET HTTP/3 www.koursaros.net/wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (1610), with no line terminators
Hash 85001da72d2adacd89f64191337692ca
f4aabaaef3d271c4e6cbcfb974b3d3b403a32db0
95d19d87f29a6ea4e274e3681e839eac392e30647f4d373841c3c9c30749b64b
GET /wp-content/plugins/jetpack/jetpack_vendor/automattic/jetpack-videopress/build/block-editor/blocks/video/view.css?minify=false&ver=317afd605f368082816f HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/css
last-modified: Wed, 31 May 2023 04:46:18 GMT
etag: W/"64a-5fcf60024460c-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bbd1l%2FPfCJ7nbyzqFsnm6lHU2DBPYIeZU%2FKDaHouZobMd%2BRm44v8VYsqhC83ucg9hOCcS%2F0zUf6UcGtkJ1rjkjd9x9lG%2BouhViHeu3sxmFpJdCUEB2qODK0ELX63umucOBmN5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4483086c0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/plugins/jetpack/css/jetpack.css?ver=12.1.1
172.67.208.241200 OK 19 kB URL GET HTTP/3 www.koursaros.net/wp-content/plugins/jetpack/css/jetpack.css?ver=12.1.1
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4cc4e0cba17c8a9c76e0884632f9421f
9bdb840afdd68033ee0a3a8779cddcc7d71580b0
05db96d56969f90368d364da6c464ad073255964267594cb7e2b65b90d385da0
GET /wp-content/plugins/jetpack/css/jetpack.css?ver=12.1.1 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/css
last-modified: Wed, 31 May 2023 04:46:17 GMT
etag: W/"1856a-5fcf6001ff0b4-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jqyy7zKMDPw27Ak9SYwVGyEAzJPCuNEVYsBe6yiSfXi0I5hFumnl%2B%2F63oL8CW%2FlHy%2FNvgBnrNiSYgB1AeyalF5nrCQODMRwWeYI2%2Fs3tDMR71f1ICBpyYgtCbE8aXPt6CTzzPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4482f8600afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
koursaros.net/chat/web_extension.html
172.67.208.241200 OK 12 kB URL GET HTTP/2 koursaros.net/chat/web_extension.html
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1228)
Hash 650be269828ead68118c25c457955bec
5cee33394847be57629798da78e9d78407f7d1cd
9742dffb3ee06de85b4a5b015ad2f4a5097e8200c64db92c01327c90d16f8031
GET /chat/web_extension.html HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/html
last-modified: Fri, 24 Jun 2022 22:38:43 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0qUaeR%2FXrLIbG83iWmT1UTAh6kbUocV9OY5lUa%2Fo5PAI9XYvcv2ywQXYt1%2FfhyPZvK8vpOUnxUPai9N%2BgsE9Li0ouIdJ%2Buh2KN8b8T0aq%2F5gGq4hwZAdI9Y6%2FNOn4Sx4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c448298400afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 02:29:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
koursaros.disqus.com/recent_comments_widget.js?num_items=20&hide_mods=0&hide_avatars=0&avatar_size=32&excerpt_length=100
199.232.196.134200 OK 17 kB URL GET HTTP/1.1 koursaros.disqus.com/recent_comments_widget.js?num_items=20&hide_mods=0&hide_avatars=0&avatar_size=32&excerpt_length=100
IP 199.232.196.134:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerSectigo Limited
Subject*.disqus.com
FingerprintB7:D2:67:1F:60:9E:37:2D:5A:10:2F:B0:70:75:32:44:91:61:67:D5
ValidityThu, 13 Apr 2023 00:00:00 GMT - Sat, 20 Apr 2024 23:59:59 GMT
File type HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (392)
Hash 0eb275c892206b78ebae2700784b3b81
be644f8ff1fee6b00a6e7b58ae88a3e7564d0842
3b9a3a197dc0a6033b9d4b97203992235de631496c22744c9120228fc7ba004b
GET /recent_comments_widget.js?num_items=20&hide_mods=0&hide_avatars=0&avatar_size=32&excerpt_length=100 HTTP/1.1
Host: koursaros.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 16709
Server: nginx
Content-Type: application/javascript; charset=UTF-8
X-Frame-Options: SAMEORIGIN
p3p: CP="DSP IDC CUR ADM DELi STP NAV COM UNI INT PHY DEM"
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=600
Date: Fri, 02 Jun 2023 02:29:15 GMT
Age: 2188
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
216.58.207.227200 OK 7.8 kB URL GET HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP 216.58.207.227:80
Requested by http://nejbgcj17j.25u.com/
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 7816
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 01 Jun 2023 06:31:31 GMT
Expires: Fri, 31 May 2024 06:31:31 GMT
Cache-Control: public, max-age=31536000
Age: 71864
Last-Modified: Wed, 27 Apr 2022 16:11:40 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
216.58.207.227200 OK 8.0 kB URL GET HTTP/1.1 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2
IP 216.58.207.227:80
Requested by http://nejbgcj17j.25u.com/
File type Web Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data
Hash 72993dddf88a63e8f226656f7de88e57
179f97ec0275f09603a8db94d4380eb584d81cd5
f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 8000
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 01 Jun 2023 07:46:43 GMT
Expires: Fri, 31 May 2024 07:46:43 GMT
Cache-Control: public, max-age=31536000
Age: 67352
Last-Modified: Wed, 27 Apr 2022 16:59:07 GMT
Content-Type: font/woff2
www.koursaros.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
172.67.208.241301 Moved Permanently 167 kB URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Size 167 kB (167394 bytes)
Hash 0e4a098f3f6e3faede64db8b9da80ba2
65b9b3c849f3fbdd783ddbfb183616ff55c7ee53
ab21762c3f447aa08cbefd5ea3866165f925bd5058a9ae19e23721462de6fb60
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/css
last-modified: Wed, 31 May 2023 15:45:03 GMT
etag: W/"b2b-5fcff3405a726-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=71RG7kmifRm7vSLPeMAfoIlN3FNbFfcsoNrwnFP060nQTNR35KNkv7ZjqWwswjCUD%2BBpl1vZfdoIM%2ByPAv2H6NRV71xX2MYSjXdjFZhLw1DrjCu%2Fp0t7w20kVPKwyMb%2B9vSLhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c448308690afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/coments.html
172.67.208.241200 OK 32 kB URL GET HTTP/2 www.koursaros.net/coments.html
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1396), with no line terminators
Hash e8844b8f5f0fdda4da0e52e4af4fe103
b5e2a5598e180ff8e2396690fb5e1942c42bc448
ff99681afd1779b152a8d2cc3c649da9b5d0da993560592d8eb117856c5a022a
GET /coments.html HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/html
last-modified: Fri, 03 Feb 2023 16:46:52 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jsyrozBeUPOfWbWIoOFMm1sSJa%2FVqOorbH9NMAzqovabaYLaUOnNMjpIJtDjBRXeTiPhcrczLZ%2FlMD7eZJI6b1O%2FkZByt2ZkEYHTYrIgXNBxI0KL%2Bp058BU3YYEnR0kvAkk3kQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c448298410afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Jun 2023 02:29:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.koursaros.net/wp-includes/js/masonry.min.js?ver=4.2.2
172.67.208.241301 Moved Permanently 11 kB URL GET HTTP/1.1 www.koursaros.net/wp-includes/js/masonry.min.js?ver=4.2.2
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with very long lines (23966)
Hash 3b3fc826e58fc554108e4a651c9c7848
76778fd446e2ff2377588a7b4ac4d79f258427c9
e00add38134eac2fb8e8e9c09cbfff7bbe57952b210322eb2eecb0a21fc055eb
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Wed, 12 Aug 2020 10:29:53 GMT
etag: W/"5e4a-5acabab15c501-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vtxBZYEkd4BPIWCMjyXhoMdbGumoyZJUPdN2uTs6rhDeZBB2cAYwuUqrvVLFM5WuC9ZXjFuLAcxgXyVi57EMlLBcZPozB8i5OQHbVYYEv7%2BlaJR5Rpv%2BjSXCTSQq9Ee0pZiqMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f500afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c.disquscdn.com/uploads/users/21993/4491/avatar92.jpg?1671165981
54.230.111.73200 OK 1.9 kB URL GET HTTP/2 c.disquscdn.com/uploads/users/21993/4491/avatar92.jpg?1671165981
IP 54.230.111.73:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerAmazon
Subjecta.disquscdn.com
Fingerprint2A:9C:75:A8:77:89:6E:E1:FE:73:42:47:93:27:43:4E:F4:72:25:84
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 29 Oct 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash 107aa54b1c8d58b1a34b11e9a745e74b
b0fadbc029ba1321571017dce08fa63479281181
bf836af8bb5a3e1a325164f0687a964a48fe7a79fc9be08bdd8a629f35d2e572
GET /uploads/users/21993/4491/avatar92.jpg?1671165981 HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1912
date: Sat, 20 May 2023 05:05:49 GMT
server: nginx
last-modified: Fri, 16 Dec 2022 04:46:21 GMT
etag: "107aa54b1c8d58b1a34b11e9a745e74b"
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 19 May 2024 05:05:49 GMT
cache-control: max-age=31536000, public, immutable
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 042PbnWL6DE2M8B-m8TKfq3uh9sFynAZ3ZTF0MAG9Xprc1LJwnnDww==
age: 1113806
X-Firefox-Spdy: h2
c.disquscdn.com/uploads/users/36416/5158/avatar92.jpg?1635177928
54.230.111.73200 OK 2.4 kB URL GET HTTP/2 c.disquscdn.com/uploads/users/36416/5158/avatar92.jpg?1635177928
IP 54.230.111.73:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerAmazon
Subjecta.disquscdn.com
Fingerprint2A:9C:75:A8:77:89:6E:E1:FE:73:42:47:93:27:43:4E:F4:72:25:84
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 29 Oct 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash d1abb491312311604c2fcbd629152e96
e700ce30941179ccc287bef73208098617b80e7a
f57ce019032f47cf059fa4fd6340ec9f75486f4a82d286f432c1d6e56ba3e1c0
GET /uploads/users/36416/5158/avatar92.jpg?1635177928 HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 2353
date: Sat, 27 May 2023 04:58:19 GMT
server: nginx
last-modified: Mon, 25 Oct 2021 16:05:29 GMT
etag: "d1abb491312311604c2fcbd629152e96"
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sun, 26 May 2024 04:58:19 GMT
cache-control: max-age=31536000, public, immutable
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vC14AcuBb1q42Vb7ikUU-teoT_ae_voN6YefIi8gfhSh2mQYZS-a7A==
age: 509456
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
172.67.208.241301 Moved Permanently 4.6 kB URL GET HTTP/1.1 www.koursaros.net/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with very long lines (8983), with no line terminators
Hash ed3b4417df0895e4cf8465d32b69adc6
a63d0bad2dcb235c62a843eb3e8506e8931cede0
9900b23f9f49af5f34387eb63a8673a563ab131c1e171cfaf14cf8b67a466b9d
GET /wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-lazy-images/dist/intersection-observer.js?minify=false&ver=83ec8aa758f883d6da14 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Wed, 31 May 2023 15:45:05 GMT
etag: W/"2317-5fcff3421ca13-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDMoEI4tx3mgJuXxSXkqDHYGTRp9TN2UyxinEFwNdcfSTMTlnILpSkcOSX%2BHhoGOTrxIzY3Z%2B%2Bl7hLm7jZPFODUUnKEoQlpEXclLt4nq%2BwvPZlHz25A%2B%2B80XLEQV5cHsqQMTZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f570afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7
172.67.208.241301 Moved Permanently 4.8 kB URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with CRLF line terminators
Hash 80d9fb82776fc7a5b36766ca96db4b1c
69ff66eed4c23ff0034c0f3bdb20dd4d324fd720
2b68491bcf04c1a52df469b4b19f9096588fba79f809c1e4617db63420e3c18c
GET /wp-content/themes/fairy/candidthemes/assets/custom/js/custom.js?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 18:41:28 GMT
etag: W/"1ada-5ef19090ac183-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VDn3WJvy1iwcuzjK%2BqHRFwNrjIjQLbneZr12NLf%2FAoBG82dHqxzCH4lc%2F%2FxGW8goTHk1KEJmJeIcFZi%2FacR%2FaSyy35yikuidEThhqL3njOKSqWK0e9ur5n80OeJ2N3UJz4YoEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f590afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
a.disquscdn.com/1684436839/images/noavatar92.png
199.232.198.49200 OK 1.6 kB URL GET HTTP/2 a.disquscdn.com/1684436839/images/noavatar92.png
IP 199.232.198.49:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerGlobalSign nv-sa
Subject*.disquscdn.com
Fingerprint65:F8:2A:82:9D:16:66:BA:5D:5B:EE:F5:65:04:DD:D8:FE:04:54:AE
ValidityFri, 07 Oct 2022 14:42:16 GMT - Wed, 08 Nov 2023 14:42:15 GMT
File type PNG image data, 92 x 92, 8-bit/color RGB, non-interlaced\012- data
Hash 675fb4b91ca717db030507f2d84bcfdf
c8728df74487f907230358a1b08ae1a1b25f9ed4
36ef66124133ca33c8b44c487293c3180e5ab681ff3cad3c728ea4f894ec3444
GET /1684436839/images/noavatar92.png HTTP/1.1
Host: a.disquscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
server: nginx
last-modified: Fri, 26 Feb 2021 20:50:09 GMT
etag: "60395f01-66c"
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Fri, 23 Jun 2023 21:11:29 GMT
cache-control: max-age=2592000
cross-origin-resource-policy: cross-origin
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: b3y8NAD170k0G-jGXTwJD2-YLKZGFueamaNmnZRMSDZ8cjNHpnSvhw==
date: Fri, 02 Jun 2023 02:29:15 GMT
age: 710266
strict-transport-security: max-age=300; includeSubdomains
content-length: 1644
X-Firefox-Spdy: h2
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
172.67.208.241200 OK 77 kB URL GET HTTP/3 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: font/woff2
content-length: 77160
last-modified: Mon, 05 Dec 2022 18:41:28 GMT
etag: "12d68-5ef19090b0003"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HpoCcj61aCZPYnHwYttIoa5CDLCXeLIrifFrsKlsqs7DjEVyef%2BwrqgTOokZPtp7yRtGKWVWKUNipuVYvhzKdw5jE6tKpP2rgJt1asxsTOhqkqtqUB7BOTL34FFBJ6Bs28eVBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c4483c8a60afe-OSL
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q
142.250.74.132200 OK 1.1 kB URL GET HTTP/3 www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q
IP 142.250.74.132:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF
ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (309)
Hash 397702198c361d6fcd280ae85eb7bedd
422df90020ffe9217bd90f10799b861c36aa5a71
b5af64454d37cc846820307e074720bafb81d896ffdf4a7255af0eb4fc828ac8
GET /recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-security-policy: script-src 'nonce-mlFkDATf-1njwff78DhDKw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-type: text/html; charset=utf-8
content-encoding: gzip
date: Fri, 02 Jun 2023 02:29:15 GMT
expires: Fri, 02 Jun 2023 02:29:15 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 1082
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.koursaros.net/cdn-cgi/challenge-platform/scripts/invisible.js
172.67.208.241302 Found 37 kB URL GET HTTP/3 www.koursaros.net/cdn-cgi/challenge-platform/scripts/invisible.js
IP 172.67.208.241:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash 3fbf9cfa12dfd55a24049d43ebd1a66c
933e394a40b6a99cb3570f051c3ef2aa4891df63
d89ab6e49767948c87a42c1ec392a206602d633ee530701eb79cb4783b27fef5
GET /cdn-cgi/challenge-platform/scripts/invisible.js HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Fri, 02 Jun 2023 02:29:15 GMT
vary: accept-encoding
cache-control: max-age=300, public
access-control-allow-origin: *
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OEO%2FGAToJfQ4Y9eYkR%2F%2Bph7CT%2BzYFN99kUtgWnV9o5pym8h%2Bf%2BxSGATbkVk68XtCDBUZzp5hWSXGjPML8iVJF2ZV36fqC3WAwkw9FwT08mxGQ9n4MHzfmymgoQyRjSTPJbMhYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4484c9390afe-OSL
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/themes/fairy/js/navigation.js?ver=1.3.7
172.67.208.241301 Moved Permanently 168 kB URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/js/navigation.js?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with CRLF line terminators
Size 168 kB (167506 bytes)
Hash 422550ad2e386a63a4dea59068a99ae4
29a79d8c3424fbb0e9bf9d5741c4dd575728efc3
01d7c9a6f7c2b8c9290aba44c16c812337398880d14cfcbbb402fd7b153661b1
GET /wp-content/themes/fairy/js/navigation.js?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Mon, 05 Dec 2022 18:41:28 GMT
etag: W/"be9-5ef19090ab1e3-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HhBWQ3XYsoT9vD8ck%2Fgv0USfBLmgZX9YBMGhEOtTZR09y53SbZlLgsYJbiy6KD6R5BVVvI0al6LdYs6KTMeyKL22H4GlceTPbG74GcKZVXZx3toIaAM3ewIsEqV8Q%2BZ7EslsGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44805f4d0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 17:31:32 GMT
expires: Wed, 29 May 2024 17:31:32 GMT
cache-control: public, max-age=31536000
age: 205064
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/api2/logo_48.png
216.58.211.3200 OK 2.2 kB URL GET HTTP/3 www.gstatic.com/recaptcha/api2/logo_48.png
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash ef9941290c50cd3866e2ba6b793f010d
4736508c795667dcea21f8d864233031223b7832
1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a
GET /recaptcha/api2/logo_48.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/styles__ltr.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 2228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 21:48:58 GMT
expires: Mon, 05 Jun 2023 21:48:58 GMT
cache-control: public, max-age=604800
age: 276018
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.koursaros.net/wp-content/uploads/2019/06/Koursaros-chat.png
172.67.208.241200 OK 80 kB URL GET HTTP/3 www.koursaros.net/wp-content/uploads/2019/06/Koursaros-chat.png
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type PNG image data, 540 x 365, 8-bit/color RGBA, non-interlaced\012- data
Hash 1fc42f852aa1fce0d133b5376c15609f
d3245a288f8731f649636deb643f83643f4d23d0
de44ea5ffac5a0262582ad49330d281e46e4a0d205e6af5f6c3cb689ca4017d7
GET /wp-content/uploads/2019/06/Koursaros-chat.png HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/
Cookie: __cf_bm=R6RXfQecFqBU8LA8iJAbb9oNk_OYhg8n6SA81Btvwq8-1685672956-0-AQEU2aMuhHb9f2L2nafCNpEx0ZzZDptat/uQsDfeDbQqbSSt3GVTy4zP56QuQn9xcaEg/yxr4J2m9LqsslzhGd2y5fSrsos+PtDqSEdTkfUW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: image/png
content-length: 79749
last-modified: Fri, 24 Jun 2022 22:37:36 GMT
etag: "13785-5e2393789bfa3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3804
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TU7DlKXTmSYO3EcTEFunRqde0LHkP8DOnotOJKbarSMbrXz09gqYGBevMQqYNd%2BbGKt3LQZ38wzxsp5mF%2FgWcnL6xEdPGG%2FzUM5XnWBIRz18B1jqkiWf14sNYpUeNFIkT3VpOg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c448b9bc80afe-OSL
alt-svc: h3=":443"; ma=86400
koursaros.net/chat/online.php?mode=2
172.67.208.241200 OK 901 B URL GET HTTP/3 koursaros.net/chat/online.php?mode=2
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (932), with no line terminators
Hash fa374e0fb3123f92a346a79a14e1bb1b
3828ae9039e209f6a6691a324b8dcc88119e035d
d9afd907ab03271feafc8d477f1963cc2f373cbbce28fed44a844eaf9550240c
GET /chat/online.php?mode=2 HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/chat/web_extension.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
last-modified: Fri, 02 Jun 2023 02:29:15 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vEK4Q7wULUqYdsn1JTsoBv%2FV9YgOpupufYXCyobBXZm1NqLjVDoR8VS6C8rAzrh2vq6H7fQFTKS8uIy227D0o2Hx%2Fsif7nHCgx1YhVO6Jq4F6N5HfuJ8FGXFTgJ1qPb8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4483f8ea0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/pica.js
172.67.208.241200 OK 5.7 kB URL GET HTTP/3 koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/pica.js
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (5674), with no line terminators
Hash 0d2c96eb35b77df7cb439293d73b2fb9
f93a396f9c2cdd53286fad6c34f0ab464a411953
db2d56a530028ce9263b679f668fcd2cad9f3eb0dc46a52e34efa9f9f8b8c9b5
GET /cdn-cgi/challenge-platform/h/g/scripts/pica.js HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/chat/web_extension.html
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ugD37b79Wl00T6Sv%2BUcHm7AU1MAMOE88nPQmbk9UwC66YbwEiNZ6GPDTXoh7AadvO%2FBIYTqc0rFvIP4%2BYpIgRky3mNwW4FQb2HSrkOYrfpPz4hIodikQUcMxwJ7LwQWP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4487da750afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
koursaros.net/cdn-cgi/challenge-platform/scripts/invisible.js
172.67.208.241302 Found 26 kB URL GET HTTP/3 koursaros.net/cdn-cgi/challenge-platform/scripts/invisible.js
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cdn-cgi/challenge-platform/scripts/invisible.js HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Fri, 02 Jun 2023 02:29:15 GMT
location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
cache-control: max-age=300, public
vary: accept-encoding
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jb8ktkDifWEMuKTipkRWfVT8Lo5DaNr%2FLmheUkkOX5wWYAtKpeZjp1DsaWif7IzeH%2F4MzX%2FLXsjYjjbqQRZqgdFEa1dMwSa1yfUiMa0F7gLr8hLbNamEatVydeNXCJW4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4485b9830afe-OSL
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.ttf?v=4.7.0
172.67.208.241200 OK 166 kB URL GET HTTP/3 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.ttf?v=4.7.0
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type TrueType Font data, 13 tables, 1st "FFTM", 24 names, Macintosh\012- data
Size 166 kB (165548 bytes)
Hash b06871f281fee6b241d60582ae9369b9
13b1eab65a983c7a73bc7997c479d66943f7c6cb
aa58f33f239a0fb02f5c7a6c45c043d7a9ac9a093335806694ecd6d4edc0d6a8
GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.ttf?v=4.7.0 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: font/ttf
last-modified: Mon, 05 Dec 2022 18:41:28 GMT
etag: W/"286ac-5ef19090af063"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=No95rh6rGTqHln4w1GRf39Fj4wbWUhGgOK0XARqk4LOBuSI8mPecNXbpxt2wihnizMUqHS%2FqKHvpnudLl7fHYV4gWUkpHJMlpf1usn1dVeLwK4IiEsSi7GdcHfik%2BRZh4HWzXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c44877a590afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
koursaros.disqus.com/count.js
199.232.196.134200 OK 1.5 kB URL GET HTTP/1.1 koursaros.disqus.com/count.js
IP 199.232.196.134:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerSectigo Limited
Subject*.disqus.com
FingerprintB7:D2:67:1F:60:9E:37:2D:5A:10:2F:B0:70:75:32:44:91:61:67:D5
ValidityThu, 13 Apr 2023 00:00:00 GMT - Sat, 20 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1569), with no line terminators
Hash 76daf75ab583178e6006e8ac91e1e462
eab542ba658a6ff150a72258894b44b9cb1fe703
989a2cf75148150ca5074de598bc4c55a4c16c5614ef6c481b73e531c80ba16a
GET /count.js HTTP/1.1
Host: koursaros.disqus.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 871
Content-Type: application/javascript; charset=utf-8
Server: nginx
Last-Modified: Thu, 01 Jun 2023 21:21:47 GMT
ETag: "64790beb-367"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Amz-Cf-Pop: DFW3-C1
X-Amz-Cf-Id: elpvaG6ycI-gL8KxrceOBDTtDoQb9nljvr3WV71muez2e_bxkuENcQ==
Cache-Control: public, max-age=300
Date: Fri, 02 Jun 2023 02:29:15 GMT
Age: 93
Vary: Accept-Encoding
Strict-Transport-Security: max-age=300; includeSubdomains
Cross-Origin-Resource-Policy: cross-origin
Link: <https://disqus.com>; rel=preconnect, <https://c.disquscdn.com>; rel=preconnect
www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
216.58.211.3200 OK 417 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (660)
Size 417 kB (416807 bytes)
Hash 95a32a4d8f8be968bc15d6ab9b9491d1
fbfbcb40c8d8997096cd2ea3d8cfc3dee1981015
a41096fbcf982d79bf075bf2378c9c0c2e8ada5bdc94bd7cc794454135ccf981
GET /recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166449
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 23:49:29 GMT
expires: Tue, 28 May 2024 23:49:29 GMT
cache-control: public, max-age=31536000
age: 268787
last-modified: Mon, 22 May 2023 20:58:33 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
nejbgcj17j.25u.com/favicon.ico
5.189.148.101200 OK 11 kB URL GET HTTP/1.1 nejbgcj17j.25u.com/favicon.ico
IP 5.189.148.101:80
Requested by http://nejbgcj17j.25u.com/
File type MS Windows icon resource - 2 icons, 48x48, 32 bits/pixel, 16x16, 32 bits/pixel\012- data
Hash fc0b8b45dd41e974a54cc5fc03c79813
19033935e354fd786311c44b32481abfff019d74
f194d3190396f35a070e77f1f89974da5baf135947e7713c1e2ef02608bbf518
Analyzer Verdict Alert urlquery suspicious Suspicious - DynDNS domain
NIDS Severity Alert suricata medium ETPRO INFO DYNAMIC_DNS HTTP Request to a *.25u.com Domain
GET /favicon.ico HTTP/1.1
Host: nejbgcj17j.25u.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Cookie: _ga_G4J05LPZPV=GS1.1.1685672954.1.0.1685672954.0.0.0; _ga=GA1.1.1199779068.1685672955
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Jun 2023 02:29:15 GMT
Server: Apache
Last-Modified: Fri, 06 Jan 2017 10:48:45 GMT
ETag: "2a36-5456ac30fdd40"
Accept-Ranges: bytes
Content-Length: 10806
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7
172.67.208.241301 Moved Permanently 1.9 kB URL GET HTTP/1.1 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7
IP 172.67.208.241:80
Requested by http://nejbgcj17j.25u.com/
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Jun 2023 02:29:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Jun 2023 03:29:15 GMT
Location: https://www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KMWK6q1PM0vrHYB4ixjSbQ0jsPj5kRgPJ%2BVUtIr%2B%2FsHr5YzmOjKHIS73RKXxrE1Z3uWrX8RKAlLAHL6WiDQIPt%2FNEM9wtcdoBEZmVPb%2FfY4IJdQYEztgxsUmmWOEb%2FEuTMG9HA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d0c4481af41b517-OSL
alt-svc: h2=":443"; ma=60
c.disquscdn.com/uploads/users/11047/4305/avatar92.jpg?1402600221
54.230.111.73200 OK 1.5 kB URL GET HTTP/2 c.disquscdn.com/uploads/users/11047/4305/avatar92.jpg?1402600221
IP 54.230.111.73:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerAmazon
Subjecta.disquscdn.com
Fingerprint2A:9C:75:A8:77:89:6E:E1:FE:73:42:47:93:27:43:4E:F4:72:25:84
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 29 Oct 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash f9f92a1451c56f669a074f014bcb8a33
4d299b8041d7d687ff2932961e24c69e777f5452
86d1c5ae27e3cb6459a4bc71738571ac6a6b22b07877cc51aa2cde46bc9cf510
GET /uploads/users/11047/4305/avatar92.jpg?1402600221 HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1547
date: Wed, 10 May 2023 11:31:30 GMT
server: nginx
last-modified: Thu, 12 Jun 2014 19:10:21 GMT
etag: "f9f92a1451c56f669a074f014bcb8a33"
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Thu, 09 May 2024 11:31:30 GMT
cache-control: max-age=31536000, public, immutable
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SlWRyBaKAV0NL8tGgQINhlwjrJojrYPMssJqVxzBNj7vJviL2dJ1qw==
age: 1954665
X-Firefox-Spdy: h2
stats.wp.com/e-202322.js
192.0.76.3200 OK 14 kB IP 192.0.76.3:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerSectigo Limited
Subject*.wp.com
Fingerprint95:BC:E9:E5:77:EA:A7:DE:2E:30:01:1E:65:1D:21:13:4F:16:69:37
ValidityMon, 14 Nov 2022 00:00:00 GMT - Fri, 15 Dec 2023 23:59:59 GMT
Hash 36a5287b66e9d145da53194a97a6245a
8569750e9f82d96f556d6f549cba940b2f316d2c
ab8517f3d5171dd42a8b9c22af6a2f944b41d00e7ea54ba02b4ed71a6c59e543
GET /e-202322.js HTTP/1.1
Host: stats.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 02 Jun 2023 02:29:14 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 02:56:42 GMT
vary: Accept-Encoding
etag: W/"6466e56a-3508"
content-encoding: br
expires: Sun, 26 May 2024 21:54:49 GMT
cache-control: max-age=31536000
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
x-nc: HIT arn
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/styles__ltr.css
216.58.211.3200 OK 56 kB URL GET HTTP/3 www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/styles__ltr.css
IP 216.58.211.3:443
Requested by https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7GfgUAAAAAK-DSe_OhM_em1onHMebnS5Zzi6_&co=aHR0cDovL25lamJnY2oxN2ouMjV1LmNvbTo4MA..&hl=en&v=CDFvp7CXAHw7k3HxO47Gm1O9&size=invisible&cb=4z8i8vte1m2q
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (56403), with no line terminators
Hash 83f90c5a4c20afb44429fa346fbadc10
7c278ec721d3880fbafaadeba9ee80bdf294b014
952833e41ba7a4b64c31a2d7b07dde81bf5bbacf5cbb967821cfe459d0c4a0d8
GET /recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/styles__ltr.css HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 24605
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 23:55:34 GMT
expires: Tue, 28 May 2024 23:55:34 GMT
cache-control: public, max-age=31536000
age: 268422
last-modified: Mon, 22 May 2023 20:58:33 GMT
content-type: text/css
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
koursaros.net/chat/online.php?mode=3
172.67.208.241200 OK 122 B URL GET HTTP/3 koursaros.net/chat/online.php?mode=3
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type Unicode text, UTF-8 text, with no line terminators
Hash 6debaf748721742b5d3f4d21bc0e488e
6f5fbbef1e5e9ff9aaa0e1c9b1622361e1c053b2
44fcde45a2efc3dda01d177c129cf203215f7e559c3d95ec89e447e75038bafc
GET /chat/online.php?mode=3 HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/chat/web_extension.html
Cookie: __cf_bm=R6RXfQecFqBU8LA8iJAbb9oNk_OYhg8n6SA81Btvwq8-1685672956-0-AQEU2aMuhHb9f2L2nafCNpEx0ZzZDptat/uQsDfeDbQqbSSt3GVTy4zP56QuQn9xcaEg/yxr4J2m9LqsslzhGd2y5fSrsos+PtDqSEdTkfUW
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
last-modified: Fri, 02 Jun 2023 02:29:16 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JZ%2BlNvWhtZrZnIWMkUqt4%2FjIOMGmT4%2FfNbIXddS1iyEYzADtZ%2Bxbk%2Bg0Yd9SSkw5gASdbp4xE9x9VQUET7nRTUJ1YSKDP97UtwwblMsz09iWj9F8UzBnCnt5YMh8uX5Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c448c4c120afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Poppins%3A400%2C500%2C600%2C700&ver=6.2.2
142.250.74.74200 OK 4.2 kB URL GET HTTP/1.1 fonts.googleapis.com/css?family=Poppins%3A400%2C500%2C600%2C700&ver=6.2.2
IP 142.250.74.74:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with very long lines (4292), with no line terminators
Hash 832a74cc73c0171789ae60878b74e167
44591d165a1e73cac59d8ba4b194de9a74fc4f35
7ae691e3a8b06e7716df6bdaa85b73565f5c348735b0e5f5acec03c9e485b78c
GET /css?family=Poppins%3A400%2C500%2C600%2C700&ver=6.2.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 02 Jun 2023 02:29:15 GMT
Date: Fri, 02 Jun 2023 02:29:15 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
c.disquscdn.com/uploads/users/16672/9517/avatar92.jpg?1510389825
54.230.111.73200 OK 3.3 kB URL GET HTTP/2 c.disquscdn.com/uploads/users/16672/9517/avatar92.jpg?1510389825
IP 54.230.111.73:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerAmazon
Subjecta.disquscdn.com
Fingerprint2A:9C:75:A8:77:89:6E:E1:FE:73:42:47:93:27:43:4E:F4:72:25:84
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 29 Oct 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash 97415b8b278c5452a5dbdacec76030a8
5fb5355c174351366c50cd8426b4a621ba7aa3bc
12d26628346bb8dbff6a0952e06961641206bf74d1d499779a9230984faac24c
GET /uploads/users/16672/9517/avatar92.jpg?1510389825 HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3321
date: Fri, 21 Apr 2023 07:17:25 GMT
server: nginx
last-modified: Sat, 11 Nov 2017 08:43:45 GMT
etag: "97415b8b278c5452a5dbdacec76030a8"
x-served-by: static-web-2
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Sat, 20 Apr 2024 07:17:25 GMT
cache-control: max-age=31536000, public, immutable
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pivmpNYSj8yA8UBr-HkffQF453rxRR83UJigCByt-hASApZBcUYrjw==
age: 3611510
X-Firefox-Spdy: h2
koursaros.net/chat/online.php?mode=3
172.67.208.241200 OK 122 B URL GET HTTP/3 koursaros.net/chat/online.php?mode=3
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type Unicode text, UTF-8 text, with no line terminators
Hash 6debaf748721742b5d3f4d21bc0e488e
6f5fbbef1e5e9ff9aaa0e1c9b1622361e1c053b2
44fcde45a2efc3dda01d177c129cf203215f7e559c3d95ec89e447e75038bafc
GET /chat/online.php?mode=3 HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/chat/web_extension.html
Cookie: __cf_bm=R6RXfQecFqBU8LA8iJAbb9oNk_OYhg8n6SA81Btvwq8-1685672956-0-AQEU2aMuhHb9f2L2nafCNpEx0ZzZDptat/uQsDfeDbQqbSSt3GVTy4zP56QuQn9xcaEg/yxr4J2m9LqsslzhGd2y5fSrsos+PtDqSEdTkfUW
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:20 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
last-modified: Fri, 02 Jun 2023 02:29:20 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xEmsu0kOUCH3kRGeEiCujnDfEqsDcDlep%2FzhV4WJC8ZWvT2NdVz6fPUqCnLPwzUw9ibTTalNSo1KjX%2B1tmmeIpic%2BRo003rkjmXplo9mm6PvLYl8yiGys5%2F1WKeOfFCY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44a3debc0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
koursaros.net/chat/online.php?mode=3
172.67.208.241200 OK 122 B URL GET HTTP/3 koursaros.net/chat/online.php?mode=3
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type Unicode text, UTF-8 text, with no line terminators
Hash 6debaf748721742b5d3f4d21bc0e488e
6f5fbbef1e5e9ff9aaa0e1c9b1622361e1c053b2
44fcde45a2efc3dda01d177c129cf203215f7e559c3d95ec89e447e75038bafc
GET /chat/online.php?mode=3 HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/chat/web_extension.html
Cookie: __cf_bm=R6RXfQecFqBU8LA8iJAbb9oNk_OYhg8n6SA81Btvwq8-1685672956-0-AQEU2aMuhHb9f2L2nafCNpEx0ZzZDptat/uQsDfeDbQqbSSt3GVTy4zP56QuQn9xcaEg/yxr4J2m9LqsslzhGd2y5fSrsos+PtDqSEdTkfUW
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:25 GMT
content-type: text/html; charset=UTF-8
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate
last-modified: Fri, 02 Jun 2023 02:29:25 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n3Du2Ni%2BNz%2BGT1iuGlM1S5vHATZ6drN9b1Vp3f6%2FOOWLxZAeQJMhlcLrm1rXr0vwccZHN2%2FVUSYmTJvZOe41YwXueckwygenRQEYxvQXZi1eR%2BTvtlYXdgq99NxoZIR5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44c31b630afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
c.disquscdn.com/uploads/users/39478/5770/avatar92.jpg?1685014532
54.230.111.73200 OK 3.1 kB URL GET HTTP/2 c.disquscdn.com/uploads/users/39478/5770/avatar92.jpg?1685014532
IP 54.230.111.73:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerAmazon
Subjecta.disquscdn.com
Fingerprint2A:9C:75:A8:77:89:6E:E1:FE:73:42:47:93:27:43:4E:F4:72:25:84
ValidityWed, 01 Mar 2023 00:00:00 GMT - Sun, 29 Oct 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 92x92, components 3\012- data
Hash 51f2fcb95d508efe6f755a0f02b5a304
3d0a5e36b5a1add6ad0c9715de1fa35d8eeb5472
41051ff74af77f699b4695dd0a74d456c8b82c3484529daa0bc65d12fc3cabd4
GET /uploads/users/39478/5770/avatar92.jpg?1685014532 HTTP/1.1
Host: c.disquscdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 3074
date: Thu, 25 May 2023 11:43:17 GMT
server: nginx
last-modified: Thu, 25 May 2023 11:35:32 GMT
etag: "51f2fcb95d508efe6f755a0f02b5a304"
x-served-by: static-web-1
x-cache-hits: 0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
expires: Fri, 24 May 2024 11:43:17 GMT
cache-control: max-age=31536000, public, immutable
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Nvop6dEOeO-cEM660gHehyNnUkcnNhKV-E0NqQDRBVxSk90UP6FE7g==
age: 657958
X-Firefox-Spdy: h2
www.koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
172.67.208.241200 OK 29 kB URL GET HTTP/3 www.koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
IP 172.67.208.241:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (29422), with no line terminators
Hash 309c5a8caf3bb0a3e6e2410bce809e59
02d97ab0be866013373fc6a7d54f1aedd782ff52
efe5a0d5b6ca47ef6fc0314379af1ea78749943a54f07909fa28b53c09e0c174
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
vary: accept-encoding
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rWgdFxWP5Lcsxodl6Mss5qnFIzRkJghnY6ldq2A5Q3JSJauUTcNmtuAuu4oJGBJL7b8DVSQPOwqwQPOVW9QathbEH1xmpbkD46OWpEPq45zyEs2YL7jXaKbyT487f0%2Fty6%2B%2BNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4485d9940afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Muli%3A400%2C300italic%2C300&ver=6.2.2
142.250.74.74200 OK 3.3 kB URL GET HTTP/1.1 fonts.googleapis.com/css?family=Muli%3A400%2C300italic%2C300&ver=6.2.2
IP 142.250.74.74:80
Requested by http://nejbgcj17j.25u.com/
File type ASCII text, with very long lines (3357), with no line terminators
Hash 3de154e79b1f115e5b7fe83028def6d0
acb633fc5df09dbd7a13280db25de95f08a12bd4
9eb68e5686329974bda0e7cc636f773167bf0d0451b1bc05c19bc458837cf544
GET /css?family=Muli%3A400%2C300italic%2C300&ver=6.2.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 02 Jun 2023 02:29:15 GMT
Date: Fri, 02 Jun 2023 02:29:15 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/pica.js
172.67.208.241200 OK 5.6 kB URL GET HTTP/3 www.koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/pica.js
IP 172.67.208.241:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (5651), with no line terminators
Hash 31953d02838730ec882fbe6379f94f60
d50cfd06d7a1c05fdc290989eeebd2a28e07590e
8ecd4d3795f0aaf95c6fe6fb6d74c9e685c6aabb646dbc28ea87a445d5c2d1c3
GET /cdn-cgi/challenge-platform/h/g/scripts/pica.js HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/coments.html
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, public
x-content-type-options: nosniff
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cBLBpVIJVs%2F2024POdd2qhgBwZiDvTg1tSTWnnkG1l0FPZCA02mHBXQLIngKeAopISbH6yCH1cpp%2F1ksNBTQ38EonfGjvs5MFQALs8wPHCFw9AeRrJRYHjeYTuk4bYciKJZlJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c44874a3c0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
172.67.208.241200 OK 26 kB URL GET HTTP/3 koursaros.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (26012), with no line terminators
Hash ffa7bafa5a941c3e4a67059503626301
e550e6bee1d166f6c856d6920fef2f1297c39970
8f6cfcb854aab20fbe41a2467c57ac65c08f053cf3778fcb87f32dd2a665ec4d
GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/68662470/invisible.js HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
cache-control: max-age=14400, public
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=juwUOUuQu%2F%2BrzmA5SSzYqLYk3%2F4iYHTErxFWg0q%2FqfyLWfR0qyY6J2YN9XNwh2D%2BZQPHfwcy2saFOekx2Vmm8WQZNrYnw2GfV7LKmt%2B9gwecLhIU8VSaYM2qf%2BdyB4Zk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c448619b70afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/cdn-cgi/challenge-platform/h/g/cv/result/7d0c448298410afe
172.67.208.241200 OK 2 B URL POST HTTP/3 www.koursaros.net/cdn-cgi/challenge-platform/h/g/cv/result/7d0c448298410afe
IP 172.67.208.241:443
Requested by https://www.koursaros.net/coments.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /cdn-cgi/challenge-platform/h/g/cv/result/7d0c448298410afe HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 11798
Origin: https://www.koursaros.net
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/coments.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=XKop14_aXJnjHoeEFSEWprJqlkTWhprGsRjzFNByHp8-1685672956-0-ARTGnTy9iQ4kkvBnh1CgzX8Lj9UsGe+LoGRc/0riWjv0UxXUOXARB5QSqmgcnMzjGJ/+6wrqxQwaRPrckFGtEyY4mku5pAs2R4XQuIGaGlZu; path=/; expires=Fri, 02-Jun-23 02:59:16 GMT; domain=.koursaros.net; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FrNSXNNWWAJfvSQquTO7tUS1qYL3cY7mqJwXbuwe1qAoe0lyHxO3XRa6%2Fe%2BdHEbFOLWdT26YFqOtqTNQFV5RV2Zd68Uo9apszQKJjrQ6BvXIPsLzGVHaaWvtbGjVf5mhWeC8hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4489fb320afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
216.58.211.3200 OK 417 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
IP 216.58.211.3:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (660)
Size 417 kB (416807 bytes)
Hash 95a32a4d8f8be968bc15d6ab9b9491d1
fbfbcb40c8d8997096cd2ea3d8cfc3dee1981015
a41096fbcf982d79bf075bf2378c9c0c2e8ada5bdc94bd7cc794454135ccf981
GET /recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: http://nejbgcj17j.25u.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166449
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 23:49:29 GMT
expires: Tue, 28 May 2024 23:49:29 GMT
cache-control: public, max-age=31536000
age: 268786
last-modified: Mon, 22 May 2023 20:58:33 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
koursaros.net/cdn-cgi/challenge-platform/h/g/cv/result/7d0c448298400afe
172.67.208.241200 OK 2 B URL POST HTTP/3 koursaros.net/cdn-cgi/challenge-platform/h/g/cv/result/7d0c448298400afe
IP 172.67.208.241:443
Requested by https://koursaros.net/chat/web_extension.html
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /cdn-cgi/challenge-platform/h/g/cv/result/7d0c448298400afe HTTP/1.1
Host: koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 11794
Origin: https://koursaros.net
DNT: 1
Connection: keep-alive
Referer: https://koursaros.net/chat/web_extension.html
Cookie: __cf_bm=XKop14_aXJnjHoeEFSEWprJqlkTWhprGsRjzFNByHp8-1685672956-0-ARTGnTy9iQ4kkvBnh1CgzX8Lj9UsGe+LoGRc/0riWjv0UxXUOXARB5QSqmgcnMzjGJ/+6wrqxQwaRPrckFGtEyY4mku5pAs2R4XQuIGaGlZu
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: text/plain; charset=UTF-8
set-cookie: __cf_bm=R6RXfQecFqBU8LA8iJAbb9oNk_OYhg8n6SA81Btvwq8-1685672956-0-AQEU2aMuhHb9f2L2nafCNpEx0ZzZDptat/uQsDfeDbQqbSSt3GVTy4zP56QuQn9xcaEg/yxr4J2m9LqsslzhGd2y5fSrsos+PtDqSEdTkfUW; path=/; expires=Fri, 02-Jun-23 02:59:16 GMT; domain=.koursaros.net; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uXQFOFc5xR9lNn4OF%2F0xMY4M7I88AJPkYyizGpmt5nQbQBpjSGDl6gIIz8ZUdNdaymtcCu0eaCcuGD6KSOOyZVjqcqKHrruEzMBkVQbWpvpAykW5G2Oe%2FOBkq7of%2BZpR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c448b3b9f0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff?v=4.7.0
172.67.208.241200 OK 47 kB URL GET HTTP/3 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff?v=4.7.0
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type Web Open Font Format, TrueType, length 98024, version 4.7\012- data
Hash 89a961589f18b58b0dd42e74d12eb631
225d7128734d0707c21ff659bf9023d672020c2b
a1f605f2b520929cc8c3813596fbbc4bb69201a7cae2bbf43c72f9b982e0d97f
GET /wp-content/themes/fairy/candidthemes/assets/framework/Font-Awesome/fonts/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: https://www.koursaros.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:16 GMT
content-type: font/woff
content-length: 98024
last-modified: Mon, 05 Dec 2022 18:41:28 GMT
etag: "17ee8-5ef19090af063"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KmojjdIWnD5U6dzkP1v3JLX5iPYDKKmzicVM8Lt9euGj5GgJbeN6ss8VcBWFzYug9hCIgqeABUyBSUoMtbdDOy9Yqzegy2BAv6quipavbHftyvK0er0fodLQL62lmT7OKtrC2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0c448619b50afe-OSL
alt-svc: h3=":443"; ma=86400
www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7
172.67.208.241200 OK 1.9 kB URL GET HTTP/3 www.koursaros.net/wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7
IP 172.67.208.241:443
Requested by http://nejbgcj17j.25u.com/
Certificate IssuerLet's Encrypt
Subject*.koursaros.net
Fingerprint04:D8:55:AD:D1:95:5B:3B:05:89:D6:54:88:5A:88:E9:02:92:3F:D1
ValidityMon, 10 Apr 2023 00:14:19 GMT - Sun, 09 Jul 2023 00:14:18 GMT
File type ASCII text, with very long lines (2133), with no line terminators
Hash 6e584e213f8cdeddd56c11150dd301f2
003e7dd95ccf99c4d3cf532e0a7981cadbb24c4e
94b153ff05da7ebe47d397ac8db33053d830889ffcad8a942c55099af6475562
GET /wp-content/themes/fairy/candidthemes/assets/framework/slick/slick.css?ver=1.3.7 HTTP/1.1
Host: www.koursaros.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://nejbgcj17j.25u.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 02 Jun 2023 02:29:15 GMT
content-type: text/css
last-modified: Mon, 05 Dec 2022 18:41:28 GMT
etag: W/"767-5ef19090af063-gzip"
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 3805
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jEEPETOD2zMFNytMHMRwMtjR73EyZ3mJTskWZOmyjKtT%2BJjkbTO7ap1ZnNpjDIPBH5pCreqnb5AxjmiavnBBXiJ5mtMrK5QW5XJRuGRvAGiF3D3oaWdXxjvLJ5rjXcCCACyv7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0c4482f8660afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
216.58.207.227200 OK 31 kB URL GET HTTP/1.1 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP 216.58.207.227:80
Requested by http://nejbgcj17j.25u.com/
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://nejbgcj17j.25u.com
DNT: 1
Connection: keep-alive
Referer: http://fonts.googleapis.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 31196
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 31 May 2023 05:29:35 GMT
Expires: Thu, 30 May 2024 05:29:35 GMT
Cache-Control: public, max-age=31536000
Age: 161980
Last-Modified: Mon, 11 Jul 2022 20:43:05 GMT
Content-Type: font/woff2