destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
200 OK 35 kB URL User Request GET HTTP/1.1 destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26650), with CRLF, LF line terminators
Hash 4e3e99b6e6bf23a748a3116af1d6c9db
99f30b9adcca3ff096dfac5ec4061360bc5efe51
fae51147771aced97347b374e7e7e8a1ef0dee63a51618b7c72f8ebd272517a1
GET /egIasO?utm_source=&utm_medium=QL&utm_name=1 HTTP/1.1
Host: destyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/5.6.40-0+deb8u16
Set-Cookie: PHPSESSID=194o4ok9gan58aae1mdpt8m8s0; expires=Wed, 07-Jun-2023 07:01:00 GMT; Max-Age=3600; path=/; domain=.shorte.st; HttpOnly
hl=en; expires=Thu, 06-Jun-2024 06:01:00 GMT; Max-Age=31536000; path=/
cookies-enable=1; path=/; httponly
Cache-Control: no-cache
X-Frame-Options: DENY
X-Server-ID: shn09
X-UA-Compatible: IE=Edge
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=16jlbsewLdRrWpnHXGe%2BDsSRdTF6V0nUEs%2B8mDWzYdIuul94%2B7HpKH3ugNmdmJD1azOiFWsDJ35HjJsiLR5nEWku%2BkmMaLmYWlTcJJgyjRZgMzFMD5HoeZbY72nN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d36ad8ece0cb50c-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
d3t3z4teexdk2r.cloudfront.net/?etztd=962089
200 OK 116 kB URL GET HTTP/1.1 d3t3z4teexdk2r.cloudfront.net/?etztd=962089
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type Unicode text, UTF-8 text, with very long lines (15948)
Size 116 kB (115523 bytes)
Hash 7c08766529ab8fbca6965502b98e1d4a
2497de44b8897bd92533eb03fd816a2c75b36e8f
e2285a1e0a9fdd9afab19efec05b23adf5e84274a35f16ef65dc7ec60547bc4b
GET /?etztd=962089 HTTP/1.1
Host: d3t3z4teexdk2r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 115523
Connection: keep-alive
Date: Wed, 07 Jun 2023 06:00:50 GMT
access-control-allow-origin: *
Cache-Control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
Content-Encoding: gzip
Pragma: no-cache
X-Cache: Hit from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: WPdXLXIkCkP0lz6o90l4CUl-RSvqA3Efo3k_FUt-dIVPUDaKaAMKXA==
Age: 10
static.sh.st/js/packed/interstitial-page.js?2022-06-29.0
200 OK 25 kB URL GET HTTP/1.1 static.sh.st/js/packed/interstitial-page.js?2022-06-29.0
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type Unicode text, UTF-8 text, with very long lines (20454)
Hash 06eb8d871dccb0da41b67abac7022ba9
dbe95283dcf49fac294a7d3445efad665c2ee790
88bb3be0111402f5ca81aaa36cbf7c4a2755099c5d0446831331e1d1d8e7a1ef
GET /js/packed/interstitial-page.js?2022-06-29.0 HTTP/1.1
Host: static.sh.st
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=86400
Cf-Bgj: minify
Cf-Polished: origSize=102880
ETag: W/"62bc140d-191e0"
Expires: Wed, 07 Jun 2023 19:36:56 GMT
Last-Modified: Wed, 29 Jun 2022 08:57:49 GMT
Vary: Accept-Encoding
X-Server-ID: shn03
X-UA-Compatible: IE=Edge
CF-Cache-Status: HIT
Age: 37444
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uez0VrzcBNqjphs%2B25ZqMmAAF%2FMUtgM5qyWqYAmJ6Am2Lkn742Fq2qxYLqUNmo%2B19BKfKj%2BtevO8bIH1hrKu0QL74RzIgrVOf1d3GdBtsUBNfsil71PMpLawjgzO%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d36ad90cd72b52d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
static.sh.st/b5/4c/45/48/be/0d/ca/35/64/1c/e2/75/9d/8f/9e/2c/logo1707.png?2022-06-29.0
200 OK 6.2 kB URL GET HTTP/1.1 static.sh.st/b5/4c/45/48/be/0d/ca/35/64/1c/e2/75/9d/8f/9e/2c/logo1707.png?2022-06-29.0
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type PNG image data, 249 x 62, 8-bit/color RGBA, non-interlaced\012- data
Hash 9ca44d211b1779ef13c1f7406a76c1ff
8b5ab1222409a144c8f1d3bd2a098985bd0bcba7
fd7607ab554a8c5af9aed32593ae99aaf0682198dbbd277372e8b663bd98b001
GET /b5/4c/45/48/be/0d/ca/35/64/1c/e2/75/9d/8f/9e/2c/logo1707.png?2022-06-29.0 HTTP/1.1
Host: static.sh.st
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: image/png
Content-Length: 6226
Connection: keep-alive
Last-Modified: Fri, 17 Jul 2015 13:29:04 GMT
ETag: "55a90320-1852"
X-Server-ID: shn01
X-UA-Compatible: IE=Edge
Expires: Wed, 07 Jun 2023 14:06:57 GMT
Cache-Control: max-age=86400
CF-Cache-Status: HIT
Age: 57243
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AkLc8GSE5pz8N7GFac2IC7LZJBpy7PN98W3y81%2Bx%2FdQTUG9LAD3GA1f%2BoOUAZxTA9TOaYpyXYAOc0q5uqo4DsfF6G7L5bcHQPmbbtKbFI6CT5RBakcEi9UhATpxeaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d36ad913dfbb52d-OSL
alt-svc: h2=":443"; ma=60
sh.st/st/67bc8ab5ab558c89e176234140e8de87/drop.hitmoe.com/goto/katfile.com/SFwHVmwk9jXC.zip
27 kB URL sh.st/st/67bc8ab5ab558c89e176234140e8de87/drop.hitmoe.com/goto/katfile.com/SFwHVmwk9jXC.zip
IP
Hash 093ef8f3fcc27b0a93cf51fd7b576b90
b244afe75cf8b3395c6730fc4badfd05b28af2d7
0383661115bd3c39abf908a9fde995d24d89a5837937abc124ae1d1413308ecd
GET /st/67bc8ab5ab558c89e176234140e8de87/drop.hitmoe.com/goto/katfile.com/SFwHVmwk9jXC.zip HTTP/1.1
Host: sh.st
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 07 Jun 2023 06:00:59 GMT
content-type: text/html; charset=UTF-8
location: http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
x-powered-by: PHP/5.6.40-0+deb8u16
cache-control: no-cache
x-server-id: shn05
x-ua-compatible: IE=Edge
access-control-allow-origin: *
cf-cache-status: BYPASS
set-cookie: PHPSESSID=24mceq1a3np9burmpai91o9kd0; expires=Wed, 07-Jun-2023 07:00:59 GMT; Max-Age=3600; path=/; domain=.shorte.st; HttpOnly
hl=en; expires=Thu, 06-Jun-2024 06:00:59 GMT; Max-Age=31536000; path=/
cookies-enable=1; path=/; httponly
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1SQKnqI3ZuGPBfxmGktw8BzWwu6RXWImQHsEx4maWBhNwnqDfxYYfAnvRiB9ToV7RDkF39Ht7r%2FZz%2FaNcno8opWYFpR9OWWltzwJXH%2FU2rQY60TLOtxv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d36ad8d6e44b505-OSL
X-Firefox-Spdy: h2
destyy.com/bundles/smeweb/img/tracking-168861.gif?t=1686117660
43 B URL destyy.com/bundles/smeweb/img/tracking-168861.gif?t=1686117660
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /bundles/smeweb/img/tracking-168861.gif?t=1686117660 HTTP/1.1
Host: destyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Cookie: hl=en; cookies-enable=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
X-Server-ID: shn06
X-UA-Compatible: IE=Edge
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3uTO9efxg2L7YqyYBS2h9%2BLEZ63qxNRSs7MUbEBFY9E0zf0iChIOzEQFAVf65cm5rrv30xyRi3Vc18cpZde1uZaleXXZ0W2pWhEctcvIVbgCzXPpLuqJf3uy8AaK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d36ad9138aeb50c-OSL
alt-svc: h3=":443"; ma=86400
ubbfpm.com/ms/1102360/inpage.js
201 kB URL ubbfpm.com/ms/1102360/inpage.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Size 201 kB (200738 bytes)
Hash af413834dffb762ffcfa6c20ce98ad42
1cc019785a20cf05f8804da008409a6ed8ba4a72
37800f9f2bb9d6543c17667dca9695da535d5b01fcf095db9d20d9782f1d22d0
GET /ms/1102360/inpage.js HTTP/1.1
Host: ubbfpm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: application/javascript
Content-Length: 200738
Last-Modified: Fri, 21 Apr 2023 15:45:14 GMT
Connection: keep-alive
ETag: "6442af8a-31022"
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Content-Security-Policy: default-src https: data: 'unsafe-inline' 'unsafe-eval'
Referrer-Policy: strict-origin
Accept-Ranges: bytes
destyy.com/bundles/smeweb/img/advertisement-tracking-168861.gif?t=1686117660
200 OK 43 B URL GET HTTP/1.1 destyy.com/bundles/smeweb/img/advertisement-tracking-168861.gif?t=1686117660
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /bundles/smeweb/img/advertisement-tracking-168861.gif?t=1686117660 HTTP/1.1
Host: destyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Cookie: hl=en; cookies-enable=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
X-Server-ID: shn05
X-UA-Compatible: IE=Edge
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7VFqV6cAl95vEcC4u2ZHoVPNUovgfeXjDSobYFHPA9gWffnFDpDNta%2B48OPdlQBW9MR5yrL5w2waTVc4fjvNgmbKk3Vmdm%2BrAPpXQYEhp91Vwx06y%2BjEjpruFbKk"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d36ad913ba8b529-OSL
alt-svc: h3=":443"; ma=86400
destyy.com/bundles/advertisement/img/tracking.gif?test=27cad12f60289106b3ca7b3a571db631cc996faa
0 B URL destyy.com/bundles/advertisement/img/tracking.gif?test=27cad12f60289106b3ca7b3a571db631cc996faa
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bundles/advertisement/img/tracking.gif?test=27cad12f60289106b3ca7b3a571db631cc996faa HTTP/1.1
Host: destyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Cookie: hl=en; cookies-enable=1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: image/gif
Content-Length: 0
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 08:56:54 GMT
ETag: "62bc13d6-0"
X-Server-ID: shn01
X-UA-Compatible: IE=Edge
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JBDdyTPXntKJrufyfuYgRlY01y8OAjBkx0evFBFSFS1RFso8mAnWZmTWumhYZR65OLdwtKO5kYBe8wf8e3oyiKFmi4Pddu%2FmXp6vgiHJHc9Joz4k4P9lDeLAKTZb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d36ad913f29b523-OSL
alt-svc: h3=":443"; ma=86400
static.sh.st/bundles/smeweb/img/widget-sprite.png?2022-06-29.0
200 OK 84 kB URL GET HTTP/1.1 static.sh.st/bundles/smeweb/img/widget-sprite.png?2022-06-29.0
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type PNG image data, 1000 x 2704, 8-bit colormap, non-interlaced\012- data
Hash 0eb6767d5ee6d6e7b3884a01b7730c80
4bc5d39918bcea70e852e0fb7b3d15caf0993434
8146dfca511f063c33c05e13e151ed3d3456441590a4b1358bbc99b320a02b8d
GET /bundles/smeweb/img/widget-sprite.png?2022-06-29.0 HTTP/1.1
Host: static.sh.st
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: image/png
Content-Length: 84545
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 08:56:53 GMT
ETag: "62bc13d5-14a41"
X-Server-ID: shn07
X-UA-Compatible: IE=Edge
Expires: Wed, 07 Jun 2023 10:56:28 GMT
Cache-Control: max-age=86400
CF-Cache-Status: HIT
Age: 68672
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eMZvFdSitkSjRHf%2FufvfNSeTuuhmAOObjQ1211s7fwMQfzricLz9Me422ZoRg%2FbfGQwcjw5mFA2OVHFOc3a9kFltAc4y7N04e106nqyT02tAmlK%2Fj4%2B0wdhCJvxkzw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7d36ad923f13b52d-OSL
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 10:39:52 GMT
expires: Wed, 05 Jun 2024 10:39:52 GMT
cache-control: public, max-age=31536000
age: 69668
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Jun 2023 10:39:52 GMT
expires: Wed, 05 Jun 2024 10:39:52 GMT
cache-control: public, max-age=31536000
age: 69668
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/NWc2bHJUBVUBTVRaVEoHRwsLSUBzQgQqFgYTBRZGQQJTFBZeVURCEVkIQwgURwhYGFxbAkJJQHNeVwY4cipcBzhtNF45MF1SVCUVDSZuLTAHJFEuP2IjYAgkTQhmJ0NzAHc5MAY2BSFXByVgPjB9NgYUNWUhbyklXTZHOUNWKXJeMG0xQQciUR9kNTZZJQEuGg0CZwUebyV3AD5/VgcjN14mE14wYDEHISBMBGY6M2Muel1HYyROCEJRJk4pM1gqdy8nfyxSGz9WMG4uGHQmXSslTA9+PScNJlIHHXc/cV0Fdw9ONhFyKncvIF0ibxs0ATBBJlcHIX4tHnEhBUEjdj9RVSB5MQYPJX01Bi0VXQZ3AhF2JHNUM1ELZD01cwRRNCdzN3ctM3EkcB8RUQ9kISRCKhAGAVoJRlEfVj5dHkNELWILJEAd
1.2 kB URL kultingecauyuksehinkitw.info/NWc2bHJUBVUBTVRaVEoHRwsLSUBzQgQqFgYTBRZGQQJTFBZeVURCEVkIQwgURwhYGFxbAkJJQHNeVwY4cipcBzhtNF45MF1SVCUVDSZuLTAHJFEuP2IjYAgkTQhmJ0NzAHc5MAY2BSFXByVgPjB9NgYUNWUhbyklXTZHOUNWKXJeMG0xQQciUR9kNTZZJQEuGg0CZwUebyV3AD5/VgcjN14mE14wYDEHISBMBGY6M2Muel1HYyROCEJRJk4pM1gqdy8nfyxSGz9WMG4uGHQmXSslTA9+PScNJlIHHXc/cV0Fdw9ONhFyKncvIF0ibxs0ATBBJlcHIX4tHnEhBUEjdj9RVSB5MQYPJX01Bi0VXQZ3AhF2JHNUM1ELZD01cwRRNCdzN3ctM3EkcB8RUQ9kISRCKhAGAVoJRlEfVj5dHkNELWILJEAd
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3023), with no line terminators
Hash 7eefaf5f67c2ddf2639095250cad1e4f
708dc4c4407b9a95200ec5ce02d2e886f70abc77
a6d5aba30a0c62c5c702bec54dc4d3644bf8aeec4a5a42c66b9067c9ec1805b0
GET /NWc2bHJUBVUBTVRaVEoHRwsLSUBzQgQqFgYTBRZGQQJTFBZeVURCEVkIQwgURwhYGFxbAkJJQHNeVwY4cipcBzhtNF45MF1SVCUVDSZuLTAHJFEuP2IjYAgkTQhmJ0NzAHc5MAY2BSFXByVgPjB9NgYUNWUhbyklXTZHOUNWKXJeMG0xQQciUR9kNTZZJQEuGg0CZwUebyV3AD5/VgcjN14mE14wYDEHISBMBGY6M2Muel1HYyROCEJRJk4pM1gqdy8nfyxSGz9WMG4uGHQmXSslTA9+PScNJlIHHXc/cV0Fdw9ONhFyKncvIF0ibxs0ATBBJlcHIX4tHnEhBUEjdj9RVSB5MQYPJX01Bi0VXQZ3AhF2JHNUM1ELZD01cwRRNCdzN3ctM3EkcB8RUQ9kISRCKhAGAVoJRlEfVj5dHkNELWILJEAd HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1176
Connection: keep-alive
Date: Wed, 07 Jun 2023 06:01:00 GMT
Server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
Pragma: no-cache
P3P: CP="NID DSP ALL COR"
content-encoding: gzip
Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
X-Cache: Miss from cloudfront
Via: 1.1 d2344bac503cfadf51884e9930680ffe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: AciDETeliQCA_6-kdJmFgrOP6uqTVIXqMaBJlKqiUoWXumqs9efWGQ==
kultingecauyuksehinkitw.info/a1I4SjYKMFsnCQpvWmxDGT4FbwQtdwoMUlgmCzACHzddMlIAYEpkVQc9TS5QGT1WPhgFN0xvBC0kYRxGEwhVKXUlAAALYSkHQgxgHzdueF4pCgkcfiYTcQB1ORRWBQcxNHUJfxEUfHICOzlhBGYAMU0JQSEzbRJBDxBPIXExY1sOdToYVhtzKhV6Hl4mB1MPYyRiTwZ1KSFCAmcEFWoNUVgHCCZkDWJ2HWITPkobcyUHcXkPLwRfOX8lE2kvZwccSQlgXgBoJ04tAwkbXA1idh1wOTYdeHA6O1wdYzwcXhxdXhdZD3MpE18DTiM5dhx8WTp6HAcPAFl6Gy0KaSZ4GhRPcmApFk8vfgAYbAJzKQpuIQ8aBEAEVz4THiBFBDxId3xbamkydBkKYS4BAAs
1.2 kB URL kultingecauyuksehinkitw.info/a1I4SjYKMFsnCQpvWmxDGT4FbwQtdwoMUlgmCzACHzddMlIAYEpkVQc9TS5QGT1WPhgFN0xvBC0kYRxGEwhVKXUlAAALYSkHQgxgHzdueF4pCgkcfiYTcQB1ORRWBQcxNHUJfxEUfHICOzlhBGYAMU0JQSEzbRJBDxBPIXExY1sOdToYVhtzKhV6Hl4mB1MPYyRiTwZ1KSFCAmcEFWoNUVgHCCZkDWJ2HWITPkobcyUHcXkPLwRfOX8lE2kvZwccSQlgXgBoJ04tAwkbXA1idh1wOTYdeHA6O1wdYzwcXhxdXhdZD3MpE18DTiM5dhx8WTp6HAcPAFl6Gy0KaSZ4GhRPcmApFk8vfgAYbAJzKQpuIQ8aBEAEVz4THiBFBDxId3xbamkydBkKYS4BAAs
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3002), with no line terminators
Hash 93544ad49088a67a61581b89085de228
1409a773f7225917b9a5832b7c9d8646d8c0f221
3984809cf5e417d00e18b6b6009501f7314a7b09cd444992452f6687d6a01dc2
GET /a1I4SjYKMFsnCQpvWmxDGT4FbwQtdwoMUlgmCzACHzddMlIAYEpkVQc9TS5QGT1WPhgFN0xvBC0kYRxGEwhVKXUlAAALYSkHQgxgHzdueF4pCgkcfiYTcQB1ORRWBQcxNHUJfxEUfHICOzlhBGYAMU0JQSEzbRJBDxBPIXExY1sOdToYVhtzKhV6Hl4mB1MPYyRiTwZ1KSFCAmcEFWoNUVgHCCZkDWJ2HWITPkobcyUHcXkPLwRfOX8lE2kvZwccSQlgXgBoJ04tAwkbXA1idh1wOTYdeHA6O1wdYzwcXhxdXhdZD3MpE18DTiM5dhx8WTp6HAcPAFl6Gy0KaSZ4GhRPcmApFk8vfgAYbAJzKQpuIQ8aBEAEVz4THiBFBDxId3xbamkydBkKYS4BAAs HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 1158
Connection: keep-alive
Date: Wed, 07 Jun 2023 06:01:00 GMT
Server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
Pragma: no-cache
P3P: CP="NID DSP ALL COR"
content-encoding: gzip
Accept-CH: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
X-Cache: Miss from cloudfront
Via: 1.1 8556a7e6f097b43ef38a15da76d83874.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: Z75ycuFsgaTFW4ZFfdzh5MxWEgeDn0kTPNLo1lTwBtRr6sWJnuhhWw==
thycantyoubelike.com/M2NUMDMcXDdDDmAmGkF8ezFxAnFWUhlgYQAPZ2hURyY3eHFgIgFpFUcKMA0KBVFkCAoVEz1UDgJFJ0RSRxYnDQIVCjpWXA5FIg0CHVBgHgABTWYWRg5SckRDUgRpARVDFyBcDgJVbAYCAlRiBQoKUWM
0 B URL thycantyoubelike.com/M2NUMDMcXDdDDmAmGkF8ezFxAnFWUhlgYQAPZ2hURyY3eHFgIgFpFUcKMA0KBVFkCAoVEz1UDgJFJ0RSRxYnDQIVCjpWXA5FIg0CHVBgHgABTWYWRg5SckRDUgRpARVDFyBcDgJVbAYCAlRiBQoKUWM
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /M2NUMDMcXDdDDmAmGkF8ezFxAnFWUhlgYQAPZ2hURyY3eHFgIgFpFUcKMA0KBVFkCAoVEz1UDgJFJ0RSRxYnDQIVCjpWXA5FIg0CHVBgHgABTWYWRg5SckRDUgRpARVDFyBcDgJVbAYCAlRiBQoKUWM HTTP/1.1
Host: thycantyoubelike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 07 Jun 2023 06:01:00 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9jmu3WlVd1ENyrpLZu1%2BlKY%2BVkHT30AtyDwGAn91pGMwAwHXZxNWmgzP7y%2BgOpjKfGO8DMH%2B9d2FmS3IfZ8%2F1UcO7vRCIqxG5IIceOwFYdHCUVJeEHGRUbge9INuVz36pJLJnFSqoA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d36ad928cd2b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Raleway:400,700
1.7 kB URL fonts.googleapis.com/css?family=Raleway:400,700
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3028)
Hash bd582e0897272ab2516c0f3de93f06cf
7a371868a06ce551392162ef963ecc721f3055c4
f598e6c492e9a8703ceeba065253a3561a1047fd25629c28f854b8a2376fe88d
GET /css?family=Raleway:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Jun 2023 06:01:00 GMT
date: Wed, 07 Jun 2023 06:01:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
thycantyoubelike.com/bE5nNENDcQRHfjsGMXImKyIAZS0+AzAGAS4tVw0gDn4lDBA6dkFAKghzXgF6XX9fEjMFKloFZR86BkA2H3NWEioCKAgJZRpzVhpwWGBUBm1eaBIJcko6F1UkUX9BRDcYIloFdVR4VgV0WnteDXZa
0 B URL thycantyoubelike.com/bE5nNENDcQRHfjsGMXImKyIAZS0+AzAGAS4tVw0gDn4lDBA6dkFAKghzXgF6XX9fEjMFKloFZR86BkA2H3NWEioCKAgJZRpzVhpwWGBUBm1eaBIJcko6F1UkUX9BRDcYIloFdVR4VgV0WnteDXZa
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bE5nNENDcQRHfjsGMXImKyIAZS0+AzAGAS4tVw0gDn4lDBA6dkFAKghzXgF6XX9fEjMFKloFZR86BkA2H3NWEioCKAgJZRpzVhpwWGBUBm1eaBIJcko6F1UkUX9BRDcYIloFdVR4VgV0WnteDXZa HTTP/1.1
Host: thycantyoubelike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Wed, 07 Jun 2023 06:01:00 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GfOkMP1w3RjMXv9eGg4TmzTifPYqn5y4SqbULjsypKi%2BCFkc2JECkvlMhz0%2FECB7m9WaJAzgkU4nLntj9Oc5EW6upBEkTBD%2F8irz90X14C2ShoZyvg6vuZy%2FlTlIq1onppibzESpOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d36ad928cd3b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ptauxofi.net/pfe/current/tag.min.js?z=4157053
6.0 kB URL ptauxofi.net/pfe/current/tag.min.js?z=4157053
IP
File type C source, ASCII text, with very long lines (14679), with no line terminators
Hash a638f334f18bf9bef5435cdffe56f9f0
503868073788922413ff3cad1d6404928280acce
79956329e90a4e4abfdf9c3a4d69d4c78e32b8b1d9f602add95d9e9d0cc32b29
GET /pfe/current/tag.min.js?z=4157053 HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:00 GMT
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 13:08:32 GMT
etag: W/"6479e9d0-3957"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
ptauxofi.net/zone?pub=0&zone_id=4157053&is_mobile=false&domain=destyy.com&var=&ymid=&var_3=
200 OK 908 B URL GET HTTP/2 ptauxofi.net/zone?pub=0&zone_id=4157053&is_mobile=false&domain=destyy.com&var=&ymid=&var_3=
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectptauxofi.net
FingerprintAF:B4:C4:7A:83:50:A4:53:5D:0F:35:13:C2:AB:4D:74:A3:C8:E3:1B
ValidityTue, 21 Mar 2023 05:09:12 GMT - Mon, 19 Jun 2023 05:09:11 GMT
File type JSON data\012- , ASCII text, with very long lines (907)
Hash aa10e80f23b05dd956f0e6d06a8349fc
94b31c78d69a09eb52a5a4a98fcb87f6e986732c
06569a30fc27c6f587f908ef3e90d0bd7ef489a4d2c24664937a491097857382
GET /zone?pub=0&zone_id=4157053&is_mobile=false&domain=destyy.com&var=&ymid=&var_3= HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:00 GMT
content-type: application/json; charset=utf-8
content-length: 908
x-trace-id: 4e1777a43c01605fe10786420232a1d6
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-5SFMWPJ
42 kB URL www.googletagmanager.com/gtm.js?id=GTM-5SFMWPJ
IP
File type ASCII text, with very long lines (2271)
Hash af324999e3a15031ecc443fdf14dcaaa
3373aac3d623a49a93dc40254427ffddaac7cf66
c7ecea5e5538c90da5fffa6e446f33503020c9c36da00c64e130e57059d114b0
GET /gtm.js?id=GTM-5SFMWPJ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Jun 2023 06:01:00 GMT
expires: Wed, 07 Jun 2023 06:01:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41629
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ptauxofi.net/custom
200 OK 0 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectptauxofi.net
FingerprintAF:B4:C4:7A:83:50:A4:53:5D:0F:35:13:C2:AB:4D:74:A3:C8:E3:1B
ValidityTue, 21 Mar 2023 05:09:12 GMT - Mon, 19 Jun 2023 05:09:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:00 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
xngqoc.com/cuload?a=1&e=aeyJwaWQiOjExNDQ2NDYsInNpZCI6MTE5MDM3NSwid2lkIjo0MzMzNDAsImQiOiIiLCJsaSI6MX0=&tz=0&if=0&u=aHR0cDovL2Rlc3R5eS5jb20vZWdJYXNP
204 No Content 0 B URL GET HTTP/2 xngqoc.com/cuload?a=1&e=aeyJwaWQiOjExNDQ2NDYsInNpZCI6MTE5MDM3NSwid2lkIjo0MzMzNDAsImQiOiIiLCJsaSI6MX0=&tz=0&if=0&u=aHR0cDovL2Rlc3R5eS5jb20vZWdJYXNP
IP
ASN #39572 DataWeb Global Group B.V.
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectxngqoc.com
Fingerprint4D:ED:76:7E:B2:4F:87:9C:A3:0B:79:50:6F:CF:19:D2:D9:16:F6:BF
ValidityTue, 02 May 2023 05:01:15 GMT - Mon, 31 Jul 2023 05:01:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /cuload?a=1&e=aeyJwaWQiOjExNDQ2NDYsInNpZCI6MTE5MDM3NSwid2lkIjo0MzMzNDAsImQiOiIiLCJsaSI6MX0=&tz=0&if=0&u=aHR0cDovL2Rlc3R5eS5jb20vZWdJYXNP HTTP/1.1
Host: xngqoc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx/1.18.0
date: Wed, 07 Jun 2023 06:01:00 GMT
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
X-Firefox-Spdy: h2
xngqoc.com/er?a=1
0 B IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxngqoc.com
Fingerprint4D:ED:76:7E:B2:4F:87:9C:A3:0B:79:50:6F:CF:19:D2:D9:16:F6:BF
ValidityTue, 02 May 2023 05:01:15 GMT - Mon, 31 Jul 2023 05:01:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /er?a=1 HTTP/1.1
Host: xngqoc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 07 Jun 2023 06:01:00 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ptauxofi.net/custom
200 OK 39 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectptauxofi.net
FingerprintAF:B4:C4:7A:83:50:A4:53:5D:0F:35:13:C2:AB:4D:74:A3:C8:E3:1B
ValidityTue, 21 Mar 2023 05:09:12 GMT - Mon, 19 Jun 2023 05:09:11 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Content-Type: application/json
Content-Length: 395
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:00 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: a00b02a98cb4e3d920cb262b964cfc75
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-997869120&l=dataLayer&cx=c
54 kB URL www.googletagmanager.com/gtag/js?id=AW-997869120&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (2271)
Hash b74edeea544b7190a4fd9fc59603d8ba
5d1841540bd48f18408ae0bff48461794e57efde
497ea29fad3e4a053901b61963e7f741552083e39cacb5bae86018e5fa8f9cd9
GET /gtag/js?id=AW-997869120&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 07 Jun 2023 06:01:00 GMT
expires: Wed, 07 Jun 2023 06:01:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 54489
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
amunfezanttor.com/event
200 OK 0 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=d9ac3d033329456fa3fed97bf40e7a57&zoneId=4157053&checkDuplicate=true&ymid=&var=
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=d9ac3d033329456fa3fed97bf40e7a57&zoneId=4157053&checkDuplicate=true&ymid=&var=
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash 91958155664e1c2bf8227899a6c08cea
74921b92680fa84635b55d847120dce28bf5bf50
6b9414400832d26d95aad66d52555ab390753016ebe4eca6bd227f24fb9bccdf
GET /gid.js?pub=0&userId=d9ac3d033329456fa3fed97bf40e7a57&zoneId=4157053&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://destyy.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=d9ac3d033329456fa3fed97bf40e7a57; expires=Thu, 06 Jun 2024 06:01:01 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
d3t3z4teexdk2r.cloudfront.net/icWU4ancSClYMSAUMXFdORFwJW09XD0sFGQFYVw4BFxBiEh48MVRfOjYxHh4NFVgITBsQC19XURQLW1dGVwRcCEpFQ0waGBpYWxMWHhJAGA8SAR4fFkwIVxAeHQlZT0U3UBZaUkNVEBJGQEALKFJDVVQDGQQdHVhHCV0ONUFFQAsoUkNVShxSQiQJWk5fVR-FPRUECXQkcHkAKLEVBVAhaRkFUHVhHFwxKDxEeHR1YMUBUCURHVxAFWw
506 B URL d3t3z4teexdk2r.cloudfront.net/icWU4ancSClYMSAUMXFdORFwJW09XD0sFGQFYVw4BFxBiEh48MVRfOjYxHh4NFVgITBsQC19XURQLW1dGVwRcCEpFQ0waGBpYWxMWHhJAGA8SAR4fFkwIVxAeHQlZT0U3UBZaUkNVEBJGQEALKFJDVVQDGQQdHVhHCV0ONUFFQAsoUkNVShxSQiQJWk5fVR-FPRUECXQkcHkAKLEVBVAhaRkFUHVhHFwxKDxEeHR1YMUBUCURHVxAFWw
IP
File type ASCII text, with very long lines (699), with no line terminators
Hash aa38541287cbc7c6e76048ca97985739
999aee35fed72ca85b15ae9a0b501e3eefb10411
dd7b260df31126c4c5b17a09d1be60d9214b31b8c5fc1477a96c2f009735ad07
GET /icWU4ancSClYMSAUMXFdORFwJW09XD0sFGQFYVw4BFxBiEh48MVRfOjYxHh4NFVgITBsQC19XURQLW1dGVwRcCEpFQ0waGBpYWxMWHhJAGA8SAR4fFkwIVxAeHQlZT0U3UBZaUkNVEBJGQEALKFJDVVQDGQQdHVhHCV0ONUFFQAsoUkNVShxSQiQJWk5fVR-FPRUECXQkcHkAKLEVBVAhaRkFUHVhHFwxKDxEeHR1YMUBUCURHVxAFWw HTTP/1.1
Host: d3t3z4teexdk2r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kultingecauyuksehinkitw.info/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 506
Connection: keep-alive
Date: Wed, 07 Jun 2023 06:01:01 GMT
access-control-allow-origin: *
Cache-Control: max-age=31556926
Content-Encoding: gzip
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: M8Pri1Utvx6mUeWnEd984OKSnpSuSVayNOHo8jDKDmrvtnXmpzeyUQ==
d3t3z4teexdk2r.cloudfront.net/9ajJGMjkJXShUBh5bIg8AXAB2CgBMWDVdVxoPK1FgAUB3Q3M+VRBHQ0xGPFYEWhQqU1cND2BXVwkPdxRYDlB7Bh8eQilZBAlLJ11OEkA+UV1MRycPVAVIL15VCxd0dAxEAmMACUJKdwMcWXBjAAkGWyhHQU8AdkoBXG1wBhxZcGMACRhEYwF4WwJ/HAlDF3-QCXg9RLV0cWHR0AghaAncCCE8AdlRQGFcgXUFPAAADCFscdhRMVwM
497 B URL d3t3z4teexdk2r.cloudfront.net/9ajJGMjkJXShUBh5bIg8AXAB2CgBMWDVdVxoPK1FgAUB3Q3M+VRBHQ0xGPFYEWhQqU1cND2BXVwkPdxRYDlB7Bh8eQilZBAlLJ11OEkA+UV1MRycPVAVIL15VCxd0dAxEAmMACUJKdwMcWXBjAAkGWyhHQU8AdkoBXG1wBhxZcGMACRhEYwF4WwJ/HAlDF3-QCXg9RLV0cWHR0AghaAncCCE8AdlRQGFcgXUFPAAADCFscdhRMVwM
IP
File type ASCII text, with very long lines (701), with no line terminators
Hash c56beed9aaacf656ca73c19338686a97
4cf4de824397aafb3b287ef8f40c1cc8c84e4a17
d5f5e61932eb7eced6b53998e9ceb1f4199f7afeb79dab29000dc396bc0b6b76
GET /9ajJGMjkJXShUBh5bIg8AXAB2CgBMWDVdVxoPK1FgAUB3Q3M+VRBHQ0xGPFYEWhQqU1cND2BXVwkPdxRYDlB7Bh8eQilZBAlLJ11OEkA+UV1MRycPVAVIL15VCxd0dAxEAmMACUJKdwMcWXBjAAkGWyhHQU8AdkoBXG1wBhxZcGMACRhEYwF4WwJ/HAlDF3-QCXg9RLV0cWHR0AghaAncCCE8AdlRQGFcgXUFPAAADCFscdhRMVwM HTTP/1.1
Host: d3t3z4teexdk2r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kultingecauyuksehinkitw.info/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 497
Connection: keep-alive
Date: Wed, 07 Jun 2023 06:01:01 GMT
access-control-allow-origin: *
Cache-Control: max-age=31556926
Content-Encoding: gzip
X-Cache: Miss from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wrSECKmSmQ5qA_NgVNhGh5tZWmIGbpgLQkxXJS1XGX3eHZiGZk6Ujg==
d3t3z4teexdk2r.cloudfront.net/vYVpxZmcCNR8AWBUzFVteV2hBX1VHMAIJCRFnO1ZfMCIzFD84PkYNPkcuCwJaUXwdBwkGZ1cDCQJnQEAGBThMUkEUO0wLCBszHQoGRGg3U0lRf0NWTxlrQENUI39DVgsINAQeQlNqCV5RPmxFQ1Qjf0NWFRd/QidWUWNfVk5EaEEBAgIxHkNVJ2hBV1dRa0-FXQlNqFw8VBDweHkJTHEBXVk9qVxNaUA
208 B URL d3t3z4teexdk2r.cloudfront.net/vYVpxZmcCNR8AWBUzFVteV2hBX1VHMAIJCRFnO1ZfMCIzFD84PkYNPkcuCwJaUXwdBwkGZ1cDCQJnQEAGBThMUkEUO0wLCBszHQoGRGg3U0lRf0NWTxlrQENUI39DVgsINAQeQlNqCV5RPmxFQ1Qjf0NWFRd/QidWUWNfVk5EaEEBAgIxHkNVJ2hBV1dRa0-FXQlNqFw8VBDweHkJTHEBXVk9qVxNaUA
IP
File type ASCII text, with no line terminators
Hash 964302ec5ec341b7ea08c8b7306cd0bf
2bea11fb377a68c7f9a0a1de14b6d25acc41c4d5
6af75d26706a3262850e276cbe6e15519856004ad61aa78edb2c78953916fd4a
GET /vYVpxZmcCNR8AWBUzFVteV2hBX1VHMAIJCRFnO1ZfMCIzFD84PkYNPkcuCwJaUXwdBwkGZ1cDCQJnQEAGBThMUkEUO0wLCBszHQoGRGg3U0lRf0NWTxlrQENUI39DVgsINAQeQlNqCV5RPmxFQ1Qjf0NWFRd/QidWUWNfVk5EaEEBAgIxHkNVJ2hBV1dRa0-FXQlNqFw8VBDweHkJTHEBXVk9qVxNaUA HTTP/1.1
Host: d3t3z4teexdk2r.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://kultingecauyuksehinkitw.info/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Length: 208
Connection: keep-alive
Date: Wed, 07 Jun 2023 06:01:01 GMT
access-control-allow-origin: *
Cache-Control: max-age=31556926
Content-Encoding: gzip
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Fe_e_kvM-fUmnA7q_aHUGNJt_x0ik3ifUH1wGiQgHIvfbR9fpVv55w==
xngqoc.com/trt?a=1&t=325
0 B IP
ASN #39572 DataWeb Global Group B.V.
Certificate IssuerLet's Encrypt
Subjectxngqoc.com
Fingerprint4D:ED:76:7E:B2:4F:87:9C:A3:0B:79:50:6F:CF:19:D2:D9:16:F6:BF
ValidityTue, 02 May 2023 05:01:15 GMT - Mon, 31 Jul 2023 05:01:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /trt?a=1&t=325 HTTP/1.1
Host: xngqoc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 07 Jun 2023 06:01:01 GMT
content-length: 0
access-control-allow-origin: *
access-control-allow-credentials: true
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash ca6658271c7fa4cf0ea97a1374aadd3d
2bd6ff70059531bd0c54a5f4bdac2c0aface03d5
d0858fc5df1c8cd2244926475f529f3488d883987ddc1ab22e1a839c1f29a05e
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Content-Type: application/json
Content-Length: 518
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: 02a2e9dc77ae3c09b5f9c26e20ab12a2
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 0852565a997d07643ab204bfb03e79a8
f1a7dbb160b254a838214c144e2bead4a5420b6e
24879b6a73afc7048eac152ad2723b585fb0e7b4c117629766c76110390344be
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Content-Type: application/json
Content-Length: 518
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: 0719671fdcdfc8ae8b180371d840136b
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
302 Found 0 B URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint7A:FE:A8:C4:0F:E7:3E:DE:00:43:83:43:39:F5:0A:1A:CC:D5:74:0E
ValidityFri, 19 May 2023 12:58:14 GMT - Fri, 11 Aug 2023 12:58:13 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&uilel=3&hl=en&service=mail HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
set-cookie: __Host-GAPS=1:I6pnt-7B1yWKKH-WEd4Kcu3IdLBIMQ:DoGwnYowdCkXpSnN; Expires=Fri, 06-Jun-2025 06:01:01 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Jun 2023 06:01:01 GMT
location: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico&ffgf=1&hl=en&passive=true&service=mail&uilel=3&ifkv=Af_xneFc6vZi4QhtGEKjgGB9C4C8Amzqvb6VZQttNT7yWefbcWjgJ5NF5LXr0J3fQMf80twThXfp5g
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-BwHedngGqYQLBSt8UyOD8Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy: unsafe-none
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneE5299sp1oDqTGd-gC77WicdYGaVqIqFupy8HKEoD6aWc-2-MNE3zqpip7Tfl2HssMMPAugmQ
302 Found 408 B URL GET HTTP/3 accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneE5299sp1oDqTGd-gC77WicdYGaVqIqFupy8HKEoD6aWc-2-MNE3zqpip7Tfl2HssMMPAugmQ
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (396)
Hash 55cd6a6ed79fed9ed4ac9e4837239f42
c0ad0fdab9a9963a22c32ee27a5939bb867fb28c
d308e4e160dfb4cb54fdcd33b53a2599a8fffc42550908b9cc8d2542fa519166
GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico&ffgf=1&hl=en&passive=true&service=youtube&uilel=3&ifkv=Af_xneE5299sp1oDqTGd-gC77WicdYGaVqIqFupy8HKEoD6aWc-2-MNE3zqpip7Tfl2HssMMPAugmQ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
content-type: text/html; charset=UTF-8
set-cookie: __Host-GAPS=1:vPvYfP1CNLfDxkPjBWjPHUUHEHW-VA:TeVZwtzjTsk1vt7I;Path=/;Expires=Fri, 06-Jun-2025 06:01:01 GMT;Secure;HttpOnly;Priority=HIGH
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Jun 2023 06:01:01 GMT
location: https://accounts.google.com/v3/signin/identifier?dsh=S-1844695949%3A1686117661455076&continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneEHqOBgCr_STK7UOQuN_NAz3EoS0F_MjdkDpBT7nwmb0GFU7MvXdkptVJop6uZEMT1pD8z9vQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-0snswLc_CI18clKCEWhNKA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 408
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
prhzxq.com/wnload?a=1&e=aeyJwaWQiOjExMDIzNjAsInNpZCI6MTE5NDYyMywid2lkIjo0Mzk2MzQsImQiOiIiLCJsaSI6Mn0=&tz=0&if=0&u=aHR0cDovL2Rlc3R5eS5jb20vZWdJYXNP&inc=1
737 B URL prhzxq.com/wnload?a=1&e=aeyJwaWQiOjExMDIzNjAsInNpZCI6MTE5NDYyMywid2lkIjo0Mzk2MzQsImQiOiIiLCJsaSI6Mn0=&tz=0&if=0&u=aHR0cDovL2Rlc3R5eS5jb20vZWdJYXNP&inc=1
IP
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (398)
Hash cb8abf933845b7bcc42bd84c5cf9b2c4
c196073eae92dda5e2bed4df11cc47a525c42657
cc3e690a484b7f659b0129f02c537ca574cd6ca6abbb83a3f9a439f927bba56f
GET /wnload?a=1&e=aeyJwaWQiOjExMDIzNjAsInNpZCI6MTE5NDYyMywid2lkIjo0Mzk2MzQsImQiOiIiLCJsaSI6Mn0=&tz=0&if=0&u=aHR0cDovL2Rlc3R5eS5jb20vZWdJYXNP&inc=1 HTTP/1.1
Host: prhzxq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
accept-ch: Sec-CH-UA-Platform-Version
access-control-allow-origin: *
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
ptauxofi.net/custom
200 OK 39 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectptauxofi.net
FingerprintAF:B4:C4:7A:83:50:A4:53:5D:0F:35:13:C2:AB:4D:74:A3:C8:E3:1B
ValidityTue, 21 Mar 2023 05:09:12 GMT - Mon, 19 Jun 2023 05:09:11 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Content-Type: application/json
Content-Length: 396
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 63ec58c14356553a78c96bd9b65ef402
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
prhzxq.com/wnrw?aid=613181149103081708&a=1
200 OK 0 B URL GET HTTP/2 prhzxq.com/wnrw?aid=613181149103081708&a=1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectprhzxq.com
FingerprintE2:7B:B2:5A:29:BC:18:8B:54:42:18:94:DC:A8:70:6D:AC:91:62:83
ValidityTue, 21 Mar 2023 21:20:12 GMT - Mon, 19 Jun 2023 21:20:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wnrw?aid=613181149103081708&a=1 HTTP/1.1
Host: prhzxq.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 07 Jun 2023 06:01:01 GMT
content-length: 0
access-control-allow-origin: http://destyy.com
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/utx?cb=c6whYIEP7AcF&top=destyy.com&tid=962089
0 B URL kultingecauyuksehinkitw.info/utx?cb=c6whYIEP7AcF&top=destyy.com&tid=962089
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=c6whYIEP7AcF&top=destyy.com&tid=962089 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 07 Jun 2023 06:01:01 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: http://destyy.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 07 Jun 2023 06:02:01 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 350f2b5d7e6ee985da330b123098fd88.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: hmtrUR-ilBVtrkw3KHUUTR6i6GLjTqRSz53va0lCZOzi7B7NhOuxPw==
X-Firefox-Spdy: h2
kultingecauyuksehinkitw.info/utx?cb=0woaQLerhviw&top=destyy.com&tid=959118
0 B URL kultingecauyuksehinkitw.info/utx?cb=0woaQLerhviw&top=destyy.com&tid=959118
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utx?cb=0woaQLerhviw&top=destyy.com&tid=959118 HTTP/1.1
Host: kultingecauyuksehinkitw.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 07 Jun 2023 06:01:01 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: http://destyy.com
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: ut=x; Expires=Wed, 07 Jun 2023 06:02:01 GMT; Max-Age=60
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List
x-cache: Miss from cloudfront
via: 1.1 350f2b5d7e6ee985da330b123098fd88.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: qfeObuN1G6KzQun7vCcZXNWSakQBkCy6jUscyqjfZF3Ic2d3mU8pww==
X-Firefox-Spdy: h2
ptauxofi.net/custom
200 OK 39 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectptauxofi.net
FingerprintAF:B4:C4:7A:83:50:A4:53:5D:0F:35:13:C2:AB:4D:74:A3:C8:E3:1B
ValidityTue, 21 Mar 2023 05:09:12 GMT - Mon, 19 Jun 2023 05:09:11 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Content-Type: application/json
Content-Length: 728
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:02 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 16504f7a9135201634b65fbab709c53f
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
accounts.google.com/v3/signin/identifier?dsh=S-570216085%3A1686117661464022&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneFQIU2cm4zqk2HB3kbXq1wiKb3Bwjz9rwUHpHknSJkYwUTGDXzP_1B0ND7K8is5ZhK9a2ipNQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
403 Forbidden 809 B URL GET HTTP/3 accounts.google.com/v3/signin/identifier?dsh=S-570216085%3A1686117661464022&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneFQIU2cm4zqk2HB3kbXq1wiKb3Bwjz9rwUHpHknSJkYwUTGDXzP_1B0ND7K8is5ZhK9a2ipNQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint55:5E:E6:33:AF:71:86:C2:88:4A:36:5F:68:1D:97:9D:9B:9D:2A:1D
ValidityFri, 19 May 2023 12:53:06 GMT - Fri, 11 Aug 2023 12:53:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1644), with no line terminators
Hash d31fc92ee1b02906856f71bca2a0088a
b084dcd94b649b9e6b73a07c6a632959342a1ecb
bb7349c8708918aa943427936d1c8ac1af84ac900c536865a6734cf67146c2d5
GET /v3/signin/identifier?dsh=S-570216085%3A1686117661464022&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico&ffgf=1&hl=en&ifkv=Af_xneFQIU2cm4zqk2HB3kbXq1wiKb3Bwjz9rwUHpHknSJkYwUTGDXzP_1B0ND7K8is5ZhK9a2ipNQ&passive=true&service=mail&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 403 Forbidden
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Jun 2023 06:01:01 GMT
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
strict-transport-security: max-age=31536000; includeSubDomains
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy-report-only: same-origin; report-to="AccountsSignInUi"
content-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-ukAiWr-7KavnJh7MGNizpg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist
report-to: {"group":"AccountsSignInUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
destyy.com/shortest-url/end-adsession?adSessionId=27cad12f60289106b3ca7b3a571db631cc996faa&adbd=0&callback=reqwest_1686117659890
200 OK 143 B URL GET HTTP/1.1 destyy.com/shortest-url/end-adsession?adSessionId=27cad12f60289106b3ca7b3a571db631cc996faa&adbd=0&callback=reqwest_1686117659890
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type ASCII text, with no line terminators
Hash 677efa94607b0cde5c0d9f16c352cfe3
8bac015c9456f3e96747d0b9d7ecb45dcac030b0
0205dfbd826573ab277ede53c14c878e7a95df7e2f93b2db6f3c623491a3ab40
GET /shortest-url/end-adsession?adSessionId=27cad12f60289106b3ca7b3a571db631cc996faa&adbd=0&callback=reqwest_1686117659890 HTTP/1.1
Host: destyy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Cookie: hl=en; cookies-enable=1; _gcl_au=1.1.367112504.1686117661
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Jun 2023 06:01:08 GMT
Content-Type: text/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.6.40-0+deb8u16
Set-Cookie: PHPSESSID=a4fk9esan5j33q6qgdrq8be983; expires=Wed, 07-Jun-2023 07:01:08 GMT; Max-Age=3600; path=/; domain=.shorte.st; HttpOnly
referrer_url=http%3A%2F%2Fdestyy.com%2FegIasO%3Futm_source%3D%26utm_medium%3DQL%26utm_name%3D1; expires=Thu, 08-Jun-2023 06:01:08 GMT; Max-Age=86400; path=/; httponly
cookies-enable=1; path=/; httponly
Cache-Control: no-cache
X-Server-ID: shn05
X-UA-Compatible: IE=Edge
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d0XPQ7sWAL7xSssRx%2FTldRPH3ZJ8iWURevTEIfYqpPkyos1JSgexalSb5gpOux50Ea6DOqHyPhvoITi5MEJkiyl72X0A4AQ3azByOPlzdePRCnJLO%2BSrFE%2Bj06zX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7d36adc22ad0b529-OSL
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
200 OK 27 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d7f1adc4173e5ffcf896c5b404cc4497
e01cc996d7969c87695f9e83313604b6b8f66d1f
a282396605b7e6514f3c275515ea6f2bd354338e54513dbaf211428bc9e504b5
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: text/plain
set-cookie: csu=2021039513614555@1@1686117661; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lSEHXpoQCjPs2B56OD0wk3Di92QkEsd%2ByeaEfibX3dcTyQG30f3%2FVtHVLOUsf4vrDzApZMscfAYzT4IpJ7hL6QP07pL9AKNQ0UwUQCV7WePN5YMHc%2Bp09ICkOGS1PoWq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d36ad9889e62405-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
i.wmgtr.com/cic/d186Z1xqbgoLvkVafC4w0Mh9PeSfEmlg.png
0 B URL GET i.wmgtr.com/cic/d186Z1xqbgoLvkVafC4w0Mh9PeSfEmlg.png
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjecti.wmgtr.com
Fingerprint7D:1B:65:9B:B8:35:3F:63:AA:D6:0E:B1:DB:13:80:AA:F0:55:75:FC
ValiditySun, 23 Apr 2023 23:02:02 GMT - Sat, 22 Jul 2023 23:02:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /cic/d186Z1xqbgoLvkVafC4w0Mh9PeSfEmlg.png HTTP/1.1
Host: i.wmgtr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: image/png
server: nginx/1.19.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-option: nosniff
content-encoding: gzip
cache-control: max-age=82800
expires: Thu, 08 Jun 2023 05:01:01 GMT
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 102 kB IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
Size 102 kB (102400 bytes)
Hash 4c6426ac7ef186464ecbb0d81cbfcb1e
5a6918eebd9d635e8f632e3ef34e3792b1b5ec13
f627ca4c2c322f15db26152df306bd4f983f0146409b81a4341b9b340c365a16
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: binary/octet-stream
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: HIT
age: 1665
last-modified: Wed, 07 Jun 2023 05:33:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L1lB5UQ0Cfz87QYR1XXHgXwo0hYj5nsH3XcuZCLZJHx4YKjJuzyniUqtawMToG949jA1JYh0gCs8c%2Bwk9itsDLZ4esMSsRAP%2FVDnZaR3b%2F5Og4S3ku6N%2Bg%2F5LfFlkjZB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d36ad9899ec2405-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ja.rewashwudu.com/fmwhVStpL4dxap/46223
200 OK 6 B URL GET HTTP/1.1 ja.rewashwudu.com/fmwhVStpL4dxap/46223
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
File type ASCII text, with no line terminators
Hash 4fc71bf68a1d477bd1523733e34d1e90
15119105cffbe108b6cf290146ab02c9aa8517ba
74c1971a5c7f3f1cfb81b7a0a8717cee5a45841844104566e00bbfca271943ce
GET /fmwhVStpL4dxap/46223 HTTP/1.1
Host: ja.rewashwudu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Jun 2023 06:01:00 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: http://destyy.com
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for, x-requested-with, cache-control, pragma, expires
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
X-Frame-Options: SAMEORIGIN
Set-Cookie: GL_UI4=eJw9jU1Sg0AQhSH8RQ1oV3EAj8AQMcnSTVbegZphGhwD06lmQuLtHa3S3fteffVeEASr8hHCJY0husgGnl8aXe97Ve31tsZq34vda9UoIbp6u1PycIA7M7dOqhFdDOt5kuxat8SwGdAim67tSGMOT976a06WrjaGRLG0Oodk8saYQ6aYrjNyGUFs5YSQHQ1jTzdvyE9iiIQQPhvrc1jBiuYyKu4heTf2cis2aVAUaQAP51G6nnhqjfaYDCw1QvgG6046HIi%2FINM4nxydAWjU7b%2F%2Fe5qMP2uQalxM55HcB%2FI3ouZOdQ%3D%3D; expires=Thu, 08-Jun-2023 06:01:00 GMT; Max-Age=86400; path=/
GL_GI10=eJxNjMuqwjAURWuquRalsuF%2BgD9g8TlwqvN24AeEUo8SqDkhiY%2F69doK4mSzWbBWFEXiP4XQFuPtItvOs%2FUyW2zWiM%2FEEHmBccVXE1yjTHkhyJzdvWwgHZ01G4j5CqPPVxUfCYO8mP2wThoVvubpvu006Fe63RYhaf%2FH%2B3t7HYu1t0h3tX5MD1xfw7vikRgKyluiI5I9O8uuDIT0S7uGjDHUXlnHj0b2MAn6Qk82pPh08hSkQO8mxQs5rUge; expires=Thu, 08-Jun-2023 06:01:00 GMT; Max-Age=86400; path=/
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
thycantyoubelike.com/popunder.gif
200 OK 35 B URL GET HTTP/3 thycantyoubelike.com/popunder.gif
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subjectthycantyoubelike.com
FingerprintEE:1F:4E:1B:ED:D1:D3:7C:D8:9A:87:62:4F:8A:C0:01:0C:0E:25:F4
ValidityThu, 01 Jun 2023 15:44:27 GMT - Wed, 30 Aug 2023 15:44:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /popunder.gif HTTP/1.1
Host: thycantyoubelike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: image/gif
access-control-allow-origin: *
pragma: public
cache-control: public, max-age=604800, immutable
cf-cache-status: HIT
age: 407358
last-modified: Fri, 02 Jun 2023 12:51:43 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gvfG324ftiFDZ0ILtwxTUFyqPFl9G0ztPXQrhK%2FeO1qmSo%2BRPyPb3MxF3iwb0nSAHOhfPrJNehy22JwQddSGpHr%2BPy9%2F4FAJeQ6yvjSAagta2Vt9CPWW4xR4PyE%2FK4p1KBrQ9%2Bh19g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d36ad97ad400b41-OSL
alt-svc: h3=":443"; ma=86400
pogothere.xyz/
200 OK 27 B IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint17:F9:2D:6F:B5:5E:5F:37:A6:FB:BE:61:4F:97:64:33:85:5C:3A:FB
ValidityTue, 28 Feb 2023 00:00:00 GMT - Tue, 27 Feb 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 19db9180c7d71ef9370d189058db3808
42e6e611accee8e9e5473700a8f87f96c19998c4
f7c43ec9bbc7519f9a27e57449487a3950611f8f382b70092bbafaaed533abb8
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: text/plain
set-cookie: csu=1786186786824701@1@1686117661; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RWL5JLtUnx94MoYIs%2BpJIB7FntaKs8S3i0PmEMyB62lCQie5rbAdoV4OssNaMCw8jeKkRX%2BFK5NL8tRaJbr1T8i%2BFvNzst2lCPGD4bZvFLdCk%2B1N8RxzJyrQ3ZfDW2rB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d36ad9879cc2405-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
thycantyoubelike.com/TTRxWFhiCxIrZRxfSWwCf3IGPi8lYic2LHh3J2ECKAcWEw18U1csMSkJSG5qfQ1DfigkUExpYGtHBTksOEdMaX4kWhc3ZWtCTGl2fRpDdmtrQUxpfjlEED9lfBIBLCwhCUBuYHsFQG9ueA1IbGs
204 No Content 0 B URL GET HTTP/2 thycantyoubelike.com/TTRxWFhiCxIrZRxfSWwCf3IGPi8lYic2LHh3J2ECKAcWEw18U1csMSkJSG5qfQ1DfigkUExpYGtHBTksOEdMaX4kWhc3ZWtCTGl2fRpDdmtrQUxpfjlEED9lfBIBLCwhCUBuYHsFQG9ueA1IbGs
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerGoogle Trust Services LLC
Subjectthycantyoubelike.com
FingerprintEE:1F:4E:1B:ED:D1:D3:7C:D8:9A:87:62:4F:8A:C0:01:0C:0E:25:F4
ValidityThu, 01 Jun 2023 15:44:27 GMT - Wed, 30 Aug 2023 15:44:26 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /TTRxWFhiCxIrZRxfSWwCf3IGPi8lYic2LHh3J2ECKAcWEw18U1csMSkJSG5qfQ1DfigkUExpYGtHBTksOEdMaX4kWhc3ZWtCTGl2fRpDdmtrQUxpfjlEED9lfBIBLCwhCUBuYHsFQG9ueA1IbGs HTTP/1.1
Host: thycantyoubelike.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://destyy.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Wed, 07 Jun 2023 06:01:00 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QtAkRG8eLEi9pNXnYqsnY7yIu5O%2FNEIGQKRa0%2FLLKakcbzHTzXok4kzlCX0FOGr2Jq3PSOaHaEt23Gn8QDH8kyMCF2W4YB1irPxD4Vtf%2BJKUY8%2FYsU8iJNY5s6XR%2BJ4fkCLy59AF6Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d36ad929ce3b4ee-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ptauxofi.net/pfe/current/defaultSkin.min.js
200 OK 57 kB URL GET HTTP/2 ptauxofi.net/pfe/current/defaultSkin.min.js
IP
Requested by http://destyy.com/egIasO?utm_source=&utm_medium=QL&utm_name=1
Certificate IssuerLet's Encrypt
Subjectptauxofi.net
FingerprintAF:B4:C4:7A:83:50:A4:53:5D:0F:35:13:C2:AB:4D:74:A3:C8:E3:1B
ValidityTue, 21 Mar 2023 05:09:12 GMT - Mon, 19 Jun 2023 05:09:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: ptauxofi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://destyy.com/
Origin: http://destyy.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 07 Jun 2023 06:01:01 GMT
content-type: application/javascript
last-modified: Fri, 02 Jun 2023 13:08:32 GMT
etag: W/"6479e9d0-df63"
access-control-allow-origin: http://destyy.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
104.26.6.218
185.162.85.14
95.216.206.230
188.114.97.1
0.0.0.0
172.255.6.49
0.0.0.0