POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1839E2EB73C24C27FDA8E6BF4715B73CE52CC1C059BD1DFD9B739E71409CDA3B"
Last-Modified: Mon, 14 Oct 2024 08:07:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18967
Expires: Mon, 14 Oct 2024 14:45:22 GMT
Date: Mon, 14 Oct 2024 09:29:15 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "DD3368B109660E2AD4D41E0454B8A57636C39B539E9E20DA7CEBFFDB1ED3EB09"
Last-Modified: Mon, 14 Oct 2024 07:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19053
Expires: Mon, 14 Oct 2024 14:46:48 GMT
Date: Mon, 14 Oct 2024 09:29:15 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8B02810ECC47D5F71219990370D9538BFFF6E45C5FF895E7A3C60392423C5ADB"
Last-Modified: Sat, 12 Oct 2024 08:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19383
Expires: Mon, 14 Oct 2024 14:52:18 GMT
Date: Mon, 14 Oct 2024 09:29:15 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5438EE24C6B0170E7FA46E12C21B8A3BAC1EB29BC86B1810A267DD3C72EA95AE"
Last-Modified: Mon, 14 Oct 2024 06:24:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19064
Expires: Mon, 14 Oct 2024 14:47:00 GMT
Date: Mon, 14 Oct 2024 09:29:16 GMT
Connection: keep-alive

GET /favicon.ico HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestleaks.de/register
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 301 Moved Permanently
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: text/plain; charset=utf-8
content-length: 43
x-powered-by: Express
location: /register
vary: Accept, Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 729
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GRoiNbo1QzH%2FS5MNn5aIHG2Em%2BJL34miGqtOqCFcVA24RwkkDlj%2BINnMrRV65GaGAYl8pmwjimnXVnltbLAzhdZ2TUouvNSQPH%2FDab%2B34TxWq9J%2FvniqQVP04nWkPqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8d268b48daf3caa9-HAM
alt-svc: h3=":443"; ma=86400

GET /img/Avatar.png HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestleaks.de/css/main.css
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: image/png
content-length: 1998490
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Mon, 05 Aug 2024 14:59:14 GMT
etag: W/"1e7e9a-191230d3849"
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTxkmffR24LzefcKCTb9m8DeEyPzMf%2BvMKZoP2zueDNZZnOtBCn%2F6a8bJxZYOWor9B4Hc5i9oRYSosskb2gciQ3H6lBNRoTkDvMwP6Nbnfhbs43pl3TdeaTjbdbIk%2Bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d268b47285fcaa9-HAM
alt-svc: h3=":443"; ma=86400

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "49A0D47BC68BECFB87EFB3D9271F71A04B3FB324F50BB793A9D012DBE3F0030E"
Last-Modified: Sat, 12 Oct 2024 11:02:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20427
Expires: Mon, 14 Oct 2024 15:09:44 GMT
Date: Mon, 14 Oct 2024 09:29:17 GMT
Connection: keep-alive

GET /css/main.css HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestleaks.de/register
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Wed, 11 Sep 2024 04:21:31 GMT
etag: W/"4f9e-191df50a9ce"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FUZ%2FK3%2BJrBCoZhniPjKvYdqyi28QbvXTeoKTtyjBAfEd2oO4hZKG%2F12dYPg8URq3c%2BfyXdWocuU8OnLY7lllKAm%2BDAkF6YqwSzzVsQD3KL%2BauvQajLV5EG2uPrJOJkU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d268b460e3ecaa9-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /js/main.js HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bestleaks.de/register
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: application/javascript; charset=UTF-8
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Thu, 29 Aug 2024 18:41:47 GMT
etag: W/"734-1919f719761"
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2FK1GGpaZEFy7A3XPwK60XNlHK5KAck8xLunFXOZDLZnbZaVkX0MuIXKbe2PS%2BqyfIchmEiwRHHQGB2C1VJM4Mv5jFQ1WCx9Mf0eTfTRF%2FsQGmy%2Fw3xvRoQOxj%2FYBCc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d268b460e49caa9-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /mov/intro.mp4 HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://bestleaks.de/register
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 206 Partial Content
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: video/mp4
content-length: 3528973
x-powered-by: Express
cache-control: public, max-age=14400
last-modified: Fri, 11 Oct 2024 19:06:07 GMT
etag: W/"35d90d-1927cf953ee"
cf-cache-status: EXPIRED
content-range: bytes 0-3528972/3528973
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LH%2BP6eHdlmkjjZOPmpG%2B%2F0zxcNqoGPN%2B8NTrxqwGzROJ2UepOiVOP%2FuQML8dvrSDMAMm7Q3zzGJWp3GGGmW9ZSC8cDVT%2BlFyFSyirh1QIKruFKeb3qO2l0mY2qCQUB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d268b4788d2caa9-HAM
alt-svc: h3=":443"; ma=86400

GET /register HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://bestleaks.de/register
DNT: 1
Connection: keep-alive
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 14 Oct 2024 09:29:17 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qMD1ZxoYGAVd1sxHgubT8b3lqbBfQLpWU9JpqM6FvfFx%2BMRufv%2Bi0E6PMPbtRRsDk%2BFAeshPz%2FiwThT4a7OO1XcqtSDnRnCrZxG7WOLKQtDbM1BqlUuhE0ooEcvJuBo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8d268b491b54caa9-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET / HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
location: /register
vary: Accept
set-cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ; Path=/; HttpOnly
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ebq4Ow%2FpjK8T%2BvLUWc0tiKGl0uaCaWc%2FJYspbt%2BDiL8l4r3hUa%2FwzYJ%2Fd4GHKI2hA3mPYYNbzjuzHgi1oqhGGE6Tl%2Biwle8xa6k2F%2BjOETIybEPB8T4ZEbgp9mLbxA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8d268b42f986ca64-HAM
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /register HTTP/1.1
Host: bestleaks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: connect.sid=s%3AlpazxkgQD1wolsSnsOR30RdVLNBoJPEL.MvM5%2BgAoWtmcDZSavGGLAdknsv93len%2FKcQB79qHLGQ
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 14 Oct 2024 09:29:16 GMT
content-type: text/html; charset=utf-8
x-powered-by: Express
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znjfhTdj2RmZaMbTuB6IhfXmvyc%2BnBfMllvhySVzN8TBZZO7GVXFTV9FKI78fHa5Kk7MVDQFQhbR4zkh6ZOXkTl2cuM46BqsJhQ3LFvwaeQUZejSfJ6%2B%2BDYlRm2wYbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
speculation-rules: "/cdn-cgi/speculation"
server: cloudflare
cf-ray: 8d268b438a60ca64-HAM
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2