| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Iu8wcelo9Etkcc0v1gdc%2BmqppXrH9CrUmq7wJv206SyrKdim60YdECqMjmwjqG5TrDlqoODVIW4aClo7Fmn06DjEQzedWHoe5qvWWr6GyKXxNYa%2FVLGMKepp8A45WbgVybRt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa698db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3799&min_rtt=3725&rtt_var=1449&sent=21&recv=18&lost=0&retrans=0&sent_bytes=4378&recv_bytes=7216&delivery_rate=159445&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=381&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OreWNo8efoNc0ugOSUqHusHZWzdrssJ%2B0YECe6JCCLu1YVwGXBkcjzV%2Fx3l1QoHU3dvxAvJWS7wI9ZCqV3evGV5fF8HD%2FaleFt0XMq8z1T4ev57uTO3xgYkrxwfb7rKHknuT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa493cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3799&min_rtt=3725&rtt_var=1449&sent=23&recv=18&lost=0&retrans=0&sent_bytes=6417&recv_bytes=7216&delivery_rate=159445&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=382&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xaqCl9p7oCCBxEk3wqJJnof3mizJZs88bVWapTAW62Q3PnJu0xv%2BWJkcdmezVA6Ra4Jzc7MeW3Or%2BNVpGYZlDsQJi3Ix4xjDIOdCKahtLTJUqd%2BjI2dEXHzKtR1TILgmtLxW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa493ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3539&min_rtt=2694&rtt_var=1000&sent=28&recv=21&lost=0&retrans=0&sent_bytes=11489&recv_bytes=7347&delivery_rate=13874&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=394&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UKxkA6Vu5qtAL0NOZwFIPL4GqU%2BT5wePb0iFvhS1mElS6kvT470AxWEyLplZK7mSe42CXHodNtBynuO9jyfmvhXiXUQiZcl%2FIjEICRLwXz2euRHcT4LQLNG6vuwkf8sezId0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa4938b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3539&min_rtt=2694&rtt_var=1000&sent=31&recv=21&lost=0&retrans=0&sent_bytes=14731&recv_bytes=7347&delivery_rate=13874&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=394&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnYCd%2FCxj1sgFY8S88ose%2FYqWoq%2BW2NVEIPKc04KmzKxBVqKfgosVckKIZgX68PX0G8wGjUAAtRW2rX%2B32oqhD1Mgf8h%2BD7NOy0rZpqWLUtXgCI2Tb42H%2BhmetvbRbkzQ6yN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa4936b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3391&min_rtt=2355&rtt_var=1046&sent=35&recv=22&lost=0&retrans=0&sent_bytes=18428&recv_bytes=7391&delivery_rate=2945332&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=398&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392177
expires: Sun, 30 Nov 2025 07:42:19 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JrGQaXOFb8l8AsP%2FkWssnmWsGWZFka9bw%2FGywN7oo148LFJYrZf90njJnEIksc5T5gOSZaUoT%2BPLFEs5y3CyVxB2WtSDW5tYCMgo1nTx01NSFvORFqPdX%2FjxodisikRfD8cC6XmT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb98faada8712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2BARAvU9NfxWrCoKh6c%2FFswbFhXLUMI47btJKIUZljvg8jlaiguRDJAXNbNhERuM6VVco4EBhdo554JevLzKnJSBW38Rq23HLYLtxuBTEZEGxaXZ7p6l8kwRAZ0lTh%2BVw1Ya"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa5969b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3145&min_rtt=1428&rtt_var=1275&sent=37&recv=23&lost=0&retrans=0&sent_bytes=20344&recv_bytes=7434&delivery_rate=1341591&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=400&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YKyG5c07DtfUb82W%2B4obBR4%2FzjZf%2Bhv8ZpiilUYWeXhMc8jSMyZMATU9UT9%2FiEkVKhs%2B1KaxRlUnY62eDtfpyoDERGTFld0SeHOFSGjDUGFilL443wUF3WKy6noORU1h5N7Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa5968b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3113&min_rtt=1428&rtt_var=1020&sent=43&recv=24&lost=0&retrans=0&sent_bytes=27123&recv_bytes=7477&delivery_rate=2054934&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=402&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ieqEoKINuJFakFSh33oCFZ0b8vAxFVi7Gj%2BYwwP0bti1UfkkQJzyyIxRRTUVu269TGYSF95Q45PMdHTmcn2iKAssGeX6xSXGhqKnjH%2FGODj8kULijHWpmrhzIf27AatDK6n4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa6983b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2934&min_rtt=1428&rtt_var=1123&sent=48&recv=25&lost=0&retrans=0&sent_bytes=32815&recv_bytes=7521&delivery_rate=3390195&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=411&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=srLbVFCdjwEaR9wfrIvBg0Hf7NYhtKE4NRorH2F1%2BwJ%2BPGmCnFYj22Z7raIFwugQRfrqaFusOrRclaXeCjq39kIgf%2B0cTU9M1Ds2IOJVSNv%2BhbrYyoSiJjI%2FU%2F3LXcXP%2B%2FCj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa6989b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2934&min_rtt=1428&rtt_var=1123&sent=50&recv=25&lost=0&retrans=0&sent_bytes=34505&recv_bytes=7521&delivery_rate=3390195&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=412&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6LWfxlqslcjtfx3ZaZPFgKk2lbzlg3E3QCa2VBhaXzK%2BpHZJHYyP9%2FlNf3WA89tTqvWtYIavoC609OAphPyw%2BZh710AthU4oRWN2adM%2FRtCfZLcEXyFIt%2F9njtVdD8Kshj5L"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa697fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2789&min_rtt=1428&rtt_var=859&sent=66&recv=27&lost=0&retrans=0&sent_bytes=51463&recv_bytes=7608&delivery_rate=1759675&cwnd=14400&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=415&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hM%2BrZD4V90ZjttQM8LKibZ5IhRU2de7yd4IGC7JJlQv8NbtGwMqVik5ajrWNKPUViOez4foEQ1V3TV3B32c6%2FA9FFJPgC8VIgsPTPwqsl1JuKA8nzQ1ucYsNzPE8n%2FTnluBo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa6984b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2789&min_rtt=1428&rtt_var=859&sent=66&recv=27&lost=0&retrans=0&sent_bytes=51463&recv_bytes=7608&delivery_rate=1759675&cwnd=14400&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=414&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o5WLMNYdPgFaMYKhmG25%2F2l%2FsPsLLeUTDiVCAbzjAq%2B%2BQ8sizm1qnaiP704589SGusOw9GIqvsohl7KVy02ZCKpgjxqee5%2F%2F5HJsKjAnMhiSHEWM51e5tf0zZ%2FINe1ddcNmH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa6982b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2661&min_rtt=1428&rtt_var=899&sent=92&recv=28&lost=0&retrans=0&sent_bytes=80258&recv_bytes=7651&delivery_rate=4845919&cwnd=28800&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=419&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=muY95Ri4z68VFTm0eehpt9mL9pRsaNopuGiL9N9HViefOgXxOYZJUpam0yAgNt8SW2C4dSNU9p91afwXst06s8o%2Bf9mxid%2Bxu5PdJAxmX1xm%2FM2Fm74YGS1bn9do5QCf5ujN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa697db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2538&min_rtt=1428&rtt_var=920&sent=96&recv=29&lost=0&retrans=0&sent_bytes=84666&recv_bytes=7697&delivery_rate=6703503&cwnd=57600&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=421&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mSMnJx%2BgVfe9%2BKGfiMxwXxxRQpqAfZNez%2FAnwDjk8bUroeEHwjPe6KOB2tdsa%2F0rqyVU3UvAjH%2BaONwiTsD0%2BB3tMW8MR%2BMcFPYQOJdFhtW9PueMUQte6HpQRzt0pbCHjY1I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa6987b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2661&min_rtt=1428&rtt_var=899&sent=92&recv=28&lost=0&retrans=0&sent_bytes=80258&recv_bytes=7651&delivery_rate=4845919&cwnd=28800&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=419&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 29 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hasha345c021ea70655cef0046415d705046 8629d97c98f1a0eab43b9964e0b9c309ac9672c8 67fce5464820a94193701977368df1a9aceb114b9c037817dc8b41fe84d4ebbd
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:18 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CEEgLNWD7erxTTmllAHSJjQK0KbYXwdUEVC8HCsdre%2FpT0YLQ5wFZdZogRpzC1Qw64bgre0nQHZMmTJIaUWHlb8cTr7%2BFMOgXrXGSLF3L4M0KSkojEltlBJzOHl%2Biip3rPdp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb98f7ac5756c1-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=532&min_rtt=498&rtt_var=132&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3183&recv_bytes=1118&delivery_rate=6906200&cwnd=253&unsent_bytes=0&cid=cad81ae0979c65b3&ts=89&x=0"
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FatxVTnBu014eYup8%2Bv2K0%2FdutRTGUg9yKYi9qxaaGnoL5RDQMWG42%2FIQaxSvt%2FSISGW3SimGaMSkD2RTBIFiql8pEPp2VZ9ZcyTWksPs941UiieHw%2Fi90scz%2FwbaT8JrAzi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa6991b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2661&min_rtt=1428&rtt_var=899&sent=92&recv=28&lost=0&retrans=0&sent_bytes=80258&recv_bytes=7651&delivery_rate=4845919&cwnd=28800&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=420&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:19 GMT
age: 4151491
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5391
x-timer: S1733816539.340666,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ipWfy6sigrhwngNa7Xioiq8eVeyM9qs%2FX0YIzVhVyB3AriTOF1iaP2nstJ5ogNyUUgjQI8EKY4B9jsVmnN6LzeInrweDoY3sdM72C7EL%2Fx8%2FPunF5WgPdj9R9D%2BVvbCY2ewr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa4945b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2390&min_rtt=1428&rtt_var=772&sent=122&recv=31&lost=0&retrans=0&sent_bytes=111895&recv_bytes=7789&delivery_rate=7909721&cwnd=57600&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=446&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0WggMiM4QSHh9aMV%2FHrwNaJOP0YLQB2i5c6UmArpkmeq69uuxIJE0X4i56XDbCu%2BiGytGjCe%2FXdXQFQxTlBsx9e4i1XUjvNmJ4NIwKzkbp%2FcPgqcdnBFeV6ZbN1ydWfpxaM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa4943b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3372&min_rtt=1428&rtt_var=2653&sent=194&recv=33&lost=0&retrans=0&sent_bytes=197666&recv_bytes=7880&delivery_rate=2524111&cwnd=57600&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=475&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W0cKTw5BkeRnKvnKMsrPtv8omjInEOmZkKHkOf1tDOm12okYku5n7wlcQNCM20tvN1jrmiY%2B3bjlnnkQHdRDVhf9IG4Dk5nE8xNivES3bN3R0lZ6dksGQKYzwRrcRh3xBOEe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa5964b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3517&min_rtt=1428&rtt_var=2687&sent=311&recv=35&lost=0&retrans=0&sent_bytes=336436&recv_bytes=7972&delivery_rate=13089138&cwnd=180000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=483&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C3dM5vBv03L4AqNh0czg%2BYb%2BfLwMAFyrBjaAj9xhHVCO%2Bgn%2BH6TT5rnwsKcFHFAhVMkRN74KUR%2F6iV34UfdXJ0zjbNDEpFb7mkiBaHASJ%2FGNbG9SM8om5jhmyi8%2BlbCAyODl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa392db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3294&min_rtt=1428&rtt_var=2460&sent=462&recv=36&lost=0&retrans=0&sent_bytes=516436&recv_bytes=8018&delivery_rate=5050731&cwnd=180000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=501&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oEJro%2FEKmKWwhR7JyGaNc4btkmpyU95zdEEidwBFv%2Bk7mTSCdk9C0soTZ1X5yIbfk%2B7hjLzOkpAhYzGNC6ql0fbvgQp8YPni4IR9wofkSwy6%2F4VD8GjezR3sFR%2FSUbwAFAp%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa4946b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2317&min_rtt=1428&rtt_var=725&sent=167&recv=32&lost=0&retrans=0&sent_bytes=165400&recv_bytes=7835&delivery_rate=2371310&cwnd=57600&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=468&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5120
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 1.2 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash277b69d0721951a52711edbc469f3738 ccef6a58126b264e19b49ab95f87a75f2df657e0 c33c82f1eb9109291b759d5afc3605448b41aa862f3556f04768a36c25498bd1
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:19 GMT
date: Tue, 10 Dec 2024 07:42:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cesupufius.com/87052 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashfeb976fd57e281e9b059d9da914fcbea 4f6c222b016062afe2aa5d1eefc4e376cf3eeaac 2a195bbbe442ca0f7daae92cc0a81707e49c08392e89b9ade9fc695ba7e8f1c0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /87052 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 179
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:19 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Set-Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4; expires=Mon, 10-Dec-2029 07:42:19 GMT; Path=/; SameSite=None; Secure
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Size135 kB (135289 bytes) Hash7119e0746c6517966652c379943cd927 7bea7f53081f5447ef12a9fd8617c486e7607698 6eed0c5e106e3091da84907826e3d557c9dc74f9dcf9e1d5917044e41f6b5d1f
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GI63C5Q%2BxURn9jXUcPFzeoRTZ3V%2BA0I4tPDZ4md%2Fv0MgFaGC0XAvZjJ318jjyP%2FZdcmKuFEy41YMoTpmWv5HShS%2FpUvXedi6lD%2BmAP10hjKf59EkyX9BGGWuhUdATOvYBnx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb98fa799eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2457&min_rtt=1428&rtt_var=852&sent=109&recv=30&lost=0&retrans=0&sent_bytes=96669&recv_bytes=7743&delivery_rate=3312798&cwnd=57600&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=431&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392178
expires: Sun, 30 Nov 2025 07:42:20 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9r93Pl7wDypYLcRXZ2TnNqyNgAC2J8VLsMQGEGxqWeQytZQlhRpb15UQo1AQSU2Kbn19ohZab%2BeSzKh3sjluvNQxGWIe4vl9U4Ky8GrSCTxA4DHYwOITysng0R0b%2FdSFvR23%2FhMC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99003d2e712f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:20 GMT
age: 4151492
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5392
x-timer: S1733816540.205505,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 151 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size151 kB (150984 bytes) Hash86808eead4f2232e494750b55e76c613 20248988dd74c93f39922933d945832cce675239 b74271d213fb3311c27d2fe41d1424172d6404d80f12bf48647cace91bbcca65
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NDFhvOn8zAOvCTvHMTEZFFLoV0fGaLck%2BOmM8VhbSAZpfCUYLqL2VcXF12I2Usk4RHwO5c8kcfT5XjT2v2dAztBRKXz4aeADxyCMFgjm7r6p7HOlavhv3Vz74K1Vh8Oui1zp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb98ff7805b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7117&min_rtt=1428&rtt_var=7033&sent=732&recv=44&lost=0&retrans=1&sent_bytes=834020&recv_bytes=8941&delivery_rate=7855467&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1193&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 24 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 1
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99002958712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8U%2BRtxvpH6TWRKNowzylyqzUCuayHsfJsoEvkUtwcYkwrJ1bli3YRLJf1P8U9JXg2tmoTGFm%2Bg7NNmJm2XhbzVfACblzMdkCzKlscU9acKJRKmIVaqsoqtCkjB4TkGAawc6Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99011a50b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4403&min_rtt=1234&rtt_var=3866&sent=916&recv=60&lost=0&retrans=1&sent_bytes=1040849&recv_bytes=12344&delivery_rate=1059178&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1417&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 3.2 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash4bca7a62b604d067e07eed958b29de80 fe37918079bd8fc62728c3647ff15c200d06278f 5e7143f7829d59cbdca72cac60015f3611784aab52235db19f4432a305e5195d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:20 GMT
date: Tue, 10 Dec 2024 07:42:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Iu4eVXHyxcbhKoEAXgmnHA47RTm%2BT0Srdrdn8cu0jimjfRKz9mrPeDIYQGVyDJQtj6QHiryNiiRvHzDAR4XJcb3Ot6A0RNhVGjTRwtnjekNqDV1AqnzdU7G1MgdQArLeEeQl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99011a59b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4403&min_rtt=1234&rtt_var=3866&sent=923&recv=60&lost=0&retrans=1&sent_bytes=1047813&recv_bytes=12344&delivery_rate=1059178&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1421&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 152 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Size152 kB (152014 bytes) Hash2d4f6f6d4f8cf5659abf441c2c307790 68d098c13c5461b7636190e67109797a69ee25c9 fb3d893ae1d4aa2384d0ab2fee6883fb0d255f9cc40d0a494765aca387abf50c
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCGKIw0qklGRXnQm%2BZ%2FMeUpqyKO7XxuNtQQl7izEiQUD11I6MVPaxaN3fnu9Mv%2BgcVPUgBOQDiXeo4hMtRzBl04XYk7fKxBGb5sANMF2a8GqogjB%2BFH%2B%2F928PjRsTdI4PPKz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9900694ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5214&min_rtt=1234&rtt_var=4400&sent=786&recv=51&lost=0&retrans=1&sent_bytes=892507&recv_bytes=10035&delivery_rate=5265824&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1343&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Da3epGx%2FHWHZdrOmmqGcWVFLY4Vmr1RzMXca%2FdcH%2FMygUyfGfFk1Top0ynOLbRoULOVN7NVIHkAtC146Fq1ZUEfpNMavjT5TLNgckb8sqlF%2BxyE2XUY8srlOcjQMPNi7mgh1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99011a63b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4403&min_rtt=1234&rtt_var=3866&sent=965&recv=60&lost=0&retrans=1&sent_bytes=1098000&recv_bytes=12344&delivery_rate=1059178&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1422&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EsmDiSSm7l1dFXl5du8uJmljlIAEIG8WeTo5IP0Ixt0E5r7BNieqD0QBgl7nDnOPQUoF%2FiBA8cQr%2BZZP1KsEKijUPOU%2FmR9GTwuPv0Nw9aaGIbZ3sTOYOwB%2Baq5VIhqtwHL8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99012a7bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4228&min_rtt=1234&rtt_var=3250&sent=1084&recv=62&lost=0&retrans=1&sent_bytes=1239204&recv_bytes=12710&delivery_rate=11455190&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1432&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FsGFYeSk1kX%2B9HypfyoxU%2BHZC18bSbUGHzu%2FlasCgL8kaPq6c1EnW03lAWNC8unXsDCvbTJjT1i%2FcWPlJkkezlsSjDxMibExohN9lqVRJ0NC5%2B6ganW8nTcOpqJs5%2Bb%2FrH9c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db6db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1260&recv=67&lost=0&retrans=2&sent_bytes=1447182&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1542&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZkMIVll52SlpI7O9Ms6iMhPpEKGIcAzWWCDkth80pSzHnp9e%2B8Df7My%2B3GonRTmwLoA8JsnHDJNMflo9qhyW5qVSezhhhh0IhO5SvSwDCDIRwD7OeQ08AN6OHfhq6CHjOKKc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1321&recv=67&lost=0&retrans=2&sent_bytes=1519907&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1544&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w7jzEIJ751FVFfKxOdc0Q3ji0ZNMPIA1uD3OI3EuWU73SzyS4zglXes20jxlH8SGSS6Fv3pEKyO1JHH0%2Ffxxo8gCbtEe5nctaxy%2BVPio0WYhz0SBGsF2QIC0b8xalcQIjT8N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db75b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1326&recv=67&lost=0&retrans=2&sent_bytes=1524904&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1544&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dBovzLkZ9bUkBzA2PRaoccwdp23woxVeQIHT0DUSgDGDsxr%2FyvpUMtb8eljvFE2swpzbRnR%2FO9DGq8%2ByT0ltKXa5nAwCjEGAhxuitJjsnYYlzk%2F%2BqO1KoN6e5c1Br5NDFHL1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db7db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1332&recv=67&lost=0&retrans=2&sent_bytes=1531693&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1545&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p3Ocs9kNQjFQkSRNjYyXjUtOhyUMi1wWGn%2FfqDfuU8QMM2J%2FNcUAXdpe4wGmKS3DNgZUH8MbRU3EzVyBjVbaybU15bmHM48h5NHsMX6Iwld0gHsMR%2FMYZPVjH%2Fm9%2BxlsXC3T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db6eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1336&recv=67&lost=0&retrans=2&sent_bytes=1536113&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1545&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFxZu4WZcRYxdzx1YbPfn58alGYcQ7y6KqE%2BwaWl38%2BYZ7OmerL4%2F%2BEKWlfnROA8C6Dve5nZn0Q4nZFr%2FHTtJeZSv6T1cgtTQXTNG5uTLbDazRrHEpIb16cUN%2BlSzbo6W0G7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db7bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1341&recv=67&lost=0&retrans=2&sent_bytes=1541824&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1545&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZgYsE1peh30vejVnM9srelO4pZNlZL1%2FSa7QjAGodeL%2B8SRrNkWd3A5V98zWFWZgJAdrxrqxf7VqyUZOS5bLX7nm3ZLn4Bq8QKf7o0KKF5VeN8P6jC%2BanDPP27lwIHfj6Hrl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db84b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1349&recv=67&lost=0&retrans=2&sent_bytes=1550542&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1546&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ajYrM76XpL2mwZuylxX0okJTLswaLwM5V4aPthsp5rYMmea8EDsDT%2BNb4Bzq9C31lPAFA0oaA%2BjJJ7JhyD2ctX48gP9E2D3Edp9hD8cfSKXQjztKQUFdXkHvskxqhsqd48dD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db80b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1351&recv=67&lost=0&retrans=2&sent_bytes=1552489&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1546&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pm6Rew0mddadLBUpkBJCrnimuSAaIi6aaTu756ZbDn%2Fpb4i0RApGqtCi9f1FJ5Z2oXsV0y5XiX75rBZKFgD2qKXcp7P5A6TjCdMjV%2FbKrlSpPUKvg%2BZzCyUYDCJhu4MxG6Dh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db88b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1353&recv=67&lost=0&retrans=2&sent_bytes=1554189&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1547&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hLn%2BY2dt8TspFI%2B9I%2BIdhQNP3m%2BsEc56ZsOxiEKOgzami%2F%2BCdRRLhW7y7zwzlNaenDdlXaPw56w%2FfK1JNR5H3phEaqq8b3QU4W26V3suHZ3MMB62YWr7iz55MnjxMNCGpbzj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db86b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1358&recv=67&lost=0&retrans=2&sent_bytes=1559121&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1548&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y0U5KBhtAyF%2FWpwn7%2FBoG2uW0pRWlZPoG9arAnR47pNEtQgHuUfdO7ZeZ%2B7mNlCP%2FKNgwGqfG5R%2BfO5K20O8Bxthj1GumcA11Q0zXKj61XZ1Rx9NKHv5bjSvIe2v1GULle6k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db82b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1361&recv=67&lost=0&retrans=2&sent_bytes=1561689&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1549&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yWIMtsZ3ecnTB%2BWYLXcb5Rn98qKqqKAM6gxopu8s9LaPWE%2BxTa1bbNsgPAujwzwUxd30sT32ZtxJNNs8wVc2SFbKIGCFOZ0IQ753Au6uGS9YHSTB2clA8J4a%2BVynoCjcR7JO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db8ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14572&min_rtt=1234&rtt_var=23126&sent=1364&recv=67&lost=0&retrans=2&sent_bytes=1564477&recv_bytes=16527&delivery_rate=1837922&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1550&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4uFrEb6c%2BfT%2BcOhfx6fSOFi4vcs6A1ctTckBwWUQP%2BhtfxEhjrxWbaIJEOoBC2FMY8p0qhncH48Oo%2FVIBHtkyrzId%2FedG5Irl%2B9hlELyDHeYqmo1Ppae4TUjPgSD%2BR8wk5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9901db8cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14234&min_rtt=1234&rtt_var=18019&sent=1366&recv=68&lost=0&retrans=2&sent_bytes=1566494&recv_bytes=16573&delivery_rate=1924945&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1556&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zhmMLop9ceTLGl6o3DQtUQ4ecQSiddTf3PlK7DWkcut4cCE38gkpbAhp46fWYfLJda9ziiLAk5qMrFTpG9e00M8XYyNzsRl1h8WPEZHsnY%2BX5nB%2FxSR8wRijmo8nApuf2bLy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99028c81b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14894&min_rtt=1234&rtt_var=14834&sent=1370&recv=70&lost=0&retrans=2&sent_bytes=1569095&recv_bytes=16952&delivery_rate=2719402&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1654&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347125
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cesupufius.com/63937 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash444225cf4d7707b012b5fc80e8d0e0a9 4a61be2c1c95aec27e66cef717646b3c00621760 8044150aeee0d71f4a220bbfcddeef2de0d69b71e4a101f0fb52998e2a97c2fd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /63937 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:20 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293516
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337249
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218514
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335938
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290713
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 28 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash5fbb77f6c79b78608fad1ff19c71d2a7 cf074992255b7e8cb9b1b9efa60c41554b6abb5b edf4ce1ba05080db1ef0aeac5764783f29b5479b209c044db70afb7cbf8e2ef5
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SsF5oGKTe%2FHyqVk8SkAvzeIbLZnoKIk%2BH%2BIrC5Weot%2BrawRr6k%2FCc2%2BPSs%2Foi3Ia17s0q9g5K%2B%2BXB6OTuPCAz6aROWecF5jUgVCEH2q4Ty4YKbJ26AKE9aT358dbUCcbHbM8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990028ecb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5250&min_rtt=1234&rtt_var=5770&sent=760&recv=49&lost=0&retrans=1&sent_bytes=863140&recv_bytes=9696&delivery_rate=258279&cwnd=403200&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1275&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392178
expires: Sun, 30 Nov 2025 07:42:20 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c2rTz36lyOR%2FYZGJ1jxxwWMs7wZ915xoQ3Um4E7SUZi4iFhMLvRBQF2dQJ9b2RvW7LxQj3Tq56QrFJGjYe1VDo90hW352Eo3OFPjeLwqYtHIpx8FLC2pcVdm4b3KMcO6z30bpiEM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9903e9ce56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:20 GMT
age: 4151493
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5393
x-timer: S1733816541.796934,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5121
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IE87ill0AUjqhMYXj2g8Bkbi%2Fxm30%2BfQ%2F%2Btnx88b7OyDJYh5Z1x8H54gV24aAzczMOMfydAt7jnzILq2fFIiddUS4PXEDcQIrF85GeLqOmwoASvWP%2F5%2BdvXHqtC0maPyPKB7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99049f95b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7179&min_rtt=1216&rtt_var=8830&sent=1550&recv=88&lost=0&retrans=2&sent_bytes=1767833&recv_bytes=20460&delivery_rate=383713&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1986&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 21 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash0b8d96725a399312af1e804895cc446b 8b36fbc271b78fd313db9eb0b47f36ab059fcd1d 30c851770d0d7a7e70704733fc12aaa830345c87cfaeeb8fe5c442cfa28e92ab
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zDTkDSo3P02qBeIelwib69%2F0r6t9HemCnPscH6gjbyMbf8XeUYeEcHwIzJpQ0nn5jUNHdY8oS%2BhdhWQGujsefWldoRO5Jmom3zSi0Vwg9UNfIKGj6%2B%2Bt3t1FkUj6cbYnBY0d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9903de8bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9840&min_rtt=1216&rtt_var=11539&sent=1500&recv=79&lost=0&retrans=2&sent_bytes=1717058&recv_bytes=18451&delivery_rate=8962024&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1862&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J879BZuBuQbiI2ce7rDA%2B%2BSJxHskgZaQg9qyjiP9K99ceokollJ2K50JvxteRGmpzhFPeFKUv%2FyBnOpGDLIqMq3U18ac%2FcbUPuOOidvviU5FPwRjlFU2AuE6dny0XO4R1LN4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9903de91b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8821&min_rtt=1216&rtt_var=10692&sent=1504&recv=80&lost=0&retrans=2&sent_bytes=1719989&recv_bytes=18497&delivery_rate=268092&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1865&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XMOQSmCUNHmTEiGGoXLiRoJu901LZ2aU4W7gyJEAYhPk581OdpH0CNPUMF2A1jxB8ff6sz8PKFLA7exKPEUUV0GAjrMDxePSW8lST2kSIQB7Sh8rjgd0Qaw1yylCd%2FEwq8fe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904afb8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7179&min_rtt=1216&rtt_var=8830&sent=1663&recv=88&lost=0&retrans=2&sent_bytes=1901322&recv_bytes=20460&delivery_rate=383713&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=1995&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tq6HygidoEyWc1rQN3oIQ90%2BUmOr%2FPG35KCaPuvyA81zV6hGrr41%2BVwKrAix2rmm5Pi%2BxVuYIHBLVaQsnP8ER2AbwVGS%2B9Xa9vo87QVzEw3MvCbvhtyIEjbU1lplFgU7He4B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904afb0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7179&min_rtt=1216&rtt_var=8830&sent=1665&recv=88&lost=0&retrans=2&sent_bytes=1903511&recv_bytes=20460&delivery_rate=383713&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2004&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f1k7BRp%2Bxu5uf2ZTJWtwB1nWcz6g43aOqRBxhliUNo3KFxEEAwdas5AAtoQNqHMyvMRkxpMI8Ib4rC3bixkT1ej2oOF9XuqtouJRPNCsk%2B5Ph%2FaTUNOFIAiS0uDnF1hK9AO%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e818b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7915&min_rtt=1216&rtt_var=6686&sent=1669&recv=95&lost=0&retrans=2&sent_bytes=1906795&recv_bytes=24651&delivery_rate=3267345&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2030&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZLka8P2qkRqq3r%2FXvttWKRvxsSraRFZnT22LoyURcFB5vcuZrMQV%2FwVjSOY8UDq8QdUXMzMtPqDByItHtQ5K3AZ6raqWlBs6B6A3Pd3IKR%2Fa7F7snCnfDoL4wH9Du5Ynbv8D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e823b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=1958&recv=96&lost=0&retrans=2&sent_bytes=2252310&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2033&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zBpuYdBeh8K5iRFTwjU3Kax1XNwMvyLbz0fncyKn%2BKEV3Pu84oXJ%2BRuVteBLKTIZARNI6i7If9StpLZcBwBBsPBY7REjsdv7odsz04h9RA3e9rAaGCeLSbOghuLZ2dLc9gEc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e827b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=1963&recv=96&lost=0&retrans=2&sent_bytes=2257313&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2033&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 85 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 1
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9903efe7b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wvb2QN%2BuX1mW0%2FS0JzT993aU2av9Z5wSpbmtCF4saEXjmzGoJuoQ3NCC99WarVadZoOiqfFd7JqfgwHxlIiPuwBOtLu0XLPfekxJTLWre5qTCSgcRF6fXwlgej7wzOyxzBH8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e81fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=1981&recv=96&lost=0&retrans=2&sent_bytes=2278023&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2034&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=89jl0LQGIKAUVf1m47UJtHlRawspJDjvD7Ox%2F54WZskoIl%2FWrV1PphSOEyIFpg8ZXrUb4tNeic2im5QuKMroHdDX8EBV6eEGUHQzB0%2BWmT7zJ8bxmG%2FpnC8h0aet7fjt0n39"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e832b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2037&recv=96&lost=0&retrans=2&sent_bytes=2344507&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2035&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SF4rJ2oPtl7N7s0jCH4zsXHV6BiGsz1df5YwGolKpJ%2F9410iiYR6OHXDsIp%2B%2FEsA3h5e6bxeySMQ%2FsXJiiqrGBY0NTBzvIBQpbbS5tVX1%2BH0KTLXzLsXSzT%2F7IJSNW2x0yhL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e82eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2040&recv=96&lost=0&retrans=2&sent_bytes=2347068&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2035&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5IoUE6InG5nqorDrerMhed2YW84VjkaL0C37Ni07KHwQI6s1HhuHSU%2F1oHenVESxhgghhymK5Yl5fSAbn%2BiiD07yeYv2SMhPWS97Y9mzGcROskOGm%2BGR6tcYAPvDgF%2BwDlIh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e829b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2043&recv=96&lost=0&retrans=2&sent_bytes=2349856&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2036&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYuTh8MQ9U%2BkLY1VX4ngS01joxhXx0E6pTQtX1qhWtNlIntTy9JuUei1iF1mdIWqtJ8v3HREX1r9kfJ4WEeo4TY%2BVbM%2FVJO2MjIySntGsXWzBx3eMCYZ%2BZN3B6uhfKkBztCV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e820b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2047&recv=96&lost=0&retrans=2&sent_bytes=2354277&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2036&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gW2AtGdmckPLStYfa8mgm9YqRg72ipadpM2j6BIqyIWMyJOD1zGLZk6drNAn8w3kFo%2FmBjk6bYp0VVKoSNaZuaEN8Vw%2BS0Q5KqZmYRrdegu%2B3K0%2Bl3bZpFCoTelY1WKqP5nl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e833b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2053&recv=96&lost=0&retrans=2&sent_bytes=2361074&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2037&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zzDbZnSq88SjfISXG3moD3eXOD3JYUCSZ9U02FKahJ0wsnNL8obb7CZlYntk7%2BUyYIONwTiSjT%2F0HVVEh4CmH%2F%2FBC00fn15w%2BAQbUR8u4LDK%2BmYDye4dRiJ0%2FpaqS8zQlxYw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e81cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2058&recv=96&lost=0&retrans=2&sent_bytes=2366005&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2037&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Z5EcM6QmsZ%2FIBcWlzDpsGqQ%2Fchit2IAqV5wb0ZaIjKXgfqY9r4uLBvKV7TP8ZcSVze6ndZcJmE6hD8sCY3G2OWPJ7QX7aMBGeBJskxnrnfCMB6QXhuCoIpZLqeWPTBO6YYg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e81db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7915&min_rtt=1216&rtt_var=6686&sent=1785&recv=95&lost=0&retrans=2&sent_bytes=2045646&recv_bytes=24651&delivery_rate=3267345&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2031&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 3.1 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash456b44a1bd6848100e26e4671e80dad5 79530a07bf991a1cd2d434c3b957cad980f2cd9d f21167d82b484fa264c880d390634fbdcbfff021f066330835fa5b4099931cd8
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bTMVBgBrpeHp4%2FSbC0tI%2BeDg5X4k43oVwUci8PQntslcz1Ngf4GhghNyE0jny55ov2Vzeg16eB3Yv9xuRk2UTDwboRykcFaMxqATZ0DooZIcjYmGbT0Mzgg7nHJq51Rv1eVY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa2919b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3660&min_rtt=2694&rtt_var=1363&sent=25&recv=19&lost=0&retrans=0&sent_bytes=8598&recv_bytes=7260&delivery_rate=5589&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=384&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NeAoquEp2jWHzEE03i6e19P3xkfOHLqByI6mhnVe0LoPK%2FMwoY1DaQopJyuR2Rkq9ZWLXdBKuVzrf7wIHWEtUQGFKvxsVUwaaJUDY%2FXcEAoFpMqziYlR9IzC3Jn8PsmtdcaD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9904e82fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7086&min_rtt=1216&rtt_var=6673&sent=2068&recv=96&lost=0&retrans=2&sent_bytes=2377795&recv_bytes=24696&delivery_rate=2521043&cwnd=459000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2044&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lPKJ4gMPCUrmrUjc9ajRDudoCbVhxyLG7i0hn9D5TynZNyrRj6Va4eLs2TzZKeuFXuBT%2FNatsveFmRnEvqygigZs%2BZ%2FNYXc85ChmM9j0dvowoJTQI7OUcAZlOITk54yviY2E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990538cab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7349&min_rtt=1216&rtt_var=6837&sent=2135&recv=99&lost=29&retrans=31&sent_bytes=2454823&recv_bytes=25386&delivery_rate=6482998&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2086&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 24 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: MISS
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb98fa6965712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347126
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337250
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 132 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size132 kB (132308 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:20 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 1
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9900396a712b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218515
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335939
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290714
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| cesupufius.com/81239 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash9e8980da807d66e83a610de4ce2a4f55 5089d03a52743a36b1ecb58f4187a9d9c49a41c3 ba4886d939353f55abfd30312e321438bad7e8c8f6015720f91bacd27fc6a23a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /81239 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:21 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392179
expires: Sun, 30 Nov 2025 07:42:21 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LoovdJ0gPUB6rTop49jxVK7Y1G4KKZJ%2FFEE1cE0Rz5dx%2BxU%2F3dSQI8YDdq6zD%2BT3tJAU9CCE429xMBs9vYplSgA8%2FxIa%2FFD39G7jUGmbTgonyZK4aUrHyLmUSFi1pmha%2B7rKJIw0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99075db556b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5122
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:21 GMT
age: 4151493
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5394
x-timer: S1733816541.347023,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AxqVs83gAqUZBQE5sLqwRykPnHj9THLRT74ONemWm8OGWpRMhECltsMj6OtjcPrN1GemoQI3YACbXC24JMnEvG4WBrFTm3AAssW2oC0hAvGplvAa2sFbn1JJKFIhbfr%2BDGUC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9907fce2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5343&min_rtt=1216&rtt_var=5913&sent=2303&recv=116&lost=29&retrans=31&sent_bytes=2639781&recv_bytes=28331&delivery_rate=11194639&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2519&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Rt8uppeGswwVsSWLqlPE%2BeJEk32UGeUV0FQEpj2OkgkAD%2B4Z6d0tFBfPsneHH05H8IyURmNOthymNHeoTfQb7RK4QC4hUCTS%2Fih2l0bzK1xOSISuAI8OcdElz8oqP9AhPa7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99080cfdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5343&min_rtt=1216&rtt_var=5913&sent=2411&recv=117&lost=29&retrans=31&sent_bytes=2767659&recv_bytes=28647&delivery_rate=11194639&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2528&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5gE6TaPho3OtPwzMYAn5exiGM3xu42Sxmnot6uKO6CBEBqq1TRdi6wIO8xxy1gTgSMkgwncuKrIM5FKoLxBM5c3Zpnmyuxk1TipMP87FVsSpWxp%2FqsoFrWM6%2FgEbaKozcDA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99080cf9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5343&min_rtt=1216&rtt_var=5913&sent=2415&recv=117&lost=29&retrans=31&sent_bytes=2771370&recv_bytes=28647&delivery_rate=11194639&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2528&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 26 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 2
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99074bacb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 2
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99075bc1b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ucvDsKBUuP75NUSw4LYpFZCm6H5g91%2FMCBe8stW2y3507iV50apvJtEDRGo0EmhBiOwS20PDCpCGKLvxmLYX5gPvKsh5dqhg6NLRoUVQD0XWHaeWCAGM8nk0RlpHZqshIz0s"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99083d2db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4255&min_rtt=1216&rtt_var=2748&sent=2444&recv=127&lost=29&retrans=31&sent_bytes=2797374&recv_bytes=31024&delivery_rate=375700&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2557&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXJfxFiB1wDYACUw%2FvoApivcILKZouAKwGNpHra5OKgOHkfWafPcfShhU1qW0%2BtPgZI8tkVBh1kxH%2FzwaE0pFg2fEjd%2BoQVA%2BR%2BouyKQ%2FQmUzlxerH5pNJSewx3bQKmUmQc7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99083d2fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4255&min_rtt=1216&rtt_var=2748&sent=2454&recv=127&lost=29&retrans=31&sent_bytes=2809374&recv_bytes=31024&delivery_rate=375700&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2557&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8tMYweRhREE10jFQw4k9eTgB7N5L%2BPqqvZsVQVEwgTp0ng75jDkUNS5MjvZubbRYAQOLXJYtyaZzi8WScX%2Bjnf987EK6WvXvXBLMPD1bnTh%2BePG8Q4zyx9vo7nRlM8Ki6P55"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99083d41b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4255&min_rtt=1216&rtt_var=2748&sent=2602&recv=127&lost=29&retrans=31&sent_bytes=2986545&recv_bytes=31024&delivery_rate=375700&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2563&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DzUEF4LhYXaeoe%2Bvk5dOtOS4gtVDkLDE2ijnj3IYMscOvJkyX4uI2k8EfNRA2UEAW%2BBgDbiLzeWhhaPfh9NO01K%2Bv1QrF5xLSvpEg52lP3IpGgzbcay8CWpklAOYD8k%2FhHBJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99083d45b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4255&min_rtt=1216&rtt_var=2748&sent=2612&recv=127&lost=29&retrans=31&sent_bytes=2998545&recv_bytes=31024&delivery_rate=375700&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2564&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ez33D3HLVcAP5pd9OAgrriCVhmHIhCkRQmJgd9%2BKwnWv%2B49QTDciuhLhnwrZb%2FkpZqRtsTHdzb7p5v4rkmT1vFtbwVcpv7UajN5rQ5%2B4%2B3y2l5oY%2FSQMd9Ob5T2oI42LBnil"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99083d46b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4255&min_rtt=1216&rtt_var=2748&sent=2713&recv=127&lost=29&retrans=31&sent_bytes=3118643&recv_bytes=31024&delivery_rate=375700&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2565&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nlBqnln%2BjWA9j0OrhtZknx85b8ehl%2B%2B8vdxY6HV43YCQdvzdbAnHse4zhoEEsCQB3mP11AQjFDEXujbldAHjfPPJHE7rAUpLvnJ%2BxAvMkk6ydg7s4em3If9iu6FwYfu7IQOp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be31b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2638&x=1", cfExtPri, cfHdrFlush;dur=10
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qectofSKR7ItEIJztsz074ZJ7hv1Fn6eeHGpw8ULN71LNW9A5xDOadfkJuRuHA%2FvTo3hHeYna8ACSOosu6A1njnkXb0XCq33ooOi2AEa0oh4eJjss%2BkmuchWAEECwhThNPo1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be37b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2641&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 52 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash85c4430816d8e0e8bf7918169658da7a d6fa8875cc564e78db3880a3f99a61979f744eb4 34ab6151bc905c7b55018c94e0c694328f2a3b10bf18cb85a9a32bd2c0b84414
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jTE%2BNj3Unub8qrinU6qZrIr8JAf3QVYBvDjDdTq2BlLufN5b7ShkECWwoJ%2BXGLj2nfY8loQCrMFb2FXWMZIhKw5RFv7lrnBAEVZupDKYm9qXCcq3QuDMDf1O3TkfQUgS%2F1pN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9906baf2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7996&min_rtt=1216&rtt_var=7965&sent=2247&recv=107&lost=29&retrans=31&sent_bytes=2581215&recv_bytes=26602&delivery_rate=2826&cwnd=321300&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2355&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ihh2mgLKMJ18lbnvBAXpdNWxD3AipCTu75iUxyLpT0MOEKb4OYKWsPV6a3U8UzSJUGxFTrW%2F5SwLZ0sAFbg3z47davwi9Z2xsuPOwYzukDVtgtK%2F701gxyJ%2FriX8o%2BiayfzP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be3db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2641&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7U1FcNMJKLLiAQfR6ipHOSTL3bXWl2tLVnOXo6ba5aijYL7iWiowFxe8Ne15nrm3fP6AjbRpbe6FXe2b0QXfN45Sywha778T86Vwiw7T2E743SUyAWmouYH%2BjY8hn6QJ0n4y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be40b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2641&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y28a93tLcoLbNtY10FHVvQXkZQiMHrBJ%2FuWSUXs3wtSe8dFeQ1xh8Gq8i3kxDOwvZyqv3I5ZTZ6fTnoOUa6Kzs3X%2F0BED5F6KLchdal2zZa%2F1a8N1GlJG6GI143gRzIAaTeT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be41b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2641&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RJAjI6mzbuWbPy0jPhW2%2FPjn9GcIKw7ko5h4MrWKi8mbPxDQImVddSn3njPuB05HgWKJ8wnD%2BjHEgKX9xdU5k4FGecUp611jRcZxE049tcbH4ckIgdpIOx0RM02kAzSVsyhd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be43b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2642&x=1", cfExtPri, cfHdrFlush;dur=6
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GFppBPg7aoC4ZdlYiYFAsMLCj7xtWB8lLoMDme1v0CKLMXB4yB97K9DZfITwmw%2FzJY6%2F33iWK15aJJi3DDDeNHc3GU%2F7tKoUPQJP7Ff80M0et04DKmTvdpkb38ykO52XzSgK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908be44b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11401&min_rtt=1216&rtt_var=13408&sent=2906&recv=131&lost=108&retrans=111&sent_bytes=3346461&recv_bytes=33416&delivery_rate=3224250&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2643&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gSKtxk2Ry9KjndAyTYcxeQ0MW3%2FJnGrKpH9v0chEX5IiPZM7uG1UGsDisWuwHbRdc%2F3zcP8CUFE6kpiN%2B1w2GgwYe0uyVHwAwMtrjWBWc2PSfWJHGAofrCbuTxSTVPPehISQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908de73b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10631&min_rtt=1216&rtt_var=11597&sent=2958&recv=133&lost=108&retrans=111&sent_bytes=3400541&recv_bytes=34337&delivery_rate=3171792&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2662&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=us1hc6KklREDYRL0v2V6ZpnoGtscwEdOYX5%2BdEwp7BBV7puUWhnt11Ud5pPyqJIYPycz5mgwTmm4oJbDlVKACDM4Qr35tfIwQsWrmWlVH%2BZfLQRtGGQRWJJAJnb2PSUB%2FrCc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908de75b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10631&min_rtt=1216&rtt_var=11597&sent=2960&recv=133&lost=108&retrans=111&sent_bytes=3402560&recv_bytes=34337&delivery_rate=3171792&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2667&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xe72nqbNVU9FRY8yarpNQ4wHj9P%2FI1ZBy7mL26ly5Ky6%2FcAB%2B4DLLsjzgIiqyzLerp7sjLCNcPWEbmPDdYPmFh%2Bbrk04805zMmiTy8hXOsxjr%2BrJwquP%2FE8V3Paysb83WRS1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9908de71b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10631&min_rtt=1216&rtt_var=11597&sent=2963&recv=133&lost=108&retrans=111&sent_bytes=3405132&recv_bytes=34337&delivery_rate=3171792&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2676&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uS8cD%2BvmtcV9DYsSzcRY%2Bj%2F9ZB5VK2obhGrim1kdgOVKDTi%2Fy11ULxDcbSkBbJJh5QFGSfMASfbLeWLeuXOaAf%2BwvCGiOiXBLxr83XglcLhtjfyF6kruGoc9rRGHrxuler2Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9909bfb5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10646&min_rtt=1216&rtt_var=11650&sent=2971&recv=137&lost=108&retrans=111&sent_bytes=3410144&recv_bytes=34808&delivery_rate=1033&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=2805&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347126
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337250
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218515
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335939
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290714
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/91319 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash53c46256ba975c4d4169dfa83b62236b ce7442eb8f802cdc170f3ba7ce5ede0b129b8a8a 7cc5ec915772efe75421bd9b3d81b3f74d4576d35607d9a3c446e08b80391a5a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /91319 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:21 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392179
expires: Sun, 30 Nov 2025 07:42:21 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cCkzvRfNMkr%2Be6CsarlrqrHtw67z3FrvTY6EMmbbU%2FejuqRWW4YKD5JOIsY8d8qPub%2FYT49JEDb%2BebKQ8dO4gTCZlaEO3gSNgDT1pKWhHQASd77CFuaVLMVnNcsYsIzj4GeaWLJf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb990b6a6a56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:21 GMT
age: 4151494
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5395
x-timer: S1733816542.987750,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 32 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typeJavaScript source, ASCII text, with very long lines (58775) Hash247f9a93352cafd0744460a3643d3265 6f4265756f66190823be72da3ae56d69c8d9ab00 c1573fa23dd7306266807f26019aa02a7c81f4b62565ba73ddd431008066f24b
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLvtZALrz%2BQDYIL33c79kogQO3CzXtE1zyZ6Lx19RlcsZATjvo%2Bci8%2BU6EyfdgJGKjAJ3f8F1qzVNlnpBE34GMOPMlNrb7svqwkhowWTed1BS5sP5BDhxr%2BlwbOrJh%2B5A9xI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990b49dbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6745&min_rtt=1216&rtt_var=6396&sent=3104&recv=147&lost=108&retrans=111&sent_bytes=3558195&recv_bytes=36091&delivery_rate=2095512&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3050&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 188 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size188 kB (188492 bytes) Hash79e4ee370d92756b7fca380ace5a9017 d7b8ed848f94e44b7574b1cc5bf383e7ff7daa3f 6587570876936c04a17a02978bad6e00d24b685d44b1e00fe041b9b223afb017
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SVYEnSGOZBRPfg7t2dWdxraredTJuTtkBcej9ekuVl4xgUjt2OqBYDPY%2FM6GiD3DppgwvVeJI%2BVbSPOHofdr6aUUX5xb6johw4yfu8j8TdjhxMM2uclDpXVVAl8XPAWlnj7c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb990ac909b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8266&min_rtt=1216&rtt_var=6629&sent=3079&recv=144&lost=108&retrans=111&sent_bytes=3531976&recv_bytes=35688&delivery_rate=934&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3001&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash250c0f0afb1b145f1f8a00ff8cfdc0f9 5dcc440bfc8f7a8ab0cda34c3afe24f261f47554 528ad28a89c77fa547a335b9b301bc6fb216629a9da03d22555bf89a1ea20a76
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:21 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oA3KGY032flZmiEmGfqdZBE4NFqshHBcsXZfza7Dsc0rIZGtSls4suUUPZuP3s03Av8xHH4nMXPFIY3aot7OEY9IzwXqtgZ%2Fi8wUP45Jqc4K70DDyBwxRl6nWWxSzUsquYCE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990b59e7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6111&min_rtt=1216&rtt_var=6065&sent=3109&recv=149&lost=108&retrans=111&sent_bytes=3561160&recv_bytes=36444&delivery_rate=179697&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3066&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7mCiiR3V6ViueHIHa067MHVUk8RUMh%2B0ZpTBUkqvrvfiMSuwwdTyuKpbt%2FSUGxNbOPZTIwDC0roBwB3w6sRlWco%2Fz8HLCFT68hvQgnZYWsb8pFXRMkgoaEDhE4Edh%2Fp59fY4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990bfadfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4803&min_rtt=734&rtt_var=5527&sent=3267&recv=159&lost=108&retrans=111&sent_bytes=3738913&recv_bytes=37962&delivery_rate=156071&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3165&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=26KdiXCwagunanliGLtVOUIs2E5W1K8WJAoeMcayJ1hOS2MJG%2BteDUw%2FOeHpfVxykYdzLTiD9x2mlCQRzAkeTO9spF1PqNmtN53QuBdsWhUifchkisJSXVzAv%2BquOf2Mkro2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c0b07b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4384&min_rtt=734&rtt_var=4983&sent=3275&recv=163&lost=108&retrans=111&sent_bytes=3742734&recv_bytes=39801&delivery_rate=863423&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3174&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vjVIZKpNwD92D2G%2BRd%2B4TXyKycoY63jUk8mZPjyG7ptwoctLOgUwnWcGXhIdLJXMB7gj1SKAfIwPszjerRAzZhqlOYs624kkFZqiyd%2B7TLmb1ZMcsY83MiPMhjz36qWl5tS5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c0b08b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4384&min_rtt=734&rtt_var=4983&sent=3277&recv=163&lost=108&retrans=111&sent_bytes=3744926&recv_bytes=39801&delivery_rate=863423&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3175&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JpTNf%2BzqM4N2VV4Il1G0DZKG0hfs9ZRX96Q84KO448IFD59AbbwMYTV4v%2F4dFupqQke9UCKX5LcmweZ68mRR1bjKAboKRC%2Ft7m%2FQm7v2%2B5TZ6occNc%2B9xpLpEnukKHmxTW%2F2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c0b09b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4384&min_rtt=734&rtt_var=4983&sent=3357&recv=163&lost=108&retrans=111&sent_bytes=3840926&recv_bytes=39801&delivery_rate=863423&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3175&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 17 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 2
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb990b7846b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ZiMJ26TKyXpCnt0E0W36T7ROo9z4CyMaaaSGWfjNmlRbh4LAYyEr19U1an%2F8ohmyecBG7ZGZIxiyPYL7R19ttR0dGTKU8hm%2FFXOpUPVcuPuzFq6btxH6IgW5nJ1XZEZDgey"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c1b12b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3956&min_rtt=734&rtt_var=4593&sent=3449&recv=164&lost=108&retrans=111&sent_bytes=3949386&recv_bytes=39847&delivery_rate=248544&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3184&x=1", cfExtPri, cfHdrFlush;dur=47
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jvMH7sYSbYw7phmHE402WB1qnY2FJvvTwnskr8e0acrbRM4wHJnErDDB71Dze9yk2eY%2FvrSN60FrhTovHnNa2czaGKQZZc4JCSrv7A3SNhuIaiA1Y7YhPFhyfKv5XA8FZ%2Bqr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c1b15b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3956&min_rtt=734&rtt_var=4593&sent=3439&recv=164&lost=108&retrans=111&sent_bytes=3937386&recv_bytes=39847&delivery_rate=248544&cwnd=226590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3183&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tXSUHFs8Ft0oeP3Cr1f%2FDdDK%2BMPIPW0RWetTDhKOuKI9S9pHy0CcxkRsdvgVzeYK7Pe1OtbjH%2FHNXNGg0G1%2FYh11krcT%2BXbRCEkpB3FX%2B17au28AENgE1%2FF13yxAuHMMjYln"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c7bcdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3680&recv=169&lost=111&retrans=114&sent_bytes=4219729&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3245&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52Q8SY21GcZEg6FeuHTAGvsFZdEvd5LpQl0U7ZCfjbPpFIID3TVCiyGXTv0uUAqxonydBDIpzKZsvIQ82fKMwoLU407CK%2BzpcFruetmLojQvuW3LHyg3%2FCnaGtNxUAtOF%2BU8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c8bd9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3685&recv=169&lost=111&retrans=114&sent_bytes=4225439&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3248&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FQoNFlvcAs%2Bng%2BWjokGzEIu%2FFCcwGOWqH6MrKU0vBNyCsa%2FX8NjaHU9rQ8CkYfzRleQ3%2BBr9xzss%2F%2Fx3%2F1KlSX5AtFygwZdYuqGTorvZaCRMi98HvaHDXTKUFmRGunrm4lpE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c8bd5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3689&recv=169&lost=111&retrans=114&sent_bytes=4229859&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3249&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QejpkFcBTx40njIftpg%2FlKVkC7VrUXpo%2Bgqtvlg4R8%2F2IDbLPY7J8waxjeYHMcH50%2BobpeRn5lL%2B3B5G7vFgDAS5bSUkT3lZ1S8etUu0XOZcbosoLip29oaqKgCjUbvwmjR5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c8bd7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3694&recv=169&lost=111&retrans=114&sent_bytes=4234868&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3249&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TqI24yeGmHudjFppD0ipWE9fhk3q1tCWy5PfR4CZS97HUJrK4zh%2FGDu4Zz7JTOkMvseKczWyjLyp2rKie9t0VVkr9URmRhZJZOdjLG37hLBXJXY4PTVZ0JAzLSkzUA%2Bof7bh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c7bd1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3702&recv=169&lost=111&retrans=114&sent_bytes=4243577&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3252&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VaAQWR7UsOXWQ%2FyN0LurWTRA0lre5sDNJafWWdeu%2B3E3A5ACxRzmJf%2BsQr%2FfPFVy%2F0II0PQUoxotztRwpjYbjZENcxAQeApDhBetocyRyNkfbEnHzEghi8JSZeOW%2F5%2FW1jkf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c8be5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3708&recv=169&lost=111&retrans=114&sent_bytes=4250370&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3254&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6DK1oHD19BRQMw3HekNxlEPLsv1HxIsmkiylU2JL8a%2BF%2BZAgRBh%2BWc7jdnXJZ2ATZ52dEnFdZCMGrSUk9dMpxDCOGIoUWxaR2Al1a1sCu%2BwCuzZS3wUi1nX0%2FOCxpbFM6zU0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990c8be3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7064&min_rtt=734&rtt_var=9259&sent=3711&recv=169&lost=111&retrans=114&sent_bytes=4253160&recv_bytes=41996&delivery_rate=4203397&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3254&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iFLAzA3WkzWA%2FBIH3Mo3NobzfwfJLp5OiueKDAwYLwbH3LwUnKCALwP5FlmTjc3AhNU9s5rx3ZVHqR1omV77kOfy09JXh7DXtW6IPgaqDBk2xCv2q8j5JwfTJN0%2Fz8vG9kl0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990cec5bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8106&min_rtt=734&rtt_var=9632&sent=3717&recv=174&lost=111&retrans=114&sent_bytes=4254973&recv_bytes=44151&delivery_rate=837400&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3309&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3L%2BzKRBR%2FLjM0Tc%2FGh%2B4GxX0R1Bhc11aMDo9NAmcLc0Guhu74X2J%2FYe7Dt0T2wSzFx9MLvJUNdHeNt3ygBRN2n9hyHEjl71aJiTUr8oUzVuG61jY3kXJjJyV%2Byc%2BUrPt7%2FZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990cec5cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8106&min_rtt=734&rtt_var=9632&sent=3720&recv=174&lost=111&retrans=114&sent_bytes=4257533&recv_bytes=44151&delivery_rate=837400&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3310&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsU4hERDq9rLMkeVfbk7AoRqrF46LBIITVeoAv8NzZb9DMH87QuAzTXMtziXyANfMbIXRkN60ZLfuCMrtLInroylIoqINS2MjoQNHe5ItvvdlxzsdTP6UNXUb1NFX1ZVzcCs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990cec60b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7223&min_rtt=734&rtt_var=8990&sent=3726&recv=175&lost=111&retrans=114&sent_bytes=4262492&recv_bytes=44197&delivery_rate=207253&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3311&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 2.0 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash118f5b5b8f2930c62a67af0c7f2d822a bbc94486ffa3908759f99581955e15b11083478c 09987adf8560819432ccfae2cd89e111dc5fae53a565c4be488846917371b6b1
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:22 GMT
date: Tue, 10 Dec 2024 07:42:22 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rQURQFFsr0athOzngQ%2B1Gt%2BzlszEnZO5Rz066CcSUiO7RIIGxzxE1WKmuAWc0S6K9P60%2Bc8Y36pQsGFWajPWojCIDVPLS%2FpwYvl43mVy5YaMZBdpFQcEIjCOGdvnyckRIIY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990cec5eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5876&min_rtt=734&rtt_var=7384&sent=3733&recv=177&lost=111&retrans=114&sent_bytes=4267059&recv_bytes=44288&delivery_rate=347645&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3316&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jYyNO2nI82gUJ%2B7UyTavKBgxOwWrlg67kzWhJngc66iK%2BFkPc32DrIETrCSfugF23IANpjsHk%2BkaAJ0uY6avEDt4KORzxgAjz%2F0Dae2PxkuB8ztreKkXy8U1fDDV9kB6F2Sf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990d8d43b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4835&min_rtt=734&rtt_var=5944&sent=3737&recv=180&lost=111&retrans=114&sent_bytes=4269132&recv_bytes=44713&delivery_rate=1156&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3412&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347127
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337251
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218516
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335940
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290715
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/11531 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash142d1dfcd0fa523f812022ac6bffc627 aa087e4578d05aa5ae12c586d1380f03110e1073 f830ca35da40ee2851c83dfbfcd28964d20a3703ede49a152730ea44282d4bed
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /11531 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:22 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392180
expires: Sun, 30 Nov 2025 07:42:22 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ora2LVInNHH5PejIPZMvg8drH7Nyh0O4xD6%2BxRbLXgpUDKDV9Vx%2Fsz81%2BAJRWisLhTsIuRI3fT9O3QgYURLNjT0gzPk%2FdN0THpTSs0kkw%2FepM0cFcs3h8JLBu6Hznpi0KfvCwyAo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb990f186956b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5123
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:22 GMT
age: 4151495
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5396
x-timer: S1733816543.588642,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 147 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size147 kB (147076 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 3
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb990f0be6b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pUrz3K2lRVD3hbSgZQy2%2BMavLGb4h614qKT0kMTKKl1y%2BZzd579O%2BPMvqHhafdZVYsrUDo3l5yHQO19zN1Ke7Aju2EMp4zLeeOCv38QK8mTnurWMbC2e6kB02HKrsyazqKg%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fb814b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3678&min_rtt=734&rtt_var=1450&sent=4032&recv=199&lost=111&retrans=114&sent_bytes=4600695&recv_bytes=47730&delivery_rate=2623518&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3760&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A97Fw1%2BiTfqq3ogqPhA6BTryNLk3yLaPBSmxCjhqEcMh0pS9TgpfjlRAJ0sGBePzNeC6R9zyy3jTgOonYg5L8SWfx0swSlwT%2BrnV7sDoR7hK1EL2JKitfF2BO1qmZDcctESO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fb816b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3678&min_rtt=734&rtt_var=1450&sent=4034&recv=199&lost=111&retrans=114&sent_bytes=4602620&recv_bytes=47730&delivery_rate=2623518&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3762&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NNH96vhEOmduzXPIvpAa3xvO39JwmRH84gc%2FhJr5ny9doNVPrm4hAH%2F3YjPV7jRPixz34PdvcVpZ2LEjAdgvYFQAF0qscpDs2B1HbnnZmV7LAsw7Z0vVOJORie9xCJiLTBeu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe86bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4044&recv=209&lost=111&retrans=114&sent_bytes=4606492&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3791&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q6OLfAqkpCs8Ny7%2BWipZbU3sQwxBEPab8p2YyBSYcmiLocIUZYS4vccxxU1VbX3CXkckCLQeCN4GHTy%2BdgAEKplRAhxTPELOJD%2F8jIuCW3vrlbMTi7G48wSYRlo1SV7KFJwq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe869b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4054&recv=209&lost=111&retrans=114&sent_bytes=4618492&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3791&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z69MSxgKyvgMnXNzm%2BtB0IIAp%2B1x3xmAy4yEJubGFN9E5igPI7FcAKJtkMFLcTadK1gWA7VF11L5et7J6Q3mCuH9bEKDO4Y%2B6O8uK%2BA3WcexuXf0oRjR14OVSJbb9SqDU0Lf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe866b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3797&x=1", cfExtPri, cfHdrFlush;dur=62
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 63 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 3
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb990f2c08b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1zSnag6IVY6xcYt8eR6K1dGDJes448OvsFbrTIECtNO7WjkCtAhrqYh9Pj%2FoUcD5%2Fecy0bhv1voiQabeHocEQKsgJBY6bpj1yRgVmVF8Vfe8du5FsnlZPtfp88K6byIdMySu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe870b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3803&x=1", cfExtPri, cfHdrFlush;dur=56
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qOkCFHaePJkHOfGMQ%2B4w3P%2F1ai9hWL%2FJWvAhXNwRlfiWal2ItE66R5MI9IZW2kON0s2diCBatlOMIb4A3IS7UH9mu6yvKfbDZaz%2BDzz2%2FCUtrHm%2F8Y5mZ0PTzy1UTFw3oTJT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe872b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3805&x=1", cfExtPri, cfHdrFlush;dur=54
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aywPAHVZFAaQ%2BO33Ayg4KCRq3ngWop2qMo%2B4JGDaSXAROG75aF5Ym5SYaVHW6AW0B6qwDprie6WClrD59HG7noM9U%2F6%2B16yO4a0ShCeId0petWGWx8l5QgnBSZn56ZtV3IFd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe876b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3796&x=1", cfExtPri, cfHdrFlush;dur=63
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Ztb9vmWYFFzjZf%2B2LsPstXaF1o26a5iYD%2FcLqQvElaO5aKS7bOfW0PCLyb4UJHk41%2FEjfAo5LZtJiuND2AFGICbnkApIiTAUS0H9OTExyrp3xa4zRzCEOf2o7ZWEl9QDB6w"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe879b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3794&x=1", cfExtPri, cfHdrFlush;dur=65
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1DQlm5EaHd7bmIp%2BzXDkrP1HHbXmeBqwzyPdve5g2MXNhDTPEJS9JsYnCyGe7XuU%2Bzlre0TJXiD6dNDhCvnzxYBzC%2Bx6C8mU7cTpivR%2FR1wPPbhigxHQvIj23zZiwv%2BPR5B3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe87db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3795&x=1", cfExtPri, cfHdrFlush;dur=64
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tvnSOJjvpQFAHHmSR2SYSo0EZmVX6ML4W2boCKxEf4t9BqS8ZoR%2FzLVd3%2Fw4W13wGNZg4yvKN4GuERDPK97u2mj%2BIlbv83NW%2BjBWkNaGzW7Ec9Z%2FNr8ZVnL8vE8XSQ35T3Xl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe87fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3812&x=1", cfExtPri, cfHdrFlush;dur=47
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 48 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash01db1add296848a5d2071c761a04eb07 c71114aa1e0b23064d3acf8e04f70faa4fa49dc9 a57a6e7e5ae3ff222b14514e8e269db8bb84348dd882ff633fe58abf2edcc8d0
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6u7eDuhqGNdjKW4hYOAxJBI42Ci6RmfAbMLpekqqvly6zTGynzy9Yyzfk%2F3WBhhwYPCf1K%2BKIt523m%2FJfB3VfLyLUwBDf1sXwUo9Z7H3KCEdBAiem6Bh6E%2Fdu2mhDaHvDznr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb990e7e8ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3747&min_rtt=734&rtt_var=3580&sent=3849&recv=187&lost=111&retrans=114&sent_bytes=4395812&recv_bytes=45592&delivery_rate=6205&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3593&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mn8m0bDDY8UzyfThd3dl0FyZCkW%2BM5HvokVqF2oc%2FeVxXoIJtPU0%2FPnPAhoclLpR29743oM0kqX%2Bc3faT%2B05AO2udnSy7RKFubs2bGrJxm3hUrUeDrC%2BjvsGKOmF5W%2FzGAzT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe881b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3796&x=1", cfExtPri, cfHdrFlush;dur=63
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3gd8Hb%2FkP%2F4nGmbRViZVtnBliHpnQ1g7M9ojzBJLIIA7KlnxBK3no8YdM2oCRKZil2ROVGcJlMsMJds%2BGGOr1h8WU4zh12e9FlNF1c9EgXZ8F2slGsw%2BVBWGkgtciWBcIr9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe885b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3801&x=1", cfExtPri, cfHdrFlush;dur=58
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5syFX8fAvQTE%2FaQcUpqohfwIVetXEARE3mv7AusJFl4JUtt%2BE3kyqtvZMBu%2BA%2FU%2F1fvZVTf8ZJ1baTtJzogIbCGVgZXbQi21QoJBpwyFKUjcY10QjQMiAhd4dhirkdG3ytPQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990fe887b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3812&x=1", cfExtPri, cfHdrFlush;dur=47
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GIaWuZymNmiIcIGCF4X0jp386kq%2FqfqFBICVi3QGCztLjbRfYoYZBrOOdsJ%2Bsly%2BCGYwj6wG1e1xsT4VRxxFAr3LAy0%2FLBfSH7Wms3MYrT87%2FPTMl3TGH6eBYrJ%2FeDfe4n7U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990ff88ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3796&x=1", cfExtPri, cfHdrFlush;dur=63
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8XGvNI7zEY2T%2FsrzaaJRFtGbmytB%2F8M4rCknQ%2BBPU2DTFK6QvhqUlhheODOx6a002T6xIEBlSj1S9s8lcWhoxqX8BCT4V6uIfFt11w%2FeCGZKUCeK3d0Xb%2Fv9YwH8Ja%2BiPIXu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990ff88bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=734&rtt_var=1482&sent=4179&recv=209&lost=111&retrans=114&sent_bytes=4767600&recv_bytes=52852&delivery_rate=6304099&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3798&x=1", cfExtPri, cfHdrFlush;dur=61
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashbf97a3d41ff4c0a25cfcea6efd642b42 7248cf5063430463d766daa51ba3ae37a66cbacc 4b0e7234b46198c9b251e91f30975bd8b27df07c01c5eb33c0fd9658cf542a2c
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:19 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mxcJih9gZYRx9XA4QZH6T%2BTC35ksShitYwyetV15EmnPDSAEp0SJB4qac6k4kppQJrP251BTapBhvxiywbwKgyOigq6aUSuSqpr1DmP3UzaYJ89m22%2BLxZZbgBvOUrosY21u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb98fa392bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2786&min_rtt=1428&rtt_var=1139&sent=53&recv=26&lost=0&retrans=0&sent_bytes=37063&recv_bytes=7565&delivery_rate=700059&cwnd=12000&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=414&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hOnyCVoui7CfZcf4Y6OpJZdUR3c6Z3fvjbyiCOc8aoTlC%2BstOhKM9ta%2Fu93yVhQmJOLLXIYzDTaARhaRbf1L74OexcUT%2BylDJwMfCRJGrE4rOVtcGyzHz8oVnqcruT6Tfq0T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99106924b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9108&min_rtt=734&rtt_var=11577&sent=4379&recv=211&lost=111&retrans=115&sent_bytes=5006190&recv_bytes=53214&delivery_rate=2033883&cwnd=238590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3868&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=azRQxg9ybsyee%2F5Bq8ZFCMb6HUhy%2B9WsVFhpmNbhdkXhXs2c0Hbkr8LMWhOpErMLODspq0jMZaIJnRLg1%2FnEydwxxaa9xSeZHjQq6rO6MKbdkdlV8ogZ%2FwhDgn1PBY1wrdyK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99111a26b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14186&min_rtt=734&rtt_var=16460&sent=4495&recv=217&lost=111&retrans=116&sent_bytes=5132196&recv_bytes=53776&delivery_rate=366882&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3979&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347127
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337251
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218516
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335940
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290715
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/31487 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash53c46256ba975c4d4169dfa83b62236b ce7442eb8f802cdc170f3ba7ce5ede0b129b8a8a 7cc5ec915772efe75421bd9b3d81b3f74d4576d35607d9a3c446e08b80391a5a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /31487 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:23 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392181
expires: Sun, 30 Nov 2025 07:42:23 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PdD1Ue9vBF5MWOPL70ffQRn3b33ICBI7JhWrUe8Rs0qQu6OkTN9iY9gB%2FJ1Tus6MxX649niBWTPjChPJJ5N%2Fl%2BYR218ikpDxPbpjFh6kZt4HMcaFRZaOVWr3imM8UJvbezmIMRkb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9912ddc556b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:23 GMT
age: 4151495
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5397
x-timer: S1733816543.181767,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 131 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size131 kB (130925 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QBbkgkasX3v6RjNYMwc8piFJ4sYpKVYv4KUlOMYbmpV8AAGzolA2PRLbRnvAfe6IXeu9L46t94XXwQHkE13SgmpUDXGZw9j95hcIyIQ9DGV%2FbgVbpR0vapoty3SPHD15VxoU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99120b71b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13015&min_rtt=734&rtt_var=11123&sent=4599&recv=220&lost=111&retrans=116&sent_bytes=5253917&recv_bytes=54175&delivery_rate=752&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4126&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 17 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 4
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9912d856b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8L%2Bf0PeNQcV7zKVeycwJ6lyQDRB6ZPH0YXJ7U9KG2hle5QuHHODlmt5%2FGsezB%2FpON5sQgYjDSHEjYnDj6CkgNpKN7YMbH05xxbiHI%2Bq9ISbQbumrYXGHQt3KbMMVR0vYTWw2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9912cc6cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6930&min_rtt=734&rtt_var=8276&sent=4636&recv=229&lost=111&retrans=116&sent_bytes=5288030&recv_bytes=55414&delivery_rate=127745&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4250&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4KxGshrXw0vXKOm%2F%2Bwz4GPvz6mt%2BgpkmEsBx0kJDWLCkIFglim80GuuaDAlOLzgBIB0bjDiOAPdStfOyiZ6SHv06q398LPUlphqIJ8tY3pgmCO9ToSP32%2FBgrEuHdPsw7fQ1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99137de0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5822&min_rtt=734&rtt_var=5345&sent=4798&recv=239&lost=111&retrans=116&sent_bytes=5470846&recv_bytes=58025&delivery_rate=6385026&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4367&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKblXCosyWknKwmUZUfaGH3EtiLdOIa7ysgeEiBvFvSsj35y8PCGivQzctgS8qvDY0sizFrW%2FZzWiIjRGFvsuK%2BI1HyNUzPYKaq0G%2B4DHvBz53h6JTQf0JKhpurzfkoW7Nhg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99138de8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5822&min_rtt=734&rtt_var=5345&sent=4800&recv=239&lost=111&retrans=116&sent_bytes=5473042&recv_bytes=58025&delivery_rate=6385026&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4368&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ltvd%2BMUz2qnA%2FoW%2B06f4F5Qw%2By1oha%2FMAbmUWGiua7WCmHCVrOX3IW0QC5939TY%2F71mEeG4rBjW5ryB%2BaU7Ln9j0z5wRgbzi5tdR1r551jmwG0KT0HB73Awhe4%2Fzz0PGIfOC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99138decb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5822&min_rtt=734&rtt_var=5345&sent=4916&recv=239&lost=111&retrans=116&sent_bytes=5611896&recv_bytes=58025&delivery_rate=6385026&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4369&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=acYs52U9vCfCmj4Tjo1byM8LzF2e1umn%2B4jwdCY8CJNZS1WLYawIZkFf75B%2FQUyuQb8Pf70y9Gd10lh%2B6OpLQjwvwsIelW0NzmovTTSRHMtAzZZK3zSzDK8iB3G8UyCDRKis"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99137ddab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5822&min_rtt=734&rtt_var=5345&sent=4958&recv=239&lost=111&retrans=116&sent_bytes=5662221&recv_bytes=58025&delivery_rate=6385026&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4374&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0rg2gkouNXEYg%2BPvlRa8MZUwqXzY6T%2FCCiATrOomZCnsng3c3gJwNhGvWmHm2byCjUr9HcFV%2Fc5J9kJ69zLCSyM8whMuBx4Am0c5LcWfmNbuhR5tpFVahCn7Ddr7x6fl2fxR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ebeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=4966&recv=245&lost=111&retrans=117&sent_bytes=5665487&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4478&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=82kkFsVjZ45fBFWzmuIOnqyJ9%2BqyrV9ku0kd8xP%2B51wdE77Kqm9JBXQd43OEFPtS9lT26fVUuYVNN9sFjZjMxr7uYhPKN4IEuOA9vuUNktMkSQzzZAF5oWbhwDRA%2FdWXI51q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ebfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=4966&recv=245&lost=111&retrans=117&sent_bytes=5665487&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4478&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nN1DA2VNkKLBBiH15YQpCoy%2F64UDi151N36m8NgwEXRW6LFu0bsULSGd5cu7g9ibC9QLJpTDDgL7pWXR%2FUBgvveU4zWODymGXE5CFR1XvVYYq6f8tvmf0MtrlDnlsQZlVnmB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5032&recv=245&lost=111&retrans=117&sent_bytes=5743915&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4479&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=orV%2FwCQirLK1gv9WM9Jd1W9O6Zm3IGW%2BLEF6vthPcvxtD9nZ%2BbF6GbyiNT7jaIe%2F5YjUUZ21A%2FudasNcfNi2QIBqe5SodHD%2Bg1k%2FR08k3Ru%2FSZvfTdLMfxc1JeeVGvgT6s9P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ebdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5040&recv=245&lost=111&retrans=117&sent_bytes=5752621&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4479&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8l0P3UPz5E4xb4GIS%2Bub1j%2FMcKl%2BEWSC4Bd7H3mHDpppLKYNlNmf7mV%2Bc7RfvUfQr1JyisLtf%2B3cRaDlPsJ6WOeFLAWiRN7hr021Nc2%2F7q3gxPQiNGibHmxH3WueF2G6BvLQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5170&recv=245&lost=111&retrans=117&sent_bytes=5908621&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4481&x=1", cfExtPri, cfHdrFlush;dur=10
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C2v1f%2BRAarXwmlffl8JGgAymlzqPKdNjUgCxlRuvp0uo%2BWt7DcqryrqySLmO94g8SuIrC6sZTbO1BTHPtZEx56Bey7ItRpTfgTSOsOgMTQosZbg5As%2BRf4tmM5PUbJN3Adum"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5070&recv=245&lost=111&retrans=117&sent_bytes=5788621&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4480&x=1", cfExtPri, cfHdrFlush;dur=11
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yVK9R6VgCjxrVwLIX2JACN0FgT8uzbCk7ctLQgRolQSSjLHKrkR%2F4zkpPz7aIymFeKat83zKD6zW3EUfumtVdpjgMQFFk19KkXW7xk5FSh0nQtTc1Occ8n%2FLansHhcU4ggE2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5172&recv=245&lost=111&retrans=117&sent_bytes=5910052&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4482&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qhMK52N75pWoMHuwfRQIJnUDJw1OjWaDzJQxWG0dudUskxHYrKlh086Xj7Ljptej6VhvDnHPxpEItSoN%2BCo%2FSOAh%2BatlF9hYDv%2F83xOlC251SmPBfTMudzWRHf9Z0qr8yKky"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5060&recv=245&lost=111&retrans=117&sent_bytes=5776621&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4480&x=1", cfExtPri, cfHdrFlush;dur=11
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uuo3WVStIhp1dK628vfikTVm%2BjjPwAb0DqM0PGTImy7g6qJZw84OzR%2FWPqeDVDGh4iUKlPLPSI1ERvKZfl0mrxZ9MjEoIIFz40hqgp1jvJC6GmU1BsyTvfGILLVarjGRqpGY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5050&recv=245&lost=111&retrans=117&sent_bytes=5764621&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4479&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2V0aOK9mc2u5r0c7fS0qhahm0HN5V5dRaOpNch43UOfYf9L%2BYmGm7%2FjX1eBUS90KM1t1wYP5vXqPsd69Q8U6RHo8NS8%2FNSTRXVzcUrb1chT%2FtRag%2F1vREGcksS1Pr6EF1A1v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ec9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5172&recv=245&lost=111&retrans=117&sent_bytes=5910052&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4485&x=1", cfExtPri, cfHdrFlush;dur=6
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=veqDuMEsD9r8xXEIqkJfMlJ7rIxDfAcRskQqqxN1CsRqTPSra4QCz9aSN8z%2B5Xep3UCyIWc6pYA3Iz8w3hNeSyC5gN1Dbf4s1IMZ0He2lAh%2F2x8cJ1QOVHIjgh5yz8oQrUgg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ecab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5070&recv=245&lost=111&retrans=117&sent_bytes=5788621&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4480&x=1", cfExtPri, cfHdrFlush;dur=11
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A4mXPvti4rX8I2PLVSUcOEj6RSwl%2B4pD4S0kkbRvAmqdp38C8nDuHXK6H2FRyWXXTgr4%2Fj2gjtiLBFuNJTtY5w2jTSqgBOZ0gIkQI2OYtIIalJRT47vACIUi8%2FpdfGX2UQmS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ecfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5172&recv=245&lost=111&retrans=117&sent_bytes=5910052&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4483&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MUg8nY8jJsisw3P1oqxt%2B3030PlN97sZiPIsQRmovlRBz1hL8uX%2FYDAN%2B9CR2aU4caTF8oTRVALd3ClOZIyegeRMtWkH8Y%2FY578zWsg1Nep3toocDirBSt5gV%2BkIyQY6dCJ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ed0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5172&recv=245&lost=111&retrans=117&sent_bytes=5910052&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4486&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BZaaKG0yi48J89u0E9mvshpfoPFPgClcRxkwOQ%2FRmpeb7a7OnwnDuqZJlX15qfamSvx7b1EJCmJaTvw1ypMqyuS%2FVjx5him2UJadY%2FYU25bNmwtD%2FvnyObaWpwZJbOPliDVB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99143ed2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10782&min_rtt=734&rtt_var=13809&sent=5172&recv=245&lost=111&retrans=117&sent_bytes=5910052&recv_bytes=62170&delivery_rate=36264&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4484&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WY8Z3V8egiFjZ7HI8os78A8TcI57aCKhvpgFnJfAZnelbPdqHaF1HV9Lig6MiFtU35SZWyrF9gP0Zny4c%2BSjuxrYz%2BVP2b0nmmqVmeoXSRUQr4qo89Jm2ucZTSFXTE%2BPxW5B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9914af70b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12687&min_rtt=734&rtt_var=13441&sent=5251&recv=248&lost=111&retrans=117&sent_bytes=5994078&recv_bytes=62595&delivery_rate=1674491&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4554&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347128
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337252
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218517
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335941
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290716
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/38149 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash945e959a8fe27b4922922c8de24b94e2 cc415db0bf64051978896f5f96ce860f24ce79a2 e22326ea981b478bf5821cfeba755d820043776545e58b5a2d5445211ad00d42
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /38149 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:23 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:23 GMT
age: 4151496
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5398
x-timer: S1733816544.791600,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392181
expires: Sun, 30 Nov 2025 07:42:23 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CBO2MRoY6BNsGQkCLVt1olYNU8esWmCXhWJGdROzLme2qUyuxXvF8Wih2DyAG%2F17fp8F0QF95JVfog0QKcY%2BZCPFlZCUjoTJ7fJtLDhmntfyhpCn%2FcZNxaNaAMdz73O2GvKNg9%2FY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9916ba7c56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 166 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size166 kB (166093 bytes) Hashba08399681fbc7c1a58fb223f3cef747 aab2a20dc040ca5ec94078cef206f0f1bb23e299 aa5f8c9bab6901e226189492e65c61b491e710174e3e126668d3ffe5f1694c70
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3nbPWHCnGvl1eF8GUCUL28pM43zibT5%2BjPwoDFp7kpi%2BytEvRfmhPND5RbBEcBO1I4wZL4uODKNSMxYMNwg%2BtNWoLmIw7lVGqg7ufV1KIoow59Sh%2FLk4VyuF4QB0sNtIrIiz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9915f974b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9560&min_rtt=734&rtt_var=9850&sent=5362&recv=254&lost=111&retrans=117&sent_bytes=6120728&recv_bytes=63432&delivery_rate=1127&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4795&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashfddc3590e2ccd537b00c1c522819f36d cb0fcfc26464d42313138a0a6d6b3726f8513b23 91531dcec1351aa1495a06d0879be04cb7e1a58117bbb5843aacceb053f486f2
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=040OQIrD%2F3Dj0JJbrFTsnQGylhLhrtZbi%2BFFiWxVf4NUFEr4rRW94VPaz1o3Qnrp6M8cjS5kFO9g0yAE%2BZWJimvIJWjUKQm5JASBOv3zc1V579q1IQwtVEv5%2BFp3KaHRkWLs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99169a47b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6792&min_rtt=734&rtt_var=8352&sent=5388&recv=259&lost=111&retrans=117&sent_bytes=6146979&recv_bytes=64188&delivery_rate=1192&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4859&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ntFuRST%2BNamOqZ7ssdpC4zmZPTSDgLnsbUliouCJPDFucGf82pPGOwhUspEMStm6x5a%2BkVq4qWcE6hdhy2%2BO7NSW9NisyM1HixrBPpdH6rHcU1JIro%2Bh443xLOWrHy0EoDhu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99179bb6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5426&min_rtt=734&rtt_var=4407&sent=5553&recv=272&lost=111&retrans=117&sent_bytes=6327700&recv_bytes=66937&delivery_rate=505472&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5020&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bc7fX2%2F5YL%2F%2BpR7MqpycIFRJ3DaTZxpmWbLAi%2B1ZyA8wIhhyAhuOIhIIxlGX7ns9ZC8J9ROB31hAGByCDw90nJ%2BvH7%2Bjezh8MF0x%2BDMcl4LVE2ajwiwIQbRCkMJUDJ5rPe4i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99179bb7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5426&min_rtt=734&rtt_var=4407&sent=5557&recv=272&lost=111&retrans=117&sent_bytes=6331412&recv_bytes=66937&delivery_rate=505472&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5021&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 4
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9916ccfcb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 157 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size157 kB (157050 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 4
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99169cc8b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RO3p2lQo%2BDD7vGDYNbavGKyyEfsDcBOVWEAgMOCA9rVfEIO4A5xaN7UM1Tzd8ob7LO%2FX1Cp9up9G8iYrTyJVbNZ1I9WSKxQseq32yLiAbK1ZHw0oYjYjVwMTlFOnAt9hVIua"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9917abcab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4854&min_rtt=734&rtt_var=3468&sent=5682&recv=278&lost=111&retrans=117&sent_bytes=6475843&recv_bytes=68300&delivery_rate=693771&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5028&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=olXHJraXWImnKyMGPj8T7TcUPLxxdDfXtHRZuF6KlOj40gIEAp5Ff89geLm8KJ6e8AvoUjICFNcI3FTAD4LvEAcCjilcXDv1%2FwnYdfY%2F%2B3e3mlmBbEkNa2wcO9fJ2NqrxhWV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9917abd0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4854&min_rtt=734&rtt_var=3468&sent=5724&recv=278&lost=111&retrans=117&sent_bytes=6526160&recv_bytes=68300&delivery_rate=693771&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5032&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PyH2GQMMy1GvKlcnBCrVQ4yxG6Oka8hODjc2cWXYXcZkfGUjyBibk6ls1OegWxzq4i2cYeEw%2BUXlTq0u1OQqaanVro0OisW9vNw9ZbN%2FR0ljXpg0jvHAhpq0FgPiAceYktpu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9917abe1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4854&min_rtt=734&rtt_var=3468&sent=5773&recv=278&lost=111&retrans=117&sent_bytes=6584120&recv_bytes=68300&delivery_rate=693771&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5035&x=1", cfExtPri, cfHdrFlush;dur=14
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sy3RGAB0PFfkLUOYXSxl5BKqZZK9tB9rzt9J5NkjOUhIWGlxRxFomGHfIANspSziBBynnHxNgGFhC3DW0nah9TQD1LgwxHaF39ZKrdZbQyj3TD6TFLOsO0j80hsY13ihxBO9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9917abe3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4854&min_rtt=734&rtt_var=3468&sent=5773&recv=278&lost=111&retrans=117&sent_bytes=6584120&recv_bytes=68300&delivery_rate=693771&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5035&x=1", cfExtPri, cfHdrFlush;dur=91
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 8.1 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashb8a0526a7783c3d7bc965b86b2670d74 109c4e558a6e0b3575bb111fead9698eba26d062 8b4b8564b8a2559ccd0ef5c41a92eb8045bd8658438cdafecf478dbc7beb8763
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 4
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rCxodiqAcqe61iuC68DLgZMuYnep%2BwWbVzDdimrl6xVYukowjJ6%2BsTQyZ4xDnHtmJdp4yhjjWdLg7Sl57xIyt50sfR%2BwYegEafvOw7YIj%2F7cwKJxmARHiGl%2FEWU5R1GFO9Jf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99169a3fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6645&min_rtt=734&rtt_var=6558&sent=5414&recv=260&lost=111&retrans=117&sent_bytes=6176344&recv_bytes=64233&delivery_rate=2146660&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4868&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 8.2 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8WuNQFts%2BbdrbTxb03ufbBIKflUNrMmRnWFuGnrlECUtG1bC%2FKNjxWpEV1s%2Fmrox8r1yA6VAcbWGov5ETT86aBjsidxnJsfbptHeCIU1%2B3cTM5wRv%2B3z%2BRGUwVEq00x9PC5l"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991588b3b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11906&min_rtt=734&rtt_var=10316&sent=5355&recv=251&lost=111&retrans=117&sent_bytes=6115797&recv_bytes=62994&delivery_rate=712&cwnd=249390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4693&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ZqlfUJCQVgV6ojAJxzS42cH29I5m7YyHMGi4uyQnALZTVn2lM3hXG30bwGcUoPGoOSUkvlPmsaGYmJW6swbhGO%2BgIx6KIVXsPKqxFkbVz3P0%2FspmudZWc2F3RFliMXGCcSE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99184cc6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10423&min_rtt=734&rtt_var=13113&sent=5934&recv=285&lost=128&retrans=135&sent_bytes=6772942&recv_bytes=71364&delivery_rate=2252590&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5138&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RbrnYF1o5pJSWjficUFmpqNC6lvchT6Vul6nzcVMPr2ZDDdfkIzQXRLRGf%2FZT3D6w4ZdhvQMqVhjosaSFa78l1r4LBy8fo5NHoCgTK1Qi1fcr2crbC6JhL%2FElv8gch%2F3ete6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99184cc8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11285&min_rtt=734&rtt_var=15184&sent=5924&recv=283&lost=128&retrans=135&sent_bytes=6760942&recv_bytes=71002&delivery_rate=2978933&cwnd=174573&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5136&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmM7aeMKgmANg6x8eyxHMQYBxiZ4PWmfgVen612BXZkyNecqRitzcCx%2F21%2B4HcnrQCmI6n0c1LxBzvEl4ZpsHJWdUK1l9Ru39swAOB%2FXte5pSk3DV73OBxRmsy7BrU%2Byfl3j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99184ccab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11285&min_rtt=734&rtt_var=15184&sent=5924&recv=283&lost=128&retrans=135&sent_bytes=6760942&recv_bytes=71002&delivery_rate=2978933&cwnd=174573&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5136&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 52 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashff3c7407d20920356895e90c6b488a1b 3eccd6699bb1cceedfa5d0a37cb4e5bc5411c4eb 76eb831bd7ca8fa7d36ab98fa452045a755ac3dfed4192507949046df04ac644
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:22 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 3
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvE6RPRSZpAXHL8BEIe2dZmcKh6ofyMeY19i2y7a6sfrOI8cwBdQqZo4BqguFCih6cEkhD%2BXO8YcezyTyYYjmV3k625iH0086FDCylkjdeISyY7wIYcn4EI%2BEgETLXbIV%2F3e"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb990f1f32b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3851&min_rtt=734&rtt_var=2424&sent=3879&recv=192&lost=111&retrans=114&sent_bytes=4424991&recv_bytes=46348&delivery_rate=136970&cwnd=161133&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=3655&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EIaVYMgmQbewRVbg3Livyp3TLstM2lPfSXkqnu35QrIWTh4h51%2FKHJZtX1ORQahCPKaNPsJ0F0GBORPvY0ugZAkEOHwdpjb1hrrxKIucs2NkcUyNT%2FwIUpzcvemiuiXzclvI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99185cd1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10423&min_rtt=734&rtt_var=13113&sent=5944&recv=285&lost=128&retrans=135&sent_bytes=6784942&recv_bytes=71364&delivery_rate=2252590&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5139&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 27 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash6fdd8fd4d5378d89608ca4697b466570 c4b7a2fd9a7d59077fa1968974c9bdb26e312b92 76e788bda5ae6b7ecc95b15c2aa3880a9842ec15027e44159335dd126834ac79
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vxWisG12OEzmCES33gOixv%2F0xYiJjQXSgG%2BdbHxeUhMmga9H%2FV%2F1eVdOy0aggzipsM%2FfCQlO8I3Zt58RZcnrQQMOHC5YnNQQrFKc5ljQQx6X9wzfiUy5L46oPtzdmI2rjqnR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99122baeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10875&min_rtt=734&rtt_var=9816&sent=4606&recv=223&lost=111&retrans=116&sent_bytes=5258843&recv_bytes=54613&delivery_rate=1163&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4194&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ReH09sFGe1tR0ptzg%2FDbZRmfQjpvt3pQa6t2Z%2FGKYZUjFZW7rKlS6qMWB8622zs44B3uqiXWuwafzH%2BL46tTVYHQfpaLTbWfUuos3EWkxehbXc2qN%2FBxbR04aCXpz9VfvrNN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99185cd4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10423&min_rtt=734&rtt_var=13113&sent=5954&recv=285&lost=128&retrans=135&sent_bytes=6796942&recv_bytes=71364&delivery_rate=2252590&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5139&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tfLwa0r%2BiIba058KF6CmSrupLD84CQTDPNpiWuJC1A4UWjzu%2Fw%2FY%2BXimNLci8rzxfm8meEuCMx46TELFHrrG2S%2FMpmezw33SrAdAiXK8CjJjjbFAkS2bJKns2xcGdB4pmMg3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99185cd5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10423&min_rtt=734&rtt_var=13113&sent=6009&recv=285&lost=128&retrans=135&sent_bytes=6858720&recv_bytes=71364&delivery_rate=2252590&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5140&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d2N1aCBnSsifxwyFOSKkxJBwyLyBQaxSJT7d7T30s6IsT8Xf7JQQmTaSmAKtSipsxP29H08sr1toF%2BQAHm2DyoYcfq9IvB9uWNKkhDhYi4Oqa89g%2BHc%2BAnOEe6k1mntZ0Rvb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99186ce6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9588&min_rtt=734&rtt_var=11503&sent=6024&recv=286&lost=128&retrans=135&sent_bytes=6872965&recv_bytes=71409&delivery_rate=3134602&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5146&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NuRWTSItYEawZhkXgBfipzfb7eNnoygjRaV6Ee1HvZlbOMdFxBLAFqEvLrSOdq6ayp4jwoHz1VkCkvaRMG%2FAbtjo0P6zPeyAjidOySAVXl1pQ9csrwKqnN%2FFv4eaAyb3V3DC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99195e6eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16594&min_rtt=664&rtt_var=21850&sent=6030&recv=290&lost=128&retrans=135&sent_bytes=6875612&recv_bytes=71878&delivery_rate=881&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5302&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347129
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293520
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337253
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335942
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290717
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/21650 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash9f557f5e1b2c95c16a0a500f34dd157e 6a948013d1aa41704d9c4ef2dbe0606f4a1222f5 2aa539ac8c671728628c4f1b1a6ca6410664bcbc5d8914a9715dca245b198c4d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /21650 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:24 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392182
expires: Sun, 30 Nov 2025 07:42:24 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JSXS8kURwpf4iX%2F6MSTz06A6eVtDFzEiU9XCyH%2FZfAPfgyBs%2BcajNIzMO6x8Ag%2BVnIF4m02%2Bj4vKzBYdbMj1sWP06yMvENiDhmGZdsT9f4yuakwMTIcK7mMB9j1G8hls3gBFvtpq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb991adf8456b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:24 GMT
age: 4151497
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5399
x-timer: S1733816544.465889,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5125
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ec6zsojJutEVYSn2QAh%2BaWN%2B86VbPiDoSisLspDDn4xAuD0hBbltmpYRdgRa1UkiFIgycHls6oK6%2Fynx5kt14fe4sox3nsqWg4V5KJOUWZvmajcyy8FE4NDATmr%2BNKMkZNBe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991b6948b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6722&min_rtt=664&rtt_var=7310&sent=6199&recv=310&lost=128&retrans=135&sent_bytes=7056126&recv_bytes=75209&delivery_rate=839&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5638&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 42 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash75bd8eb4aa6b920c0d6f143b825f3c9d 9546c042f1c108aab61b826d487607559a11c7d0 355bd7189422a291df579c83594686290a6017ea8d3f7193a091d1861ba5694d
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x9RroWw3GTnFyCt66N%2B86KNAJj5cM5MhkxE%2F8dFhcSUFbAu0pbjqdIRKu9J%2BgMewc%2BPmr68HZM80ETLx7FL19YbBbjHZm6YsikS1KWEg%2Bn9lU%2FzyfuRh4c9aVsZ%2B9SRNa6Qp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb991a3fa8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9637&min_rtt=664&rtt_var=13297&sent=6138&recv=298&lost=128&retrans=135&sent_bytes=6997440&recv_bytes=72803&delivery_rate=1141&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5477&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 3.3 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash051f9c6daf01c6283f1fa5dfa24c5b72 c6959a8d930348fc49832463d596db36b8a84568 1ff361733d8c8bb90c7efa36fc6aa117075c151053d661bb57ff7d1a685523e1
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pxXdPmTGKQH6sn2EugsrKimGbqUZdWKFNRcYIm2oS2RqAaAkbYlzuSPjBHMta1LO17im6nnKEGv2pVTRcl01qlTIQGLpGeazEyGGTOPUNZOKdNnw%2FcR9lTkK7bgruDgIATQK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991ac858b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7713&min_rtt=664&rtt_var=10827&sent=6163&recv=301&lost=128&retrans=135&sent_bytes=7023664&recv_bytes=73206&delivery_rate=7711324&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5526&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 5
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb991ac9b2b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pD3nb99s4P9BxtEuzb7%2BzpawBIY10v3qqoGkj9hPOlgy8XUmHzkNHA3W%2BoRwASMlN9qY9%2BbFNarg26tXUA0XHCQslkRio9A09LeOxSPLBR4QyCKwBMR8pvaJIAy4g%2BBRwkEC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991bb9b5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5917&min_rtt=664&rtt_var=5184&sent=6336&recv=316&lost=128&retrans=135&sent_bytes=7211419&recv_bytes=76025&delivery_rate=2560&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5680&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FL2saLCQ%2Fg4%2B4kfrrhbU0HSwq5QUeLxazMnmYbY9QCw9d07HoArNEJNvNwcFB3t6G9hjJnifxkndinOsKckUeXVG7wgU2o4lKAiJFFfWEXhACf64nxfPcDDIyTQesLLCiufk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991bc9bab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5313&min_rtt=664&rtt_var=5096&sent=6341&recv=319&lost=128&retrans=135&sent_bytes=7213694&recv_bytes=76710&delivery_rate=230212&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5686&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOdsmBfw3Rr9uUobRALnV%2BBUdrcC%2B8s2dlBKHnWEjvGpUpUv16pwozqBuXLB8%2FdHf0SZ9WoGnkTlhEFnAId660OCBh9SddEQ1mGzStY1siEhdw9IIVM53UH5Fs1oVBm%2FJG2E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991bc9cab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5313&min_rtt=664&rtt_var=5096&sent=6457&recv=319&lost=128&retrans=135&sent_bytes=7352545&recv_bytes=76710&delivery_rate=230212&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5692&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LRrsociz8o3js41DzqIXTOyHxOf6rkGHaRZsfsYcnduPLhIOXSqZTzUvqNFaeFqCDK0oW5Pg2W3mZz2%2F3NddsNCGScmDYk4XUs5D%2FpSOWT13pOlrC1qYf0L4AOeW9gin5ikz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991bc9d3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5313&min_rtt=664&rtt_var=5096&sent=6499&recv=319&lost=128&retrans=135&sent_bytes=7402864&recv_bytes=76710&delivery_rate=230212&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5697&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 71 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hashbd727bed5e17623ab751a1f8fe3dbfd7 52ae626acecf0597f966768b2125dbcd5fd52aeb 06641c0e1204ed8a671f1086133d87ce58790cdd8334d8892c38958c76dafd48
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:24 GMT
date: Tue, 10 Dec 2024 07:42:24 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KI6S2m1H8hDnXCki3zf9b2Nf1PCBLlqm%2F8hn9NMButrfjd9nAe8dfT3soOENxuFSf4v5lG%2FaAcS%2FlY7SAExEbpMCkrQXxMCyyRJqpvdZaHJsYkOCnN6XzS%2BvETzEYnIzbYz5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c2a3fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6684&recv=322&lost=128&retrans=135&sent_bytes=7621570&recv_bytes=77954&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5753&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KOOaaCtLt%2BDvZixP6ixKgg00XzOY7ND7JJFbhWXHBBB6S4dDJ%2FBxej7zklzgkYaC4w8vhT4cNHGKNA1lKZ9tD7PWTfFa7v0UTLx%2BAnx2lNVjJKtq1Mnmv7YqI6i6aOXCsdpV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c2a40b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6724&recv=322&lost=128&retrans=135&sent_bytes=7669570&recv_bytes=77954&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5753&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BeEybAkJE%2BUdd3uotI6TcpaPF1nmqfZYspwY4PkMfhPhPEDAE9HTGNkfhEim33qFrn6CECBd7rCTTOv8UfuTuHQYkdcBeF5KvPvLkPoNlcN91gucnMHRmxA7vLU0zC24Me68"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c2a41b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6746&recv=322&lost=128&retrans=135&sent_bytes=7694789&recv_bytes=77954&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5755&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k363C9Fd2SwI5H2xN3f2w0Qh8f%2BwHhC7%2FcYKYg8hBFi60n6NtcfeRypy8nj47SItSJ1qpmB8Z0lAoZWopDj3YzzK%2BRPstSrEPbeyFW5k7IErdHwDRH6vr7CSHEGTGzCPNY8r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c3a66b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6752&recv=323&lost=128&retrans=135&sent_bytes=7699817&recv_bytes=79100&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5764&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o%2BljfXk%2FXaDDR7aZiGvhXDbIo3ANpZu30GLbC9w4Vg575My3wStG0IwWUHcKwJ3%2FMt7ftvMOmPolupSblUNgcwBf6gYIiKZesl2IScpLoQvpxoKFi82LszYTSnw1SJVPL78P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c3a69b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6760&recv=323&lost=128&retrans=135&sent_bytes=7708525&recv_bytes=79100&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5764&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVf%2BvcisjDMBdPfIGSu1StymLGHgi5y9MnEnYFT8MhmN11sJte46I8lmfOLazex8L%2BXCrDmdJtC1Dbf4iTsJw%2FhS5jmU0d2L6jpY0hqNYKUWNjMx1yWLlJGM1jXiPcTX7dHz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c3a68b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6763&recv=323&lost=128&retrans=135&sent_bytes=7711310&recv_bytes=79100&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5765&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0gEKD1Wcs7NCgFYENnRNQtRfpiGvr0bZ1a%2FoAL5qJXM81X4aFzhT5DytEERB1nL3vj4VMiZu3ihqhvLb%2F8dz%2FdM%2FkDHiaKV%2FV7pRaIkBjvN0ZcEItFtlH41gRnKy81i5Ub6y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991c3a67b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5767&min_rtt=664&rtt_var=3819&sent=6765&recv=323&lost=128&retrans=135&sent_bytes=7713013&recv_bytes=79100&delivery_rate=7297757&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5773&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dPwF77eWnKj7jOd2F3XKhqMJkI9G%2Fb282HWOn1e8%2FBFO6mDMoBCwVQmRCrhQA74sU%2FN0LEHW0%2Fj%2BpDKCu3xZ%2FJ3IZFKhhP2ZCubL4aP5g0gWjadZLfYygVYf6pvbOTOTH0lc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991caaf3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10023&min_rtt=664&rtt_var=12480&sent=6775&recv=329&lost=128&retrans=136&sent_bytes=7718774&recv_bytes=80731&delivery_rate=227034&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5835&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Fzec7ZTCb9zmJeEvaDCo8ccnxJbQhM4eJzOMhPBSf7IL4WVww5aIRbhbHDnqqE1%2F5qoJAMDA%2Bgvi007nZLh%2Bh5YjPWCBpem54a4hpeEBOQFu6sfuhAmAQ6h0l9ukE6kbtxQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991caaf7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10023&min_rtt=664&rtt_var=12480&sent=6777&recv=329&lost=128&retrans=136&sent_bytes=7720726&recv_bytes=80731&delivery_rate=227034&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5836&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D40v9aLFm4CpXDIqATAb6M18OBeV9SigUWrWuQwgmIOXSE9T494ocYVYdjXW4BCQQE1DV1bFab%2FFuWTKDWCwqCvpGVjCiFGq%2BKliF6CT4GM%2BTd35%2BaV3y1TK9SVGyri5fWIX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991cbafdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8913&min_rtt=664&rtt_var=11581&sent=6783&recv=330&lost=128&retrans=136&sent_bytes=7725679&recv_bytes=80777&delivery_rate=273223&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5839&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jKGlZ6zsuCHr2Ko3wBo97llZi49pKIRevgQ%2FXU1yOoV26j2jIThsHmOSIelrdvGvlII%2FcHfSlYVvycP6sTcQVBybUHZqDSulRk1Cpze97evfmbtzzUl0rPfBLcDEomKoKk4j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991caaf5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8913&min_rtt=664&rtt_var=11581&sent=6786&recv=330&lost=128&retrans=136&sent_bytes=7728253&recv_bytes=80777&delivery_rate=273223&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5840&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YrWDFIsyZ%2BKKxqq8oLfUBJXMRzgvCe90wH8ezT4cUmadSQYOK3pqvwp3pBTU%2BAtEFQAR%2FSTEYydSSCFBJ5Eobbfcil1rFZUk5i0Sjy8P6ebxpPmti2DKD7DOzVjfXpZuVhDF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991cbafcb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7125&min_rtt=664&rtt_var=9614&sent=6791&recv=332&lost=128&retrans=136&sent_bytes=7730863&recv_bytes=80869&delivery_rate=448570&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5849&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcjnzoGQHgs%2Bj%2F%2F7aKRtwOGGBUXfsBO73Nb%2BR1pfhEi16fopAacFrJ2nQPZEdFPz4%2Fwu11xbf6m2Q9FnGPu7yoWKnX3hXOzzOl9WWwXfFAOG%2FOotdvCfoE6NMlTIE84Af2Zn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991d0b6eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5988&min_rtt=664&rtt_var=7455&sent=6795&recv=335&lost=128&retrans=136&sent_bytes=7732935&recv_bytes=81294&delivery_rate=1179&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5892&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347129
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293520
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337253
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 53 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash7e8f386a459b592487f5cb039083e4e7 deeb39d507d43e0f44d19ae3f5cbd98829940e7d d9bdcb9cb5d8986017bf36d474fa2e75a3b37d07cd791559694b29a1ca27a469
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:24 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 5
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVcUASFb4918tgm%2FYMg9B6RNtzE0jLren7RGewVoucnQS6kPt%2FbJfLphfqQ13YRL7cyjvhHqssIOzhK%2BckM1WDOM8ZibVPTWkz4HkbWo8K3Jtee3wzHU93TAjgYnzliiQn0%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991ad871b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6986&min_rtt=664&rtt_var=9575&sent=6168&recv=303&lost=128&retrans=135&sent_bytes=7026623&recv_bytes=73559&delivery_rate=158290&cwnd=251790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=5538&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290717
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/11881 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hasha8d686cb44431c0be97dab1ab17dcb2f 0e38a16e9cdddca313072cda501bdd65f2810058 0e21885e9ad947035b1397c97716eec3cccbbec726e45cd370516bec2d6074af
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /11881 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:24 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392183
expires: Sun, 30 Nov 2025 07:42:25 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rgnfqRruzkbNSgad9YO4hVrrvHPehw2lRC6bdFNCEVzwbERcMmT1yS%2BKDnZ5kPXf8nWLZxKefnFK5fBQhhyHRUJnoXCdyR2Bg8fHhKb%2FY6mjC9B0F7XtxJG26Cm6FDNFOuVYbFZA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb991ecc4056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:25 GMT
age: 4151497
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5400
x-timer: S1733816545.097173,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 55 kB |
IP 188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12693), with CRLF, LF line terminators Hash99cd9cbe2a2af3b12f2ca7e039ca0d0b 04bedc856bb5141c3ca25bd28583140acaf0fed8 9cadecffbf806870d696e9771d663db18bc35c2ed6900778cb46de5723aae2a6
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iF1w3U6zaancknxnZxQRWcTNqZhUQxvOuoJ%2FN3sfYRBHxuO%2F9NSQ3f0D2z%2BYy1fOEEC8yxRPZLag11RqqCuRXaVtN7NVHYYCXSHpPzpRk1iCh92Cwr%2B68Z7WLWxwwEUNWPN%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb991e0cccb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4804&min_rtt=664&rtt_var=3995&sent=6902&recv=342&lost=128&retrans=136&sent_bytes=7854745&recv_bytes=82174&delivery_rate=1285&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6111&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YZpkGIN5JdPMg0a8ahVE0eUULrNKVE1yHyZxgj2JYAmMf8puX7g4dIctDIAK0gxg46PEFjlRGDinZjZnNrHgVhvqYnb1AR8mq03xNhstFU%2BBFyaDa9JGz%2BS6qf9ykAagHwS9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f5e61b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6391&min_rtt=664&rtt_var=5853&sent=6963&recv=355&lost=128&retrans=136&sent_bytes=7913430&recv_bytes=84356&delivery_rate=1109&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6258&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 3.3 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash051f9c6daf01c6283f1fa5dfa24c5b72 c6959a8d930348fc49832463d596db36b8a84568 1ff361733d8c8bb90c7efa36fc6aa117075c151053d661bb57ff7d1a685523e1
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Phz25OZDacYX5I0oANjnu0IGQ%2Fg56uWgVMC0HZgxdmr0665fEyBKeQD6Cf4t5xRgx9uUXwHY7mjBl9aPaj8auox%2BFkvSg2q28dxACKKoNOKeaZjzQ46%2FFL%2BMPOx3pcYBVAy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991ebda8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3819&min_rtt=664&rtt_var=3056&sent=6928&recv=347&lost=128&retrans=136&sent_bytes=7880996&recv_bytes=82930&delivery_rate=1174&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6160&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JjAwOPtxy8XsBsT9dysgTnxkdxWeQgaZDX2ZHEAuZZUGQel6vwokaLejz%2FCXv6%2FL5soX5qNhAuKKNUZqpLxlRwoR1tRM52HfFd703FkEmEWpw9730oEzVTG7By1KymxHNWbx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f5e70b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5747&min_rtt=664&rtt_var=5677&sent=7073&recv=358&lost=128&retrans=136&sent_bytes=8043248&recv_bytes=85030&delivery_rate=1055496&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6264&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5vGe3Hx3ZL4v%2BqJKxSJu4QAGapciSmSKIfIqD%2BHeMhLSy0rKReOPQtI3hVPkKxJG72QSpEIC2bUGogOjLiN53cxR%2FZJpzIVwRhJjHswrAHPmBzRmjHni62KaOUtvCHyHrldn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f6e78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4884&min_rtt=664&rtt_var=4710&sent=7080&recv=361&lost=128&retrans=136&sent_bytes=8047039&recv_bytes=85442&delivery_rate=10667463&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6267&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9a0BegadIjSH7sHlDjhSXLLIxKuMRTuZLEx4jzqAnoOIMSwKhL3sKluVPtpoqGoMqA2eRUNKiaO1vo78kiX3Ez%2BTj2%2FSrGRhY%2B3fuJbt1CyMzUzJE1CE%2BerkN6saRFpMX6D8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f6e7ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4479&min_rtt=664&rtt_var=4342&sent=7084&recv=363&lost=128&retrans=136&sent_bytes=8050325&recv_bytes=86088&delivery_rate=7040&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6270&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KO1q%2BSB4Upe0FlYK6%2F333EG1PK19LwYOeMOM5KieR%2FI95tB5RUw2rqF%2FV3En85wPjF9lb0u%2BMyLMN6sgzVEw%2FJiHG46l9lGmL26muopqCr1LOhqbbxWWXrwAqqTWczoMMog2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f6e88b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3297&min_rtt=664&rtt_var=2925&sent=7106&recv=368&lost=128&retrans=136&sent_bytes=8071045&recv_bytes=86588&delivery_rate=18682&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6275&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 71 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 6
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb991ebe44b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q8YnshQVOJ2KDPPWofnX1F6LoPEM4E0xmktaLxBjr08JKrxZSq%2FfV4ogcedSGGEEOCho1ac1JZVwRjD09mvrRv6rRFUjPyTC1dxVT8FAuO3W5IryztF%2Fsmxs%2BUbCSXu4pkoB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f7e91b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3297&min_rtt=664&rtt_var=2925&sent=7222&recv=368&lost=128&retrans=136&sent_bytes=8209901&recv_bytes=86588&delivery_rate=18682&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6276&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W2RSm1s4fvYrIdJBU95%2FGD96KZtjtVaMGUGEUWwsL7zKEf%2FKFtBBXUZ6bpfpjiB3zzD%2FaBsofkVgTfHEgcmcFl2XrSKC32ZFMvMQrc0loRc%2B1LmrQIxrzE%2FYgZdMTfpFTuwg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991f7e9cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3297&min_rtt=664&rtt_var=2925&sent=7321&recv=368&lost=128&retrans=136&sent_bytes=8327635&recv_bytes=86588&delivery_rate=18682&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6283&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FJTAaikILRD9KSqdq%2BgqN31KtiTdmf828glUm9isOnnRDhmCPljL2xtEhEiMfVrO0Zk%2FVCmxUZFRU5pCXyw86yzbqFSqNi0eQrlWnRhirkyTQiRlgJqQZl8YJgmdNHXn%2BTy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f53b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7248&min_rtt=664&rtt_var=7892&sent=7504&recv=377&lost=128&retrans=137&sent_bytes=8540949&recv_bytes=90294&delivery_rate=1611697&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6368&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K%2BWxDnMbQSriPcq1CR2Z9CY590jU81I995oePMaoSJyoDJwooB4f0Vvj%2F2kyf6ZwcGSGqrFKgZVpGSEQnvMALvRukjQ4nwT7cJ54%2B3tA7B4zUhgI2Ic8wgQV6ufXY7OQ29Cu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f55b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7248&min_rtt=664&rtt_var=7892&sent=7509&recv=377&lost=128&retrans=137&sent_bytes=8546656&recv_bytes=90294&delivery_rate=1611697&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6368&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=99xMfOg9W2a2bj%2B5eowe3YgS0MfOI%2BA7me5PQk327AmkXVwNUM2aXjMm5KfE2jVAfl4ooaOzs1Co%2FmG5D0%2FKAhU7qY%2BVanOHKw34R0dIoL7qHQXEUWv5EpLob4cW80YvOgkf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f58b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7248&min_rtt=664&rtt_var=7892&sent=7515&recv=377&lost=128&retrans=137&sent_bytes=8553449&recv_bytes=90294&delivery_rate=1611697&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6370&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BkiFQnMcK2dzmdGEvBlN4RrYtOGBQC9zL5R7ryedXnUBkAcoWbFMkTiFvc8QHFSmnTH3RWPkLqj71bKKysnyqN64TuU684eta8CZ9RZ0oQQCOMfaM9OX%2BPFS2nm1UFMF60Iw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f5cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7248&min_rtt=664&rtt_var=7892&sent=7515&recv=377&lost=128&retrans=137&sent_bytes=8553449&recv_bytes=90294&delivery_rate=1611697&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6370&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBjaMrAVjIKvLGKsIAFFNHQ19TBJO4EErFYYAUFIwQydslOFSKJDlOsoTcN40nGUa65mmR8JCLVxBqWpLdGuRJzrFfXpbsEXiPr5IUfyQMXhLYy3fiR5XJ8WVO7KNFlN5i4t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f5fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6550&min_rtt=664&rtt_var=7315&sent=7523&recv=378&lost=128&retrans=137&sent_bytes=8562158&recv_bytes=90340&delivery_rate=693612&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6370&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VCq5y8kKWinkJjoNxqAkbJro1RccogxU7PcPY8VtoHDLojwprB3Zgmy0etPGhNLAhy4v9fIay8zMUsbQ9faRDW2SfD6gPB2RAQpWntjt9d5hAHx5DliafmVbCOBg9HPweI%2Fe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f57b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7529&recv=379&lost=128&retrans=137&sent_bytes=8567506&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6371&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mwszk13BNi%2FpY3geHWUNP5SSQgIfrgjeohed40yVawPjkNNdGFvMFv6iVLmu87nqCF%2FLtEx5oGMhnuvlG2B%2Fct0%2FamV3W0i1eP1yhoHWVb80tyRXGawLvBRD17%2F9y6AuAZDW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f61b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7534&recv=379&lost=128&retrans=137&sent_bytes=8572502&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6372&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yyvpHMij1Tkps2uxxsZBVHbf%2Fmes2LYEqmw1sCAqgdsbSxZd2dNPUsX3%2B4sM82JXxf%2B75dkV81pNjz%2FK1j7%2FYGnIP7I2TZLi59XWBVURsIRnnBFmFhlBEKJTmQUKSwGEofgh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f5ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7539&recv=379&lost=128&retrans=137&sent_bytes=8577432&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6372&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HgtSERrviU9xUdzim7aKqM0miLx2JbELlNux6klCycbfaStLR9fbxQQKEpsIspBbGVg2ty9dS9ESFFZuqVno6znVXaXUfZPlyMwKPVbOLr31Z%2F%2FDQDtV%2BYVTuWglvcIz1k06"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f5eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7543&recv=379&lost=128&retrans=137&sent_bytes=8581855&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6372&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UsIHWcW1UCfQuZ9orAMHs0UEGCaoDjco9v92%2F8wCHB8aNCv0MV4maQwqSutwaEOmSv7Eixm0sc%2BMi%2F665XculZ1rjOp5ZnAv3GU%2B69HWKxrMkOVd8%2FZYsTTfBh2kZSGajLXP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f64b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7545&recv=379&lost=128&retrans=137&sent_bytes=8583802&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6373&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wg7dDDS9qeZPqnMJmgOgKLARUwShiE6pLFj8U0BsmNh%2F32e%2BewSN276hWSU3tZ%2BFhBgfkTi7fV8blmfgnDeQL0tNVxhQsNWzLvAm6GEhI%2Fj96WqyBpp0i57gHJwJEgJbUXZy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f5bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7548&recv=379&lost=128&retrans=137&sent_bytes=8586376&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6375&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WrZE4oJbInhojDjaBdrxYixMkDXyNBtZ2ylcEkB%2B1cf6HMjrK%2Fvee2tBqkPodi7MqcGX1SXdr0FzGZbwq5SqfsenyfYhjKYW%2BtDEaEPO%2BTvHnUBH3xCQTeqfE%2Bt4DpA1sXCF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99200f63b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5934&min_rtt=664&rtt_var=6717&sent=7550&recv=379&lost=128&retrans=137&sent_bytes=8588081&recv_bytes=90385&delivery_rate=1514897&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6376&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=72YhLGzYbC3s5K4zuRN%2F9B66uWyXyL6BbIDjk9gA0rp9P4iwrv1PF2a7nbgI6Hj9TY1rjXKMAMmP4IW6cX0PYX4KLh6yoPCaKehxXcaz2uzacqZqDwo9EneP6P%2FRvzI%2FMAbw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99207815b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6498&min_rtt=664&rtt_var=7842&sent=7555&recv=383&lost=128&retrans=137&sent_bytes=8590180&recv_bytes=90856&delivery_rate=1105&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6447&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347130
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337254
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335943
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290718
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 20 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash4229fe4d307f64ef66811f833dec676b db40d09b8eff60e2591a2f48e40821fef681f5ea dd3e6296322a4ba7d2ed4883dbc9392d98a490d9dcdc17115bd626d0b7cf0f61
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xX9KbJ5IARx861%2FljiQtl8%2BRaMRlzQBI2lBsP1cSvBkJtTIhvCCky9l6AB7BejgHNb148LKlIbgX7E%2F67Io40VpdLqIZ%2FQQitbsbiYdK5b80IDaTI%2Bl1gR8zkmjATStf4%2B2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb991eedf2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4183&min_rtt=664&rtt_var=3849&sent=7087&recv=364&lost=128&retrans=136&sent_bytes=8052545&recv_bytes=86133&delivery_rate=465909&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6270&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392183
expires: Sun, 30 Nov 2025 07:42:25 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJOeO3nbo5rU8WpUo%2B95csHG3XOoa%2F93Z%2BIvGAVAnCVQiPydI%2F0nbp%2BtjA0DgzAcqOTYXbnnHPtCFFQMwWUAKNBJBM1NDCrGJbqdRVv4%2Bbz%2BamPLSF%2Bh1VI%2FfZtsXjo4qbuqqr9Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9922480e56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:25 GMT
age: 4151498
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5401
x-timer: S1733816546.650198,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5126
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 24 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 6
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99222ab2b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XpV%2FJGLgg9ZxhptWa%2F%2FLdlsVkBVtTstF%2BDB3mwgPBDchoyT3yT9dgHq2w8d4PG1l3wSTTd459TFoZGMEv4bkNJ6iJ8l2KwhBCsDLsjBOG2U%2BWKBsdJMycolRliY73%2FpMu0gk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9922eb28b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2712&min_rtt=664&rtt_var=1871&sent=7750&recv=407&lost=128&retrans=137&sent_bytes=8796067&recv_bytes=94640&delivery_rate=350078&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6840&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QBNiKB%2FfTwEw0ePncVwoi%2BaPI4MTrYybmAmE6z%2FVIYNHKL2mmbynnfZY1FT6LGB1Spe42ITNRPQmLeMbhdEwvxCSt8%2B%2By0CoE%2BAfmLCckJBK6tnhzQaXVjlYjI4hfG%2BnuT1z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9922fb43b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2712&min_rtt=664&rtt_var=1871&sent=7857&recv=407&lost=128&retrans=137&sent_bytes=8923925&recv_bytes=94640&delivery_rate=350078&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6843&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QQdDfl%2Fan53DFpfhNc%2B%2BYRrL7zWyouXcPsB2lVExDpJ%2BF%2FfJGNCBSyP561CkzB0euisi7DF1qFtARblEdKDgQM3jHb%2BYtghM%2FxO1fmq7YzXu4n1%2FL%2F39QFZ2L4gTyNpr4nBS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9922fb38b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2712&min_rtt=664&rtt_var=1871&sent=7860&recv=407&lost=128&retrans=137&sent_bytes=8927187&recv_bytes=94640&delivery_rate=350078&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6844&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 6
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99224adab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 64 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 6
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb991eee81b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 229 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size229 kB (228705 bytes) Hash2a075feac51623eb9ed99178521af5e7 89b2c0bb22c596504c845c9c17d6335101c7f941 28eb2241dc2b4a155a5e1c4d27b58a33e3c8227126be8c97931b6f7ea9188dd7
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPwz%2B%2Bj%2BV0m1zLk%2FO2%2BAypSayQ%2FGtsni%2FsHreApN42EEK8cAQyE%2Bb41jPtInqjXRgRI4c%2F2fYDsF08wVt7PHZxrJmrJ%2Bg8SkxebDC1yOM6RA8C2CsfHZvwp%2FATSnQOWasxmX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99223a46b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3282&min_rtt=664&rtt_var=3313&sent=7698&recv=396&lost=128&retrans=137&sent_bytes=8746074&recv_bytes=92539&delivery_rate=293546&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6722&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Px5vQW6NzjcaqcCuSfEm%2By%2FemZ6CMJGsKQtw1u3vAY1Hr7M7Cjs9KdUT%2BaxgiRGfr6xDw6CaFQsH61llMbMV%2BDaAw0gwTzhskaxyLwyFADEzu7SYP1R9LcYMh%2F8b%2Fq%2BCQxkd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99233bb5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3267&min_rtt=664&rtt_var=3387&sent=8121&recv=416&lost=128&retrans=137&sent_bytes=9229456&recv_bytes=96688&delivery_rate=2472823&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6894&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 33 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash733760ccdbc6932560186993f026bdf4 e5eec7cf1b719b743383d9c0e2a3adb3eaf43022 4bf2897d66427f05c732e7fefabd8777a0001f0eadad7579f5f88e11185edf9b
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zDqepSTwiwPoTETxDkXMZh1cXW4zwFYuKivcG0u1891q3BN0cR6KguBBIwu5S7MkEV5kXzjxr2JY0kALMsZ4dClomNLguJiv67NNsWtZttfR64szU8DSB4aYDpZz9WFcuLq8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb991ebdafb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3472&min_rtt=664&rtt_var=2986&sent=6932&recv=348&lost=128&retrans=136&sent_bytes=7883930&recv_bytes=82975&delivery_rate=578732&cwnd=256590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6166&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lARL%2FbDf4UIRNFAVPl4iiyvj3e840gENTj%2Fm0VFnMWZQfQmaQ%2B6xSI5tHEUc2wJS0MwyDyhUaaY3JLZQoECV8Abicu4XdCvblETlhwZr26SQU4yDiTS7xUeWd25XEd16KdZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99235bd7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3267&min_rtt=664&rtt_var=3387&sent=8121&recv=416&lost=128&retrans=137&sent_bytes=9229456&recv_bytes=96688&delivery_rate=2472823&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6897&x=1", cfExtPri, cfHdrFlush;dur=60
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q2ZouSvBhWeRGKlpqZxGbgWcAJFQBT%2BrdrBvz3MiRZC8ic93qLc6N8E1Gycc6aVw9DaTz0eiOfZleEhPSbjliS9GkP3s8qFXKxUpm2qz7fpUduDJrRS8Lpla6nLKA1uB0XHO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9923cc83b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8723&min_rtt=664&rtt_var=13451&sent=8276&recv=418&lost=128&retrans=138&sent_bytes=9414363&recv_bytes=97049&delivery_rate=3397539&cwnd=261390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6967&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=doXUMYHGu%2FYFekOJCpHdzQQVraKj9vqDkHGO2nnVFF1zfB1O3fQuDvUW4sUfbzsuFlfo7HwQgVl2eTiKNCFb8Ln01Ep8XgV5C6RseWXmd3%2F9LvrBopJdSCnx2r2B%2BNlSW0a5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99234bc0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3560&min_rtt=664&rtt_var=3734&sent=7883&recv=414&lost=128&retrans=137&sent_bytes=8945291&recv_bytes=96326&delivery_rate=276096&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6888&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AGIqixbLTe%2BfjIPGJcgvESs6u%2Fl%2B1wPOhRwBTn%2FFzwmktP7pu3pgrsUMC2LoypECM4FEE6FmJ64gmj23JcuYoikkWt8RpFHjdHjYuJ%2F1UWA2FFyIiyu0%2FGvjRDuXyQG%2BsXen"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240cf7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8310&recv=421&lost=155&retrans=165&sent_bytes=9451823&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7011&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxpptkNWtBYUQRzSTQSB2GGmGBmkdnqb4iggAVnHFNyIa4ORC%2BGwL%2Bi%2BTIiSnraIIBvAXs3tD3%2F6HLUN4oKKKWLjJZ24DoB8e6naTG2O4piDZo4PPmhFZQPCVhU6C9n1gDuV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240cfab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8318&recv=421&lost=155&retrans=165&sent_bytes=9460538&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7012&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2lowGUT08ArVRQlUixJ%2F3n2LUIfXemN7wTqTPSwwKtHo4lA5cAguf3dnPIBAdnQyMG2eswXbNlF5FNiGavRJ5BeytT3yrJHrCK8lXcSUKJim3iZcLewvDmZi1ZQIGDJAeJ3H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240cfbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8322&recv=421&lost=155&retrans=165&sent_bytes=9464961&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7012&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gw2BIgf550%2BPvwM1xQ6i5KICIsLMajqALaiIinyOVpnfo3sg0kRe6cC8M3b2%2BzXFCNBzAZBsXrhR0kW%2F5WFhhFJkjf7jV%2BGg%2BSr4EQ7Vc%2F8kxlzpErF6A37ZMLM2FySrkqIC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240cfcb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8324&recv=421&lost=155&retrans=165&sent_bytes=9466661&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7012&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 19 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f65bf79eeebd6d4f650cb7de7c8000 796883446c1704af309188e794003727ed284e75 125f20b39939fb8f3d742f885d593901797efe42161ea8f0f8c9cc8f23c69622
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:23 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F6Z5vHnSZtC%2F5oyWZblLoUq4BLbcmCUpdksFXKJ7K5xSDJiLPkwgOR%2FCNUL0t7n%2FK8Gic8C1eQxKbi9SAuESCJIf9ojEM9rOGH2tmWt%2BtAMMZWv91XCjHcBQJJQkLXRBaseH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9912dc90b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5700&min_rtt=734&rtt_var=6802&sent=4664&recv=233&lost=111&retrans=116&sent_bytes=5317452&recv_bytes=56119&delivery_rate=1108&cwnd=244590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=4340&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JsFVREZTsA%2FtXOdtMI0pzE6%2BlM6xW%2BNlaJvnBDRvzxxmp5uaLztP%2Fy%2B1VcRwWadIKRctzH4HorXY3g3xH3%2B3CbDBSFEj4nv%2FZQWBST%2F7tzWNu39wdsNKPiNjeWWMRzA4HPir"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240cfdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8329&recv=421&lost=155&retrans=165&sent_bytes=9471479&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7014&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p7Pf5w7S1drqxDqDg22tF3%2FXrJSwADQBRKxjGq%2BkLYOJioB68gqklo1Bb6luANAmtHElnYwUu5H2i7HEYYNpfCoz03S26uG0IZFUKY%2BMk005CRht6PJmjgyEBZJvzigNfYEz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240cffb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8331&recv=421&lost=155&retrans=165&sent_bytes=9473435&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7014&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1Ld8xAalRnPCKd3rqp8Nd47KzN9L5BXyjNW39YQFqEhMtPyvyJiE9aS00eKBT0v6RBRWJnaH3q72SQmmjU71%2BQ8q1RD2OdwDFMOXeRNvOhjNTI%2BMJuIRo9EkVWpRRnx4IjJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240d00b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8334&recv=421&lost=155&retrans=165&sent_bytes=9475998&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7014&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BJHH6aNrf6JklbkagqkqSKqoniRLZ656REwX%2B2JiMebV14H0YS1LwBiU%2FBZsJmv%2F%2FfTEug7ZQ3sXtCXWMiW%2Fu6IAHV3tPjiGw2wE668Y30qCfy%2FPyb0Dh2MXP2s5FqBN97Nw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99240d04b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10433&min_rtt=664&rtt_var=13509&sent=8339&recv=421&lost=155&retrans=165&sent_bytes=9480929&recv_bytes=99671&delivery_rate=2744432&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7015&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mL75ynXelv5aGBC%2FchGlDYcxgxTqvQfkpwtqT5vGfIcJau8Mb0iuK4riC3CJGckgKh5fiK3%2Fd39UytcfiF1h0rsl3Hl5o%2Bbt0tJ7yEGQlYpKXNYMMuoDJ0kTwY%2F7%2FyC%2Bvby4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99246d53b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10550&min_rtt=664&rtt_var=10663&sent=8346&recv=425&lost=155&retrans=165&sent_bytes=9483615&recv_bytes=101459&delivery_rate=833796&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7065&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347130
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337254
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335943
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290719
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/62896 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash9e8980da807d66e83a610de4ce2a4f55 5089d03a52743a36b1ecb58f4187a9d9c49a41c3 ba4886d939353f55abfd30312e321438bad7e8c8f6015720f91bacd27fc6a23a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /62896 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:26 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392184
expires: Sun, 30 Nov 2025 07:42:26 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vlXKF3CMLY%2B8xPdOIsN1HtQItClItfjMWM6ks8Arb6eHiLoBbLVQPdV%2FvzHgvD1oBF4MvIGNq8zFI4JqLipEWZA%2BeF22F%2BUyEXo69zHrY5DhywFX35e6BoCeuQrBI%2F0r4a92ErDj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9925ec2b56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:26 GMT
age: 4151498
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5402
x-timer: S1733816546.240948,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8gzaVvL0ipd8lZiqY55deMOjLnuYhpGKEEpVyjhZluJT%2FrySzERp9UGaSPkpDMR8kh3iN08nNmkGNhBwOZW6OuuThxveVbCzKPLS7ol9MLVq4NwrzjSD8Et011cUAIe0SIC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992688acb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4913&min_rtt=664&rtt_var=4594&sent=8532&recv=442&lost=155&retrans=165&sent_bytes=9687268&recv_bytes=104115&delivery_rate=322173&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7412&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bUohIkIxfLhdfX3xwkBKCnJD4Gy7xahBimhYFqF0asj9nfIwn9wH7WB2TRYGd%2F8825snbE0z2EcnuSC8MGW78izB9VNNBZrsjSqgkJTXHxtYXXDhXFjpu86s3u1thcZNxUGs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992688aab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5211&min_rtt=664&rtt_var=4041&sent=8534&recv=444&lost=155&retrans=165&sent_bytes=9689191&recv_bytes=104476&delivery_rate=372206&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7413&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yx%2FkN0K7zBqF60o38pgWam4HZL1Z83D0yM2e2pldKt7HsZd2R0%2F4gaRBTfwZCr9ou2x10WymtOw1934L3SprHK3%2F2Amvjpep2ZMZBd7kLYfUTxpCclFHCDlxYkWKQUixARkk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9925ef7ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6439&min_rtt=664&rtt_var=5734&sent=8488&recv=436&lost=155&retrans=165&sent_bytes=9639481&recv_bytes=103051&delivery_rate=124308&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7309&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bBM0%2BZIBW7xLK%2FBEm91Cv4C%2F5Z9eb6dJBLZ8nIG59c1yKj77d92hkhpioT2vj2fFXGYEJiZX78iHn19afO8XssCe73mjSb3Xo3YonApdmTiw%2Fj2VVblawa9nIy4%2FdJ6qFAMi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992698cfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4813&min_rtt=664&rtt_var=3827&sent=8645&recv=446&lost=155&retrans=165&sent_bytes=9820777&recv_bytes=104836&delivery_rate=600008&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7424&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tPRjWqTc7yHnxdpduxls0TiUu92cmpoGEzo3Rdppv2XvTzKoe6tOwyyZWvEYNCUfp%2BHZ3QY1KLS2W%2Fo1z7GQW22YqmrThG4JuipTHyLHD63VYy8%2FyFfwLyJSYxRG5545yfoc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9926b8feb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4397&min_rtt=664&rtt_var=2215&sent=8807&recv=454&lost=155&retrans=165&sent_bytes=10007170&recv_bytes=106292&delivery_rate=8055&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7446&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 220 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size220 kB (220174 bytes) Hash7dc6bffc58243ef3b79b3d9324020289 e80b5f6a3b640df86060cc995df5d653b96901f1 8a8fe22e3e567d88589fe9b593f0b314c9b45b94e5aa1fd7f7bd259fda7b12f2
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0p%2B9FyNyCodQlAA1lq%2B1fja30LEQI205p8fxz8GkruReKTIkTmSsfJnqclN5GJtw9qWVDe%2BhbmYI1TxoCuS7C5%2Bn8ZR%2Bwoieake3oSnrTCNiKv%2FkSW5JXtJ2vVXskeiydqh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9925df64b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7205&min_rtt=664&rtt_var=5603&sent=8484&recv=435&lost=155&retrans=165&sent_bytes=9636542&recv_bytes=103006&delivery_rate=1172982&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7305&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szYzL4FYBTyvGM8GTXWYW%2FbcRDgr93tFBaSOMusNDgSXSZpLjITncUzC3r3WlGugGYIy4Q62eyNVNCES8wCfq2Igg5gXygn3gBAzPwx0UWiFd3mi1A1um9qwmIr62UlvONqy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9926b904b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4550&min_rtt=664&rtt_var=1968&sent=8943&recv=456&lost=155&retrans=165&sent_bytes=10169705&recv_bytes=106657&delivery_rate=12823428&cwnd=264990&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7456&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 122 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size122 kB (122243 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FmaOAqXzHrbdvKrgUgAmlQ3wQMvKTKdbsTxGlrKJl6EuNA9mQ00YgGH8RyjvQz%2F3%2BL61JqUZYTd07ynJmggGW%2FiwEFze0XEbmD0sg2GJ1rRzkw8a74WfAf2d9wQPP68VfKNa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99250e3ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8871&min_rtt=664&rtt_var=8890&sent=8450&recv=428&lost=155&retrans=165&sent_bytes=9605338&recv_bytes=101858&delivery_rate=1057&cwnd=182973&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7172&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BogfJMrAiZWVsy0jJnc5a9ceGqR5K6MaG78JQkU%2BitfIIt2I26qlp4XMy6umrgaEAJm0%2B3FMPjF6r55IFjq6DYRtmgErzWJ1j%2FgwFpBhy2XcWkyQMvCkZUZY8CfBPBBSfkzY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9926b8f5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4550&min_rtt=664&rtt_var=1968&sent=9029&recv=456&lost=155&retrans=165&sent_bytes=10272160&recv_bytes=106657&delivery_rate=12823428&cwnd=264990&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7463&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=imZARHq5bx098W1OySxGq%2BecymvuDS0D60M4Xz2CPoM7xqtadwLL7ocSu0Li0IA6PIr9di3YfYBqBdxic5e0k9LiAJF3pgt5zuDGARaPuYz6xdxaqKO%2BdxzHqSCa46kWMPk6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769d3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9570&min_rtt=664&rtt_var=9662&sent=9051&recv=462&lost=155&retrans=166&sent_bytes=10295035&recv_bytes=110239&delivery_rate=2562287&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7551&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=050BOD28luCIjtBgfq7omRZYs5%2BaagdwJMcA6kavCUfCW5L0ZKWp0yucr4rNi1gVKbGQuDA9sz197oWKyylXdMy8LmY1qgDgAwe79rSV8WltDKn0hBnF7jJMTSMJbuQ7c%2F7U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769e1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9570&min_rtt=664&rtt_var=9662&sent=9056&recv=462&lost=155&retrans=166&sent_bytes=10300738&recv_bytes=110239&delivery_rate=2562287&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7553&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y4cVSvYGW1EJtBHfvSFKBOtmveJn4xTr1SCzYEos%2FyHD5SZHccg1aCHXY7OjTHnOHJcUprm8si%2FOp0%2BY%2FjiM4kTflnJnsPgUSVQIUV6ZFhr90dmQasaO9she7YyRObIdD1gb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769d6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9570&min_rtt=664&rtt_var=9662&sent=9059&recv=462&lost=155&retrans=166&sent_bytes=10303521&recv_bytes=110239&delivery_rate=2562287&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7554&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IfVUXLsGagkCa85%2BiMUsku55wxizXypFRrmqn8mg45iQIUstaaJG6xgidHO9IHXcF%2FUcay9gWm0nAs6F%2BRpDwvlYCRdAKfZxBo4GMECqKGkkY3VzJDlHuobQc3GhgK48plwN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769e5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8618&min_rtt=664&rtt_var=9150&sent=9066&recv=463&lost=155&retrans=166&sent_bytes=10310341&recv_bytes=110285&delivery_rate=470041&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7555&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c2Jp3U7w5iyM7MWO3c3aktyJc0VOqMZzISrk9SwtXOoXIB4mv4mQfG05FiRxpMvg256iBK9OH5IFj6L9lSR4546fQouqS5LabgB%2FprKwC4voqfCNj%2FXbvA4uHFx%2BxKw%2BTYAA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769ebb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7669&min_rtt=664&rtt_var=8760&sent=9070&recv=464&lost=155&retrans=166&sent_bytes=10312928&recv_bytes=110330&delivery_rate=698415&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7556&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i78wrXsEQz4r89ETMw1glfjs20lhQqUM73vrnVnhVeP4iopvvO48onOUoS6cyhEmCA4K%2FQ%2F%2BHjLOIWrNiiwDgHm6K1ZbLPnJlaFJ3ZAQ0S7QgsymZATDzuagIY4kLWGxF%2F9n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769dbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7669&min_rtt=664&rtt_var=8760&sent=9073&recv=464&lost=155&retrans=166&sent_bytes=10315501&recv_bytes=110330&delivery_rate=698415&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7556&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DGN8JXnuV1mQ%2FsFITSrmCRToaStWfhkxpxNaIUahobEpz7EDZu%2BkE7EWMMOWoS0%2Fmbd2qByzlq0sU6yUekDmyFTP%2Ftawc5BL9TXxRxzefaYK5OiGPjg0sTpx1J8SMYKWH1Eh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769ddb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7669&min_rtt=664&rtt_var=8760&sent=9081&recv=464&lost=155&retrans=166&sent_bytes=10324211&recv_bytes=110330&delivery_rate=698415&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7557&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2BmGSN%2B%2BvkaLvZ5O1D3wW6kpS%2Be4jxMe2MrrD8DoBYvw5v8Ad2s1fMaWAGhi5nyCtdMNI0N4dkekoApymyHeSyR1hNmz9FzQhq9WMI3YgmdQBSim%2FZZvp%2BDPJD4DcXBhxdUg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769d8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7669&min_rtt=664&rtt_var=8760&sent=9085&recv=464&lost=155&retrans=166&sent_bytes=10328633&recv_bytes=110330&delivery_rate=698415&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7557&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dL4gDSeM9I%2FA6fQFPSBA0wvcaPdorfUOO8XBYDrsR44mUfWKrkOaWl%2BrEsyrkwBpA25%2FfLzOaEhM68ng7xuqpXbCOyXPQJtCz%2FmizydWv1xKN7kteqQIPREQ7yELPTdduBCF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769e7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7669&min_rtt=664&rtt_var=8760&sent=9081&recv=464&lost=155&retrans=166&sent_bytes=10324211&recv_bytes=110330&delivery_rate=698415&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7557&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u0XPJOuEo6vzTLD5DALjAuJM9jnj2yrg8q1mgOmJJuFRPryK1ZVZ1FVNo185lYepC2uyjWP%2F7vVNejNO%2FXOTKBR0LtRyy3PJZnZMWy9G1teVHX5ntjwqVFZZSa34rBN3K4aJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769e9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7669&min_rtt=664&rtt_var=8760&sent=9073&recv=464&lost=155&retrans=166&sent_bytes=10315501&recv_bytes=110330&delivery_rate=698415&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7556&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nlgY5OisMKIb9wioH5nryD%2BPL18g5V1BqGsnmt8Xn70e3v4THW%2BVHDwH2a1%2BlTSqkossyV%2FjKR9bRqvIqtW3m9WTcojoRdTjATMyAZscn6CasEsgr1aSuMAISMLQMQlt4BZd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769e0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6900&min_rtt=664&rtt_var=8108&sent=9098&recv=465&lost=155&retrans=166&sent_bytes=10340615&recv_bytes=110376&delivery_rate=727322&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7567&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PFXkUQReU3K62%2FS%2FdV2d2S5C%2BOO3X8padgpejpN8ol1VqwE8rsBYOvVW8TKkSozfEXOfjQfftw87bbKOSFTBZVDSSrIx2FOW2Uf8ctl0tR1mu1mYki%2BxGJvR%2B6e5TSFTusSU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992769e3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6900&min_rtt=664&rtt_var=8108&sent=9100&recv=465&lost=155&retrans=166&sent_bytes=10342317&recv_bytes=110376&delivery_rate=727322&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7567&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6Gc9jI8%2BBROp7ICR9hgui8xFcmhfcC4zxXsAV33mI7YE4D1uy%2BQ9fQHtx2i0bHoh%2Fl0EEbk01nbeCaIOv4Xjt7%2BPM1Y4ak%2F%2BZbhetJTibDhTp5bnPrm2iHDzALJ%2FVgFsXEK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9927ca62b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5504&min_rtt=664&rtt_var=5486&sent=9105&recv=469&lost=155&retrans=166&sent_bytes=10344345&recv_bytes=110847&delivery_rate=1112&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7611&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347131
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293522
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337255
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218520
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335944
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290719
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/82532 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash816e08791e63f685f54531021c13a1b2 cd19774a0055327d43e663268f146fdddea4cdda 7fb721b4d4b5907dcbeec71f947a467ac0ea5308db4dc7d6e3281cb8d92ff7be
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /82532 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:26 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 21 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 7
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9925f813b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 74 kB |
IP 188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12693), with CRLF, LF line terminators Hashab2bf32b286bc84a34c0bd371d150e80 e00048b6e963412934b1f50e29f4dc0f34389c20 25f6d90b0d5cb36893507c7f495420a7088ee96af46a7f5328d463c7f35b61b4
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:25 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CmJmrzmHD7piofJRGzM8G149l8Ir4yg%2Bm%2BNF12AgT7tvd7wJLKkhsXGoVmDxqefn5BEN%2BpeOUypddDgrNz3iEBCiwwHI7azkctyGvLZ7lNZpntqpOMs%2BmFxeCr0u2cKme5hJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99219977b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4521&min_rtt=664&rtt_var=5251&sent=7667&recv=390&lost=128&retrans=137&sent_bytes=8716858&recv_bytes=91736&delivery_rate=1104&cwnd=260190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=6655&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 152 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size152 kB (151911 bytes) Hashbf590b5aee97069b687475ab989c30e4 13b7baffca4fcdf99e0df1eed7c0eb4d7a22bb0c 0969e5b910e858decbda82253172b4bb125053feade6acdd29ad3ddbeb71a9ca
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qt8eSaAble31AtkntJDVVYAGK1hHyj3FRJ6VhLBgfHA7QQ9tW84nKhl7kBLQE1PgKSDIOBPS40akt08WTxg9XU64uUPrNPte0XDPz8gxx%2FPKWVSs4buirvOd12wtsT7di6xl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9929acf8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3111&min_rtt=664&rtt_var=2617&sent=9246&recv=481&lost=155&retrans=166&sent_bytes=10500181&recv_bytes=112487&delivery_rate=636667&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7908&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 1.9 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash0b3fdf82badbe8344c4df65f57db8572 8c570ff9cd9538e4f5072e4ba109ad3fbd1b2a4f 4c53a1fe7e5baffbf7d817cc75d1f4356d0f5d5bddc61f091ace616b79a9aa7d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:26 GMT
date: Tue, 10 Dec 2024 07:42:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Br8UAI9lHR5Nra%2BScFFwuxO9iWDePDkj7dP1l8nmDjwagg078OWb9wGN78XNRqP7JBhqzY1zRzEtaHVE6bLXKFozJ7O0R7tfI6NLsK7WRKhW7740mbU6sdSMFQYBF%2FyHWtt3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992a8e7eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4265&min_rtt=664&rtt_var=2518&sent=9405&recv=493&lost=155&retrans=166&sent_bytes=10677912&recv_bytes=114635&delivery_rate=1864&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8054&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eSr8lBy11%2BPUtrJdkGmHLwMWEm4GJKof4kGv%2FOSQ%2FhZj22xvnTKm%2F8oZ7B2u9Wl%2Fff%2FrdSHK%2BraI4ANSVdMngEiSznLqnwgDgGKZuDAHaB0repENN%2FWV9GDJ%2F03jpEstYW85"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992a9e7fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4111&min_rtt=664&rtt_var=2196&sent=9412&recv=496&lost=155&retrans=166&sent_bytes=10681704&recv_bytes=115320&delivery_rate=420110&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8060&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5qRgAw3f2uwNi6i50VBqBruNfUbzg%2F8QWc6vjCJ8NEob0p%2BWM3uv%2BKv%2FvFTNdzOZUReqSiasqxfb%2BLeS7A9WjSCEyFMO2NQJBgEZgC%2BebsTwsG%2Bm4a914GFScqY8Myg7BB21"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992a9e84b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4111&min_rtt=664&rtt_var=2196&sent=9416&recv=497&lost=155&retrans=166&sent_bytes=10684996&recv_bytes=115640&delivery_rate=420110&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8062&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O2vzsWw8RX7anJOoc7CGkQBp7qN114vVvRvKGfC4wQ%2FqJMd0L8GfBdZpPcq684M6zbMLNISEm3xS19m%2Fd25R4AmhFQCaFSaehvtEIy7AJhiQ%2BSY9lI3qcan5Sbt6%2BGnsO3hz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992a9e8cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3984&min_rtt=664&rtt_var=1902&sent=9420&recv=499&lost=155&retrans=166&sent_bytes=10687249&recv_bytes=116005&delivery_rate=494644&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8065&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 63 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 7
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9929ac77b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ILm2l9gE8YyjGKjDLnDy2MqNaZQotmff7iqBMU8S%2BT9tF2WUSxoWquT9J1x4i43M9ti%2FprUyJFx3ZQXxUF4g%2Bxh5PECw3HqpseP9iaaGPx891fTMdj5nOKpyOTq6aMVE8k1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992aae93b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=664&rtt_var=1643&sent=9536&recv=500&lost=155&retrans=166&sent_bytes=10826107&recv_bytes=116051&delivery_rate=825560&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8068&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LrEv0qQQdu6hLqj7SHLRK1WPNCO726ZYOXBwFh7wfEkb8GnLRaxzhix6kz23bqdL4%2B5XTms8UQBKywR9lOMDK5hXBK53LGL6f0mYl6t5jAS8UQCCTcFkl8KLC7YHSqNPQXYe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992aae9ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3875&min_rtt=664&rtt_var=1643&sent=9643&recv=500&lost=155&retrans=166&sent_bytes=10953414&recv_bytes=116051&delivery_rate=825560&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8072&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JHswMWaRc2O57uDghCaHfYx9TUim1dEdkbgpZ4EuVHW6q6aX%2B5fVRjBd5aH8uTZ374BnrvTZ38i0rDrfAMwUf0p8D08kulKoiuZJdOA1vAIUrA65yk50chVCDW3PkiEjIwVL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992aceb7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4466&min_rtt=664&rtt_var=2064&sent=9814&recv=503&lost=155&retrans=166&sent_bytes=11155853&recv_bytes=116737&delivery_rate=30810094&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8086&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 50 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qtYJdgAQKc6YmgnthHfoe7jRdo70qQGQ6GJqh%2FvyqJjQbbxTdPHLGXIvFMLJQgetlCWhnzw2wvCohIs3%2FsWDu9Ddj0mnd0a1yMQaVFp8sLdt1krvClSRTOik7ceTmkwEqQT8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99289b93b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4807&min_rtt=664&rtt_var=4241&sent=9209&recv=472&lost=155&retrans=166&sent_bytes=10466066&recv_bytes=111246&delivery_rate=1074&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7743&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vA1gXyvUbXUsqblvr5U6yjJghMYqKSoBupRV33NouNtwXKI3kTNdCi6mEQARZ0y6zNkR5AFezsJYi04GsHxqmCGXdNBhLzZLgeZ9L1fyaqz99RTKBiGuO3tNSk%2FyU89bI2po"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b4fcfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11393&min_rtt=664&rtt_var=15402&sent=9829&recv=506&lost=155&retrans=167&sent_bytes=11169638&recv_bytes=117692&delivery_rate=2482480&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8170&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m8z3tevJ4bEV8giugywyWdtaj5%2Fly4V3bnAJULj34IcwYdI0y60Y8GOQUOMxMhAaVdvCel4SSBSPjfl%2B1q8hseR5ZOm4xtm7GM7W0xLeBSAICtgledYZp8qQtM2LmC0jCUmG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b4fd4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11393&min_rtt=664&rtt_var=15402&sent=9837&recv=506&lost=155&retrans=167&sent_bytes=11178346&recv_bytes=117692&delivery_rate=2482480&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8170&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fdI5Ab1eYuzgM9yjCBXBHtukvKGC7VzRWdnEz%2Bnx1r1AbGbYeph6sL47Afm221p4nF7sO5BmEsD8kC1BrI9JEcB0aF7zQMJo79OqrWpI6JUALJAmbWINMhNfTgXE9%2B%2ByIv%2F7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b4fcbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9358&min_rtt=664&rtt_var=12126&sent=9843&recv=510&lost=155&retrans=167&sent_bytes=11182821&recv_bytes=119803&delivery_rate=1003538&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8177&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0vV1Y6bQm%2BS1J8wcOM3rv7f8PB8SPLM98PUpC0xTt72dXCD5pT64EAz9czO7jimdlTU9g9%2FH0W3WrpEw6TohiVaB0fZ8XzghBF2SKPt06PmRrShEsC%2FUou6FgV83c0o0b%2FpH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b5ff6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8404&min_rtt=664&rtt_var=11003&sent=9849&recv=511&lost=155&retrans=167&sent_bytes=11187849&recv_bytes=119849&delivery_rate=1803543&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8183&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 26 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash075b5d4d7d500d7ddaea01337fea1d7b 160885f49125df4e6a909e72109460e9b9e25205 c94b49a190c4082613926fff5fdfef0b18a8a71a256168a9083e3301bcc7a495
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w7f0%2FyVqtRFnvnh4n6usudtOQqQJiI6KRBjuQzzvfqxh8HSpHnNr7m560qxHWqckOB8vapOudoZFHhinfInuE1FIqVLxLQlAGkLey%2FOHqPmIELkzkDQuAKmo1sqzBYLoh0d2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99290c31b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3959&min_rtt=664&rtt_var=3858&sent=9216&recv=475&lost=155&retrans=166&sent_bytes=10470994&recv_bytes=111684&delivery_rate=1181&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7842&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 3.9 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash4801d03078fc757594d54e28b2edb2c7 1fcf488959cd5cfd2d9f8fdecfe83a19bb7b389b 755466bc2c5d77b445a48dba6d536ba127e73bc1e0c08ba6e3be341324237fcc
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:26 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LK2EQE13UgFcd09l2QuhglGJ%2BjLunJWMu1AEb8yXFAsM5amT%2FFSG85M1lWuGtvzX5sUFowWehfEWx%2BJnYidC9vEL58tEQbid%2FN%2BDFMtPZfUEF8%2FK31mF%2BEbD756hsUUpvtIp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99299ce8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3375&min_rtt=664&rtt_var=2785&sent=9242&recv=480&lost=155&retrans=166&sent_bytes=10497242&recv_bytes=112441&delivery_rate=1174&cwnd=266190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=7903&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pJazj9FjQAACnRi%2BWvdtyNBZOzTCjw2lANXbhOymwrbs7HBGE3LyFSCet8302Tzry4JGPXsCTJwIi2Hq5qO84bd7IQ33nYcpT8NuzHTA%2Fh1hVt9HdN%2Bwx%2FSZYUS2bwZpm7vL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b5805b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7472&min_rtt=664&rtt_var=10117&sent=9857&recv=512&lost=155&retrans=167&sent_bytes=11194100&recv_bytes=119894&delivery_rate=357303&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8186&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S91RC%2FWd8%2F04%2FWZuWjQPUrXqMYCidNCFU3MKV9Ow80t71ofjE2hhRG1fvVatd4gQM7%2BKxgmx4rmggpbZjjRsH2oJnjmYgnVoe6%2FLKigoJ1nRYNnc0Qlv6hzkRafybZzbfh54"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b5801b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7472&min_rtt=664&rtt_var=10117&sent=9860&recv=512&lost=155&retrans=167&sent_bytes=11196675&recv_bytes=119894&delivery_rate=357303&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8187&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKTi%2BVRpDf5BiwNAYnChac4RwRZ9po4uPk3ALFRXdHDln0WYdUK%2BpbrIHr4TEB7QXaUrw3RDOoN%2FO1PWtNYjUYPlfb1yWJ%2BHejP32MxSUvIMNIKjx4zetnEP5kbs7Tb4LgyS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b5ffab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=519&rtt_var=6657&sent=9867&recv=516&lost=155&retrans=167&sent_bytes=11201660&recv_bytes=120076&delivery_rate=26781&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8191&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NrpNgBr%2Buu6lIKrR1yf5cCCPABGgI73ef53FhIJsaFjYBcDlpO0b1sVJvjwh7oyyWj%2FwHKQnEDVAToU5x2qGC79mBKtoeBg2r8aw8ioCl5FHjxrLZBsFrmlTZhSvbpV5Hy17"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992b5803b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4390&min_rtt=519&rtt_var=5994&sent=9871&recv=517&lost=155&retrans=167&sent_bytes=11204472&recv_bytes=120121&delivery_rate=2031187&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8193&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFKAmwGgZjKZgTRF4hoXK4F3wGe%2Brz5nQYSl0ExLQQppTa0yIUcbLQ7nMBcW%2BBY6S1UrUW1vGJ7pFj%2FdMEVTP6hWnz%2FiiyOAW5CU4mgXhKM3Ivypv4jF3XRAFJJOe4V8fhhj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992bf8f5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3986&min_rtt=519&rtt_var=4000&sent=9875&recv=520&lost=155&retrans=167&sent_bytes=11206541&recv_bytes=120545&delivery_rate=1055&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8285&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347132
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293523
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337256
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335945
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290720
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/16727 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash1f1b39e214f8eba7a8fe12a730a272f1 6a2f61f3dd119335623738631d29143ac136fc8e d870cf926d4a9dd30b02effeac5582ba9d2f7d124e67b2e71657a4cc1cc69cdd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /16727 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:27 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392185
expires: Sun, 30 Nov 2025 07:42:27 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SlRhOqFqIkx71blpYkSxpLXGtKPkTUd6aOceeC9Uu%2FAsvrTIgUyMVFzj5O9HyZe9q28atV1kA1aEukvZ1uoyPefMx5LmJYrTgj41s7cGoaXHXEvb5dTSENJF%2F2X%2B%2FPXvbBvpmzmh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb992dedca56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5128
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:27 GMT
age: 4151500
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5404
x-timer: S1733816548.524940,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n98sYTD5h9mejuX2LH%2B%2FV7z%2FYFZxe%2FS2hFpmnlyQE2qPZ%2FNks7d5IKDkvwureddQmCrUE0nmIQSDX61iSGjE%2BBM4ijo%2FUZk1XwsJZ%2BYpRVHdtn1Q9MmhewwK3sAtA4nw5fKp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992e8cb1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2485&min_rtt=519&rtt_var=1149&sent=10058&recv=541&lost=155&retrans=167&sent_bytes=11402320&recv_bytes=123921&delivery_rate=339306&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8696&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FamR5wVU5vtfLjv%2Bv6FuFHquAUuvP%2FrNAZKfKMIYxN2MLkFakVGUuxwS1Qx110RX%2FhpDfkFR125MLalBjor0ba3yKQKxdS1naIdztA7juc6WpjMxuKVQW3OvtyfzDJPwlrHC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992e9cb6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2485&min_rtt=519&rtt_var=1149&sent=10068&recv=541&lost=155&retrans=167&sent_bytes=11414320&recv_bytes=123921&delivery_rate=339306&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8696&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 8
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb992dea32b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 28 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashdf3d9fc30fda315529ab613211b1b35c 075b14feab3a448f05d60ababfe14eed833f5bd3 ca262e535d122d465f7b655c7f6018c662c364009becd1514239a68caccde94d
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJJ1PxxnwM8imifQeiv3riRHJ8vNoNP93uKwaAtlxq5aIraCFf4ys3nBdpHrZ1fj%2BHsbZy1LrJi9MUgVhuTGcGbcst84LyYs562RG8fe2bUD8qaFRv201SRsDgHkNZZYAXMy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb992cfa79b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3281&min_rtt=519&rtt_var=2546&sent=9983&recv=527&lost=155&retrans=167&sent_bytes=11328374&recv_bytes=121425&delivery_rate=1204&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8476&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=seU%2FWPaTnQaxCeXPoXKvEWDOrtG9RabxHfdWvwNb%2FCzqyWzGg%2Bz1EfCe69mZvhT9xO1bxi%2F1pKiu1z9nr%2FPvVU3%2Bxc2NJZtPvxzE2aUz67wdE8qt9qjgULF8BEt16UV4jLHg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992eacd1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2485&min_rtt=519&rtt_var=1149&sent=10177&recv=542&lost=155&retrans=167&sent_bytes=11542280&recv_bytes=124235&delivery_rate=339306&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8706&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 76 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashe127bdd31b6c73f1edf6a29458bac9c0 941384e0a81998307755294d0cddf6392bd50f89 37b93f8b8e19d97ae5b0a24bfb86abefa5c6cf5d1aa39060c386f9f215f37fd2
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1fd89iIGREW6Ok6l%2ByLa5BzG4Z8%2Fj6fVikHCNNT5xnO8uzS%2BVC4%2FBeYAQJU2AslpRkQ9u6da6I7yvdCyOw3V%2FYii5WJapCCJLga0vHKxmCYPDkwbd7qS2M0DXXwb7u005h%2BZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992debaeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2811&min_rtt=519&rtt_var=1726&sent=10014&recv=533&lost=155&retrans=167&sent_bytes=11357581&recv_bytes=122226&delivery_rate=243018&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8596&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eY0VnDXyrjUANaYQogHYEL22orT1QTGy3NNLBXNJ9aj5AX7wWwsAJDGWSUEciSlf8AVuILVtqGiVj5lfsgqoL25dxU%2BbrZ1Pew%2BO6cjFcj0p27%2BVlmk4EijtywpG0%2FPOGZ1v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd0eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10195&recv=551&lost=155&retrans=167&sent_bytes=11556639&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8738&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CVvL0mU8XKx1WP6aF5tBmt3wDKpeNcRQXVCBoC6eQybYNvwPrAw1rzU12ZQ%2F0jdi6iiqv12o7ENgpsk0DevSZPauWjMNUCrqlwTxkk9kWaFquyLJzbdv0pY1aLXBdIp424Cz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd11b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10343&recv=551&lost=155&retrans=167&sent_bytes=11733810&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8740&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SmFZCZ9FIW4C2HGEd%2FHDNaenep90Fgywl%2FQDrkAp1LOgxVhtnb6jJEgIDfIp3rozs1E19TFrKN%2FkqGYM%2BxO1%2B6eyp0hTHuoHoNzi0Bgg%2FZpjb82ULx%2FucbC7Ae8SPe6fruKP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd16b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10353&recv=551&lost=155&retrans=167&sent_bytes=11745810&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8741&x=1", cfExtPri, cfHdrFlush;dur=80
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eF2EoFShR8y0D%2Bit7jrp5NjjumjRZyGBKKkVVC3CcNnebPvqIdZq%2BE0Q6TPCCi1bDieqWxelEU22X4MiqVwtiNkr3vMOI7lxg6P%2BaP5dZVSwOZaQIbQregOs%2BBJ2eiY2%2Fmzc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd18b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8745&x=1", cfExtPri, cfHdrFlush;dur=76
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QbKcfLuuQN4rliG7F5TEe3jZhBKVl%2F%2FaOcbH2o5tWsMnRvrFwotkC0nlHYTxgzA%2FNBl%2FSCmq2SudykZBnTbdVj1q1wljoAleWN9ULOv15NlVKS%2FipANOCXLg%2F8VeHY3wF6Vw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd1ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8741&x=1", cfExtPri, cfHdrFlush;dur=80
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AvpHmD60nwxJx79umNjrEos00Yi8WIWZFm6b7bw6%2F9KVST8dpCG9KkmoYnp802JQqDdF48eP5wIWWn%2FJIWiHGIIJ4wW5NeJyoYfu%2FqKeDKdK24lzqDJ2eJKs7T1lvIdvKNze"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd1bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8743&x=1", cfExtPri, cfHdrFlush;dur=78
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5JzBtH6tL5F0OPf8VsOZWjE0ZA0WSXcW8eBnATpMCz0RxBajjj%2B%2Fdz4J0dSPzIVwLbIYn0P6gMCkbMcDeLsrosxcTXBhXpC5CfjfBwu%2FaMV4UFivNrFyjSZOaxseA9R6u5M1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd1cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8746&x=1", cfExtPri, cfHdrFlush;dur=75
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 18 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 8
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb992dfa44b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LydtJz0m9FsVkPhO1GMKwsEANqyRkfo7ZBu%2BYP34iKl53qQyXWFk3svi54wI0b2AoQrM5PnfQzByhVgblhtN4EFkZMn9tYORfMTC6fUTmc0nIiC5aGTTmxko%2Fj%2FdrYqz4peh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd20b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8743&x=1", cfExtPri, cfHdrFlush;dur=78
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Aw2v%2BZV%2F2j53CVgca3F4IPkqWjwLzMPMiGTHpK%2FnzkpHhBfbXwvM7pAFiD7dZEKwOhuMcXVQRFMC6gCwfXxZNLL2Vjip8tao1vcOguiTB6w%2BPjW1GnPoT7RkRnkeR6dGloOG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992edd21b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8745&x=1", cfExtPri, cfHdrFlush;dur=76
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BAxxDsr5Yz0nYFX%2B98R5%2FKUB44PGvBpF3eKvf1FtRjaYsKl0itMG4OvqmxoGhDSUWzuvcbweH6h35XVpRSxheqRzBYFedMjtJzZnWtr45ELxFrWnTb6ja1hIvYZSJZdbxBqf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992eed23b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2563&min_rtt=519&rtt_var=714&sent=10410&recv=551&lost=155&retrans=167&sent_bytes=11813229&recv_bytes=127949&delivery_rate=1155&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8745&x=1", cfExtPri, cfHdrFlush;dur=76
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1hw5PU3ije4sKD8rGKB70iBuEkF3DpndFA6hLBkP89nQyzQ9mQSooJXegMRCNI8%2BN4WLhewgTqva%2F1qPCZDFX34M0kevWtkVetrkZvSJosEqHA9BRO4ufSqg92JpBQ43X8Lj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992f6dbcb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9054&min_rtt=519&rtt_var=12676&sent=10616&recv=555&lost=155&retrans=170&sent_bytes=12053884&recv_bytes=129226&delivery_rate=3021345&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8829&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 19 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash31a6ee7686926a5edbd4dd18cd9c668b 698f5974e5c2460f0465b9999b56d768def6b09d e04576d32476a2f0fd211a84b8b48e5af1b328a8234b1b02581808910a3aec52
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YXM6ugx0bYpXcz99R2E2l%2BNb%2BEw5irgyYVIQI1TWAiWuxb2ZQYk7%2BD0pLFg%2FFi3WUr%2FrFg5C8OVl0GdfJLiXr%2Fe60LD9z2WuSTvkaA9wnnrukOuGzUSH3DhE6UvgB4j2XsGE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb992e3c11b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2486&min_rtt=519&rtt_var=1528&sent=10041&recv=536&lost=155&retrans=167&sent_bytes=11386978&recv_bytes=122611&delivery_rate=1162&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8669&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FhIOf2tTr%2FIZKo8MUDB6s5gBDm6cZ%2BYjCMkbCyPGtR232NtOn3xz4wz9TnZRBWSyjNW3oA%2B5Cb8D3NmFRyk1ymv3G5BeqJbDJ3tz%2FoWoIq11Y8xL6Wjwbp06IehA%2B0vSGdoO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992f6dbfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9054&min_rtt=519&rtt_var=12676&sent=10622&recv=555&lost=155&retrans=170&sent_bytes=12059024&recv_bytes=129226&delivery_rate=3021345&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8831&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 3.4 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash061d6878581ef358aa4ff6885f90a1f1 7b5328b923b3549730e97aaced10aed63c39a40a 6d7a559dec3c8a19ab07cdb52408d6a8ea747a93104a57a86ba75bb19c10257f
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oyUGbZdsqlYeApbCpQOX%2B4c%2F50K03mvxfCUmB9nenlMxcDx2a0FE8Rk05XTZ4rZTHkSFvrh4g2lvaH4tQv3PXCEBjs3sO%2BIN7MDZrlJxjbbkGKbb5NGsG7%2FeAenIZCjXq4IF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb992deba7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3001&min_rtt=519&rtt_var=1797&sent=10010&recv=532&lost=155&retrans=167&sent_bytes=11354645&recv_bytes=122181&delivery_rate=1050&cwnd=268590&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8591&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=raizc%2FqjaSzxPfXno810OVzjhtMUwlKR0Rh%2B5xr3nPGfhMmrJ8CR7XIzg29XbWvTiMensLoBB3ZnI716xiUYHI01jr2m4Ejo2uVn3CG002NlQ1ZDX%2BWl0hVdl%2BY3MG9otpgo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99300e95b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15040&min_rtt=519&rtt_var=21418&sent=10633&recv=558&lost=155&retrans=171&sent_bytes=12067256&recv_bytes=129651&delivery_rate=146755&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=8939&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347132
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293523
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337256
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335945
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290720
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/94834 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashf17076f9a00f916949530c1d0282bf9f 439caf0827bb28972da67e6b45c4a440f8b936fd 46b517db761d8258f3bf2f1f82ce01fd5c0ab8fe2df6ef8c608a86a136aadf92
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /94834 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:27 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392186
expires: Sun, 30 Nov 2025 07:42:28 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7x1%2FFkJxg4VwpUWepQzoLwfSJdd%2FCLUT0zFzYHhSZ2Uyk5F%2FqLKXzmzzvmbpOOgl5aoLD69AP%2BvYCjTEFAQYm%2BOSFiy%2B%2BLRAQu3UVutZjRw79BChmNcS9qTe91KXTqhY8Y2F7RXc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9931fad556b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:28 GMT
age: 4151500
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5405
x-timer: S1733816548.161576,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5129
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RqmY09TffIB4gomY8r9roVOdNhCZ6zimPN4R1lXaUWWWb7w6OEzHQVTs11afWsTJJnr5CKujD7TCFRIHiFsWl0WXWBSPYPchF7PjmWRkqT5ir8bwGn4Jmjeipi24vsRBVSeY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932ba2eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5054&min_rtt=519&rtt_var=5353&sent=10820&recv=577&lost=155&retrans=171&sent_bytes=12271043&recv_bytes=132400&delivery_rate=369927&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9359&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UNcSPKrcFLWlAJc1LufFIJweaL9eInANDAwzmnKFD3CEK8jS0bYb5n%2FKA%2BqGtYEbchOrWxLMzQOxzCmv8YFdT0E7lsdVxF%2Byu%2BuAFOncUpKr%2FZjzkkM6l%2FIkCSj3%2FgYPxDPz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932ba39b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5054&min_rtt=519&rtt_var=5353&sent=10927&recv=577&lost=155&retrans=171&sent_bytes=12398894&recv_bytes=132400&delivery_rate=369927&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9365&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 5.8 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash8aa9808e7fcef419b23385367797f0bb 6f41eded6cea8cb68cc1488a0dfc332acb7b5ae7 562cfbd1a884dad1ddbaf30e76018a349c449c3f5c24d23c903a12127dc575cd
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnrZHlalMT%2BQbmgVy2EO1eknkkS%2B%2Babxqy%2FV0O7R9TJftE%2F1ZvuqkZL04lS7R9JxhXmEy1%2FqMQ%2BVGym5FaILH0fFJQtm0I4RSxinGdBkZ8me7%2Blg0QcbR2iMCUa8dTV8XE%2FU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9931d8fcb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7738&min_rtt=519&rtt_var=9036&sent=10770&recv=569&lost=155&retrans=171&sent_bytes=12220158&recv_bytes=131244&delivery_rate=1014&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9221&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5P7IFAmhEfhC9g6W%2FADIKctpscO6Uk91J2myuT3JjC6PeQkPE74YlGIHehacAEM3AaWyTyGuWBxzgBPjsLwcTYrqhWWZLOD%2FMrWKBPlqEfs6rtjlCdNTIXRD4lAhniqhrZja"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932da62b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4732&min_rtt=519&rtt_var=3301&sent=10934&recv=584&lost=155&retrans=171&sent_bytes=12400959&recv_bytes=134082&delivery_rate=4000&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9383&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3jpOkUGNDS%2F5ZnJoMVk6iM2ltaX3zs6IF3JLi9vLDtXLdCKVCVGG0PgHIhWif0SMpj8Yr4z73cF4BiskGGaqUkOTXCvzcnrJQHWzgmR2AWxxAUwW7UPLuIjp8CtKEbmHpYG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932ea73b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4285&min_rtt=519&rtt_var=3370&sent=10945&recv=588&lost=155&retrans=171&sent_bytes=12408036&recv_bytes=135083&delivery_rate=578782&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9391&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZLldMbOS9YFtJprVpJA%2FdvHJU4OBlIxvIA7IQrkH24B9D%2Bd6bEqEUftNZqXAXp7KSFWZGi8DUv3996aoG4SyjnbpTjq6DemvvYL0sBi1NtbF57YiqzYPyvzY9uj%2B2RjERt6S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932ea71b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4285&min_rtt=519&rtt_var=3370&sent=11062&recv=589&lost=155&retrans=171&sent_bytes=12546917&recv_bytes=135399&delivery_rate=578782&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9393&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nXBzS8792y0FBnLC1SCfDZKHp9tFPY5xkpPQcoazJ7rcP4E34FEMhOhPS8AfNUBaxC39ekAeYpUniV%2BEoRqssx2GDlz3rlErmmJ1YVzNDvFay84gmcx%2BPCgdQeCI1VDmDREt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932ea76b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4285&min_rtt=519&rtt_var=3370&sent=11064&recv=589&lost=155&retrans=171&sent_bytes=12549114&recv_bytes=135399&delivery_rate=578782&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9394&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 110 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size110 kB (109464 bytes) Hash623ccb8a8325327031801806dcfb79a6 a7946d235e455fc6f8496f36c4910e984117fa6a 288d05b405509d3c265a639bd2b40bd82aa1c301eb32e2490cd561f18231f73f
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UcU6dUgKI8m8w0li2L%2BWcB0IOvRavdhuvpI6VaMVfetdYsQTuaidxnr9hrysXXVhwB24XXrBhjXa0Z%2BW%2F%2FCLlPmcjVO%2BEwlNsBdZDVRT3qXpc3Go6m2ONtJWoeciH8THbQA4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99314845b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10267&min_rtt=519&rtt_var=12860&sent=10744&recv=564&lost=155&retrans=171&sent_bytes=12193908&recv_bytes=130488&delivery_rate=1040&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9165&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=My0UhLpbb%2BA1tusceZMgTvHDuQp6OFURPPmdDsMhWklwf6vDBnvlW6dKVLwiI%2FEIUda%2B3IWLDT43IY6iX1DtUCmcyVUE7g3k8thcG%2BU07rxUM6j8MkRmSAAG5HFt4Lpq%2BOgE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932ea7cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4285&min_rtt=519&rtt_var=3370&sent=11074&recv=589&lost=155&retrans=171&sent_bytes=12561114&recv_bytes=135399&delivery_rate=578782&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9395&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ube5IyPmWJakVAhc76%2BC41dXOeXcB4J0CvJ5OykvKJj0SBe99Al3oQOmsOvFV1tP6gGj9DHYu1ZUcFaOZahozaWb4pvBsy4z%2Bp%2FIk6G%2FL5ZwXc13LFpE9ZwfDrzu8QVGxzbc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9932fa80b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4285&min_rtt=519&rtt_var=3370&sent=11172&recv=589&lost=155&retrans=171&sent_bytes=12677828&recv_bytes=135399&delivery_rate=578782&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9396&x=1", cfExtPri, cfHdrFlush;dur=10
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 34 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash205659faa310a0abf88e29871699a6d3 aacb618fa8aa8a59bfe5dd510375a9022fdf7219 85bb972a9cdef0ba688017cf16b997334599960e5bb6b7e8e09cdc8c2cd424e4
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SW3%2Fcy4o3PIdeIN59OCGy%2F2EIL39JhOr1YV%2FmeEEXf1vO980jX5M9FvTz34F5q%2BwYUdmdMoYiRCwfecZc5IGgE44C21HTsftuHrYi1eZfWNdKQPy45F02VWjRdUD77bn8j2E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9931e907b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6928&min_rtt=519&rtt_var=8397&sent=10774&recv=570&lost=155&retrans=171&sent_bytes=12223101&recv_bytes=131290&delivery_rate=1135295&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9229&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RSDBTcMuLIDwhPsEX3ivgJl2sBnBwI9d1HeBCUxqP%2B1wE6ex%2BQHfzp3ncd4len9wiK8Ddl%2BxpG06TzBZMDPyIza%2BRAKYgOaQWOb5EenhA4URg8uKjcAwHn7E7qVuHik%2BDmrg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b71b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11363&recv=594&lost=162&retrans=179&sent_bytes=12901041&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9468&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mwyKffsLq15AU%2Bm3%2Bvp71ccSU5julWWJ%2Bkm9HCxRsQQVs2G0VOhzqpl%2FwzbHhmN4AVUPHIK7CLHxTCzEmF4tURbqjGsWo5tdZ3zzxsit7u9YxaLzlPMhes%2FaHy0TMOo7Ey5f"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b72b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11368&recv=594&lost=162&retrans=179&sent_bytes=12906047&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9470&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxjZbs1S%2B0c2LOlZwoaFe3ZZQ1d5lwO%2FNKRoW08tG1Vt%2BxCqeYaw8wXBrd4EVsY%2BFjdpVnqz0BCjUYVG1gUOct5SAeL%2FjudVF%2FMit71OivZRNO8np7lF%2BSHCgDUiMXoKKQsy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b74b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11368&recv=594&lost=162&retrans=179&sent_bytes=12906047&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9470&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M24VL8x21z3Z8y39ca6JEBn%2FMKLbp41k84rgpeoxG8iBldq4HGoAtZS8i%2FOuOBHSuM9sHeeVvxf%2BagslrAf06Ij5fq8jwg3%2BrG7yNXIOVmZeEIqsNXqJuNzMIcxKocy%2BaHqL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b73b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11378&recv=594&lost=162&retrans=179&sent_bytes=12916469&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9471&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odoEo74gHbWQevGlK6HLaE%2BJ7DhOe5hxj63jPZHqh%2F%2BXGHsTY076hZM%2BvkUuLJgXeoUToeLAMSA73YcHon8lpSdjW6FNHOfyq1ehEQgldBYWAzZdPfjiNi0e22gFV9PnW0g0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11382&recv=594&lost=162&retrans=179&sent_bytes=12920894&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9472&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ftRzbxDaTJuNCfnam%2FmfCsUEmJOk6aYsuZ%2FX%2BgUjUGbSoegaPBIxYO3jaFEWz6EUBLu3TObu5EfOtOU90Q8HlJYAOvbuYRhj%2B8uiaRVOtx9OMrwZzF85rHr02h4LFMz5%2FF9U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b75b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11387&recv=594&lost=162&retrans=179&sent_bytes=12925826&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9472&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qseFYqL6jeSvtmf87X1WQCvLlZbVDP8XyHS1DkY21CCKV3%2BKLfv9VKZt2POPxLkgmx7jeZz3FiJinoK6HE9ZyfZil28An7HBJj927%2F4kO6cXeCb%2F9N5pTbS7xN3K6JsMRZZh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b7bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11390&recv=594&lost=162&retrans=179&sent_bytes=12928617&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9473&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HPY3pGc0eDqAPuJG4f5BPx6E72EfIGnn5AU4%2FpebhMcd3huIx%2FMyAVL9JUil2gBoA4cdOTwhEjnw4zxOfsnNafMW7%2F80PjxTw4jq7bgHNFPStU%2F5W5R2pp0r70S%2BAr5LLfZK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b77b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11393&recv=594&lost=162&retrans=179&sent_bytes=12931192&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9476&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WZ%2F2lytkwpDZ8iTzUP%2F1XCsDnW7JgsfsJwHprNomMai7iCWKr8%2BLZEkt4JmS%2Bohyyh5Bt1LhWpUVi1EvOVld3onySORQxXikPDpQ7TMADJQR3z%2Fh1pceT7eOjFGcIbDProfe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b79b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11396&recv=594&lost=162&retrans=179&sent_bytes=12933759&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9477&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fWj4zCtne27JI%2B4TwJ9Q0Vbyj2t6H3nqsegL0SPD0YcL7uTfHGC6tRkD4CTgNZRtYFAUqwJXHkdyAPJHXbdotm0BL4zD7ykToCiLsHHruFXcmy0jut9W8ADN9Nlsx2yhq%2FaR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99336b76b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=8707&sent=11398&recv=594&lost=162&retrans=179&sent_bytes=12935782&recv_bytes=138384&delivery_rate=5129446&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9477&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PcBXVpfnYGYJl6vZ8Nj27puH5HFEKsl8chbI4k1O2UTiS1eb%2Bcz%2FFaD6o%2BSX8w9P4J%2BLaJWZGx5a9SApfiBmFa%2B58rdh4eBuydo6gU7aVRJe61IbFgK5JK8YqIAADduhKN7A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9933ec15b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10480&min_rtt=519&rtt_var=10825&sent=11403&recv=597&lost=162&retrans=179&sent_bytes=12937808&recv_bytes=138812&delivery_rate=742468&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9549&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347133
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293524
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337257
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218522
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335946
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290721
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/57102 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash37c09a35460b1709f3fe60f143752ebf 55a9540c491e09200db7bb388849a556217ecb5d 26854bd6e0d7063b5d7afd4efb2c323d097f8b05e04613c0f52e40158122a6dc
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /57102 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:28 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392186
expires: Sun, 30 Nov 2025 07:42:28 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZrNuPQk3wx6cNZhyzmkpGC3KiCYe3UkC6%2BpOeJ2NHq6epynwVFHNd1DKbiJNc%2BO3J2EmXku%2BNvM5HmduZNriwcpv4sdE04d9bRu38P9QMzkYEfZLnEeg%2F%2B7Z8NJqZqyeGHgsrXzS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9936e9a056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5129
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 70 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 9
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9931def3b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 152 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size152 kB (151911 bytes) Hashbf590b5aee97069b687475ab989c30e4 13b7baffca4fcdf99e0df1eed7c0eb4d7a22bb0c 0969e5b910e858decbda82253172b4bb125053feade6acdd29ad3ddbeb71a9ca
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TCRgAvTiXI8p71%2BvRdki3iEyqf570jbknpzreYZERP1s28W8%2BB4r8G9uhg3YNRRMn%2FDjychsFCggWzBUKqM%2Bn48icm67NRpb8ekBneZlMZsE%2BDvOpbLSj0NjAd87R282EOf1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9936d856b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6182&min_rtt=519&rtt_var=5328&sent=11545&recv=609&lost=162&retrans=179&sent_bytes=13093685&recv_bytes=140452&delivery_rate=258829&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10023&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 3.7 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash59cb2ddda54fe9f9e6d87bb64bb87647 e38151b7cf071fda53d1d5e3d26a6337edf0cbb2 0acbf42baf1edc43ffa48ed2d469846926cda0a370ddd15461a636a9347f9e43
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:29 GMT
date: Tue, 10 Dec 2024 07:42:29 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C3khh5gbWxOkWu6mhea%2FK3y2WXtEOoIVXhvwBcKOnXRUkviUf7SnlMRx72s%2FCD8L1gW24%2F1mweVQMVERCtw0PjSADS3QcKWZFUICLm0T5HQUCr8RoRhwXr9e7MWb38nWWXz1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937a985b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6216&min_rtt=519&rtt_var=6754&sent=11708&recv=621&lost=162&retrans=179&sent_bytes=13273323&recv_bytes=143151&delivery_rate=116903&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10150&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 5.5 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 8
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LdSbecsCF%2BJl9K3EblfZA0%2F6PpKXXjr%2BkXW89wnlCbhKqNQPhb8dS8UskcOUIwq4ojKtjKOCLdWmFgh8krLkWlcJfzNGoXKOAXNomNYVO4VWz2hIz4DneGKK0IK1KvxUyXyo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9934bd29b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10656&min_rtt=519&rtt_var=7170&sent=11507&recv=600&lost=162&retrans=179&sent_bytes=13059529&recv_bytes=139211&delivery_rate=749&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9683&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uaPBNSeg0QhaE%2B%2FwzUJfYLBoG2bKpp4ZbA5oNPaxNBxgD%2BB3WjyBo1LbUJxClFgZnyGZDMtI5CMRtybq0z4emS%2B%2FBgCyq0XU9SZV0eBSUgoOabJF%2BGvxMMhd0bp0qsG2DbHK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937a97cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6216&min_rtt=519&rtt_var=6754&sent=11713&recv=621&lost=162&retrans=179&sent_bytes=13278779&recv_bytes=143151&delivery_rate=116903&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10152&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SQfuzXjZu03mmpIQI%2FI37iPRr3ay8SIUjmW8NuSqZ1QFMZcd5R6nIPwQrHQt3m3EWlcsfdb7s%2FAOArMp2dwoZMPbtoUTgQB%2FrPCw9Ab8QVbituWJshIyijmt6dUGyn2kkM0U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937a996b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6216&min_rtt=519&rtt_var=6754&sent=11715&recv=621&lost=162&retrans=179&sent_bytes=13280711&recv_bytes=143151&delivery_rate=116903&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10155&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 50 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash9f8c85414927d457c706532a16ab1ff5 98d21fbbc11f94cc76e23c74dc3fe6757b3995a0 023efb1360c7a1d60d0bb243e15b8813eb35e81f5e501937d7c60aedda93b371
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKmGA7Sey6m0xx0ojf6hrogm5yXFfFZR%2BeaK%2FIepYZZB%2FF51izFx%2FivG%2Fg49ZUeUoX9RBW%2F243QGP1OxO30YsxcEIF8S2cth8kKKuOn7RdhDRHqfeQZ4aGUjbpsRhXow%2BPTL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9936d84eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6708&min_rtt=519&rtt_var=5704&sent=11541&recv=608&lost=162&retrans=179&sent_bytes=13090746&recv_bytes=140406&delivery_rate=973&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10019&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 85 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 9
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9936ece1b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 227 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size227 kB (227167 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:27 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 7
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V8l0GLYDfKCPyKQJAhIVQJnWkS%2FU7gZVMi1ToJNdrWyn2zVjE46vOgAj%2F5E7J5xi9txyVrIAJ7GkNyQC4RFCjEwO9KaKZiZmMUgg1VxNBYBUMHw%2FCbxmsKKyx7gc4BNf0YIn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9930af8ab515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12163&min_rtt=519&rtt_var=17016&sent=10737&recv=561&lost=155&retrans=171&sent_bytes=12188975&recv_bytes=130050&delivery_rate=1085&cwnd=269790&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9034&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2B8RNKav8n29BbJTM7ZocrQIDo%2F2pkD52LM%2FFN7c07T4jsDvmygiSrp%2Bed2AbuLt94uCL20y9nQzcv0zGOnJ0N7GJpl8VXj7QUomadTIZqcuNWliIL%2B4v1sKvaXyYqbd8mom"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa0cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10206&x=1", cfExtPri, cfHdrFlush;dur=10
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MLnEEbrh4LSKZVhF%2Fq%2BLMHT%2B4kkfx7xl9k0%2BmE5b%2BhSoKrW9jNVu3XeGMV7YQm8LC%2Fo7tQfR0il97CuPM4faJm8R1Ob3YS%2BTR35YknrJ8ZzC2lfkT2WnLcY9RTXR4%2FYFXT5k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa0eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10207&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jUhr8nYp6YsqVzuqyYqU4S42kSFFkxTVQI6rS2G5vyKb7Hpz2HuCC4VO7onS6HrPUHSMnuRmCo%2Fi0b1Yo6BdGGyRe0P5UlCZi6uVedwm%2FSPwswaNfaxpVsB%2FUHVGdrAKNVv%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa11b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10207&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sFJtrC0hZ1Q7aHp9xf8JlkTXfSajbRvr74wVslVhX4BRv%2FEg0XjBTVkfZlpSTn3q4ETexMnQS5lDrj%2B3CxC3%2FwyjYCXKZt%2FwxbTtxUvTTGLWUJ7RfHLsfKG1DMlo%2FVMw1aP6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa12b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10208&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FZQAtiWM%2FFYlayTiDhzDXBXXxWEfs4oGynQyI03%2FaeDqg%2BsIIkuY5KpFWHIdrn5abwTVZuqGuhONvcW5vC8cmXlUkWhjJt9CLCKH4MfyxrK5O3jdakuDpKsfvFrOp5CjaxxZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa13b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10213&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cR4zYPK5bmf52YkitPBZtAgF627D3LVSgZpOa9b1Dv4wf2JxdaC7N29r8r8Ry0sPXQN12JsDUoHpSC3Rwllbu3YNJ%2FQXQ2%2Bh42lEK79eX2oDp5%2BLimvpNvlHlquAQTxB7IaT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa14b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10212&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FJg%2FhSNHH1vfYQZEtGrAViCBvJX%2BSN0SUabVOiW5Hy%2BrBK0MQ9AOfbGN0uqVBkqmk%2BnV4grNPlu820jYrI9pYKJFYmvxw%2Fm11My4uM4okUkDAkgMX4lWkMEepFKXyt8Q4OpR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa15b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10208&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FXJ926OIsdzGMPq7tCU0R2qdQoRYrB5Aax5AUj74NRnLmJi61BPbT%2FitNTwWAlNrF83qTB1bT5Xx0jKYZvDIMZig3A55fMkR0lyjgtP8DAZf0%2BmqyIu4lVCuVqVjugBJKFCS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa16b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10208&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iBJNBgq79%2FjyhfB3wvxrJe7Ep7GdHhG%2BCdA9aiQeZtekjvPUSwoovisL8j6hyJtVjTb9B%2FYVhTDbeYnqNIsFnd8%2FoNVQlPsSBahYwGbd6PdOfhKXi6CP8ctPukOKUpFkbVyv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9937fa1ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6424&min_rtt=519&rtt_var=5969&sent=12062&recv=626&lost=162&retrans=179&sent_bytes=13691820&recv_bytes=146420&delivery_rate=4347648&cwnd=272190&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10212&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zSI9K2GDmTQ4OEfYbJaSIGbOJ7uD8HL8Gv%2FNXdE9J1gQ3CLOLvO2DL%2BIRniW8bNdjfz3RIrjJW8Vn%2FPnvvnDnfUANf3VA8RAdYu9C2hMn5MVK66ecIot9f2SOr9mJy%2BDBJw9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99381a40b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5873&min_rtt=519&rtt_var=4344&sent=12149&recv=630&lost=162&retrans=179&sent_bytes=13789074&recv_bytes=147421&delivery_rate=11373917&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10235&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jZhA2gHcZaoAgDYUevyBZg1AOf67PU%2FBL%2FblugTSx0e%2FcFGmBMR7c3sawDYluYnOuRZ16QEm8Tdy1BDYDR6s337EF2asawV6jjBQ5APsO2a%2FYpaQbow14BChz3SGTUXr88C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99383a4fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5873&min_rtt=519&rtt_var=4344&sent=12154&recv=630&lost=162&retrans=179&sent_bytes=13794009&recv_bytes=147421&delivery_rate=11373917&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10235&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wEXL1yGOyBdPbhGOkJ%2FFw59sa4E17tVbkEiNCd8pXMvmnGmF7JKfPEnHcQjBDiYpC%2FQbxThcPuntAMhcPsdQbvKHo2MHH95mQkjlQ%2FOU6H%2F5Kcb3o4srbwpwMOtlK7EYi4cv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99383a50b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5873&min_rtt=519&rtt_var=4344&sent=12156&recv=630&lost=162&retrans=179&sent_bytes=13796031&recv_bytes=147421&delivery_rate=11373917&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10240&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N1%2BC2dTciEjBqEZPUXJNmFnJPNSlOGs%2FpQm5P6rFObEldQ%2BZZN5JRJ73PRrD6RaWBJO7MCUV3yEHdXYVPwfZkaBZlgazkISYFsfZx1oWS4lmpiQ197YcL3jOYreMIO1VAWUQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99392b51b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10244&min_rtt=519&rtt_var=10828&sent=12164&recv=634&lost=162&retrans=180&sent_bytes=13799919&recv_bytes=147891&delivery_rate=705&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10388&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347134
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293525
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 32 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash3a1c70bcea6ad9e21573c6e0e6503126 3b24c76a43f3d30e6d4e321cf69179a39949294f dd84cf1b43d1dbdc740ed866b9328810ba0878ca1504860dcfdaafe88652c256
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QS1I4PaUhUN0%2BH0iuP0nshbJj1GhNoMrLU%2BPebj6lyRlgnO8vw%2F%2FwDiztrEClJKP463lRu9X6qQoXaGyV%2B9zvow432NpgHv0pJacOVwSKwezRyfT6FZ4mqvB4C0Nkb%2FekS1h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb993738ceb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7564&min_rtt=519&rtt_var=7902&sent=11572&recv=612&lost=162&retrans=179&sent_bytes=13123081&recv_bytes=140837&delivery_rate=602&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10116&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218523
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335947
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290722
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/37873 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash8f9a5db9cafea5a6a06d02a8fc7f7cdd 2930606d7575c331cc73d5a5cc8698368c567500 2ac90630386e55c1edac436d143e97ce029f585f27e4a29d750e75ad66e6dc6d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /37873 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:29 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392187
expires: Sun, 30 Nov 2025 07:42:29 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A4D7hQMqOz3klSWUgmLsnQTl6ly%2BHX%2F1uF81WDkHaVkFHpmgQi0UrzjXbmOTMVekof0E8JW5ZbFNQsRNiDOayqqxkwvrt%2FcOWE5CNzuzY67K4BWe%2FmVwKl1SM7hqj05j4QIbJytr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb993b9f5056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5130
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:29 GMT
age: 4151502
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5407
x-timer: S1733816550.710622,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OWp84%2BsTIucoj7SNrKh%2BdtWGbWdYmHQ21mS6XRQuN%2FLcD2of3kMHbtqv4a%2BGAGrL1vunvWS%2Fuy1DKiodabLFUZhQ9MxZtVu6QdsgRuKEQoF9O3uMLSnEzM69wETxg2a6tgHN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993c5810b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4466&min_rtt=519&rtt_var=3754&sent=12349&recv=652&lost=162&retrans=180&sent_bytes=14003606&recv_bytes=150595&delivery_rate=324510&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10902&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 28 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash5bcc4b369be799928c580f7704a968e4 aabc51c6074b90af1ade612f6d9d5e3fdfa83791 41b339fb5f49e430c04ec7f6bc333ff7789c13465410a451b3a195311c9da94c
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ittTajirYb4XHhDVPwdG2B7QJ7T3u%2FrRNAtRjYTKf7XfCFptj19eDNPJjImwIlG04QIoNIHXZNdUoTo5svisPUQgvh87yIXxGRTFGQf49ZJwWLByg%2Fh%2BRBGocnqU2CJRL8H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb993a6d31b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7428&min_rtt=519&rtt_var=6268&sent=12275&recv=641&lost=162&retrans=180&sent_bytes=13926573&recv_bytes=148773&delivery_rate=973&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10649&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JWdLt2dO8oLlsnc96Bx06WB7qJ3LbjCVG8VMeIMhUaiugKTZHw2%2F7F%2Fe3OrE7rCuJ%2BgI2xoGJtwhtZ0NfvL08SQ70Td%2FKV1bn0uaYABYRchuD5oeUouduXApM5DBoy9MD6CW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993c885db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4975&min_rtt=519&rtt_var=4010&sent=12463&recv=658&lost=162&retrans=180&sent_bytes=14133536&recv_bytes=151677&delivery_rate=1850&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10931&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MA0IwyUZVPNonc3cBrpAsriCNetOKgOmy2D9p7wPgf55rr4Urf72TDK6yNzJJt%2Bf6Ytq2%2Bg8AQnNSadUxkCf0Si621iTEYgSAiUPxIYm%2Fu918LcyhYyOvpresJ74Sxfp2VTR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993c8861b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4975&min_rtt=519&rtt_var=4010&sent=12463&recv=658&lost=162&retrans=180&sent_bytes=14133536&recv_bytes=151677&delivery_rate=1850&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10931&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 7.7 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 9
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5qezwhQ%2B5Oe0ZZSIgup91YUDYBcdl00u9jjvzQDvYP%2Bmq%2F2QdpGbov8P9ZL3Xl7v7djgSWbPHfeHdtMSW0GRZyLGmd86s%2FlHSd4nqdc0iuItrmgAiDasxGSQbnqO5c%2F7XuY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9939fc90b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8505&min_rtt=519&rtt_var=8051&sent=12268&recv=638&lost=162&retrans=180&sent_bytes=13921641&recv_bytes=148335&delivery_rate=803&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10519&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4sBCs01t2F1HMYhnbSfk%2F1eYbI88AlcdMT4z0IFsMwXHZ%2FtbXFyNgrxTkGKHEpFNsGRIzdamnPkMR9pd0CxeLJgiGRP1Rf3tghRHyLrRJyKKuWd0pLg0%2FMMlO0jkaBAc7MuA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993c9879b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3819&min_rtt=519&rtt_var=3343&sent=12475&recv=662&lost=162&retrans=180&sent_bytes=14142782&recv_bytes=152135&delivery_rate=503122&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10945&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ldYkqM4P7lSU24xS%2FFx6N1UokqnBI7OvgQjrlWQ3jZPifC2CzF5ONUnP%2FPK8TN6KsWYyXI4y0nM%2Ff%2BFEGoUckvYlMcWWzVnLRKSxT4XlZTl1xU9uhUEUxFUM7hTniMZGUHaP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993cc8cab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4249&min_rtt=519&rtt_var=3367&sent=12596&recv=669&lost=162&retrans=180&sent_bytes=14281772&recv_bytes=155194&delivery_rate=9473818&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10973&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OXO%2FmZWLHli%2BD46WDzxDvW1W32CQwuwBNK2J2ZVQxtYv9qL4koOrqQ4EFIy88my%2FfWndi8RA4EtJQ4Oyu8PxTkWPVQT3%2BmBvUodG2VObveMSkSHkhN6Pe%2FX0FSb%2FvPrsJ1TQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993cc8c8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4249&min_rtt=519&rtt_var=3367&sent=12825&recv=669&lost=162&retrans=180&sent_bytes=14555137&recv_bytes=155194&delivery_rate=9473818&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10976&x=1", cfExtPri, cfHdrFlush;dur=62
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3ndNU5gpLRR%2F4GE24qFIKcmwj%2BDImZyAMySk2EaCEuFAeGeW2zWnUoFbLJ1%2B1Ehz%2BB8bdlD9MTqIxwGDXvULgnBxZ4xWHi1OAgPucscHzTekZQ%2FeR%2FoDfOzxAbuDbXDvVJO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993cc8d1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4249&min_rtt=519&rtt_var=3367&sent=12606&recv=669&lost=162&retrans=180&sent_bytes=14293772&recv_bytes=155194&delivery_rate=9473818&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10974&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 31 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash04816fcccf44d620d96e503ce651736e 548a87cab21f0769c9fdf0d3aa7ff7ac036ab3bd 61530ca09be65082f5cc96f151a783af30ef2c815e53b49cf8c80eb0a7adcbd8
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:28 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MSw9CxWNS9tCS0iXA38DG3lKFSGn6kB4%2FssQG7yAr%2BhmzsTT0S%2FyTJOkTv79uZD1bFEvGzDA%2BsZ2SJBk5leI2pq1ozedYTSq%2BZdQFwl4UbkX%2B3goCqtzLyfETDYRVJrjLVH1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99351db5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8472&min_rtt=519&rtt_var=7819&sent=11514&recv=603&lost=162&retrans=179&sent_bytes=13064461&recv_bytes=139650&delivery_rate=1172&cwnd=189693&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=9774&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e4q8KBi%2BNcOJajYBDTUPEctZv%2F17BVtogcN8%2FwECvZ7lJ3Jj2xPAVw%2FcAxf6p8zgEE4BW%2BMqYm3rGn4cxV18AAcrHAlyVhaPgHZ%2BtjkpVBYjkw%2B0vo6ObZu2SNruqKHk2%2FZa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993cc8d8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4249&min_rtt=519&rtt_var=3367&sent=12825&recv=669&lost=162&retrans=180&sent_bytes=14555137&recv_bytes=155194&delivery_rate=9473818&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10980&x=1", cfExtPri, cfHdrFlush;dur=58
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zGv2Zo3pTKuqYQq%2F3Myz%2BCPTKsByN%2Bxj%2Boyi3dwIyiH0ODTzlilBXflBHwPV%2FEzLQX%2FXjuAtGdOohWq9eh7Iqu6lMnG995TCH97AaRgj5L2YbYN23qtgje%2Ft3aplyCgUor%2FL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993cc8dbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4249&min_rtt=519&rtt_var=3367&sent=12825&recv=669&lost=162&retrans=180&sent_bytes=14555137&recv_bytes=155194&delivery_rate=9473818&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10977&x=1", cfExtPri, cfHdrFlush;dur=61
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 21 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hasheea6d64ac9d51bacc4a98c95a0124734 34cca9c6ec44ccb62249de5c2d54a03e94e53e91 93a08a19711ef65f9c6232151011f3ca9e67d29e6a12b0c33fc7cf071ce277b0
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zA6O7%2FddxF9S5koXws96IqR3EtYGw6bx2QjNI18AXdwgUfuehmS%2BNBuWnsSPHgzTtd8VELtUAHnoTFyWeUcT36cbuXs9uoKYXi2IScftpN4kxTP7AUfF0HKIAi4vUHi%2FKxXR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb993bef60b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4676&min_rtt=519&rtt_var=4444&sent=12331&recv=649&lost=162&retrans=180&sent_bytes=13985124&recv_bytes=149916&delivery_rate=1098&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10868&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash6ae3b5e2b4fd9af8e5a6bf9f71fed60c 743239601e0d205840fd341cfdc30c10de750397 92458fd16f5a87cf38257db83f9dd1d86afc56b63a38d7ceb82df7a230f5521e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B7XrIVsdWcVI9DkwIIAN5XFF3%2BJ4XyhmzuQTjD%2Ba6JoLgZuOzGi3qgl4VWN0mOhJHPPZsaTRLAmyzwRUu9IftTUfRudAHPIyNBWefuG4mD8AKSY%2BDzS23JfTJurqp9nHitNw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993b9ebbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5987&min_rtt=519&rtt_var=6044&sent=12303&recv=645&lost=162&retrans=180&sent_bytes=13955704&recv_bytes=149485&delivery_rate=1191&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10776&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JGaZOrw4N7kcZpSNem0UxaJtxRwddWhZ%2FMZiDpxWX6dv7uDEf2ELUMnxukr4itrlLew0Ie3v98XQ8Nlvn9KSN%2FRVjAySoKA8Jp9k%2BKxgsrxytRyAxFVonT6kqLPTJl1xC1n%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993cd8efb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4249&min_rtt=519&rtt_var=3367&sent=12825&recv=669&lost=162&retrans=180&sent_bytes=14555137&recv_bytes=155194&delivery_rate=9473818&cwnd=273390&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=10985&x=1", cfExtPri, cfHdrFlush;dur=53
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 85 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 10
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb993ba9ccb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ajZflC1klpKEYe9ZPjSE%2BpvEtiy279rbRINF%2FTiQS14Ts9HiQCwtnyCkjUL2oVAIs%2Bmbj36nv9LRAn2Q9g8lvdzfyS4DnTiGHSXtWIPN%2BTt0ryJuDlY8tJDC2OJcScI6W5ss"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993d9a01b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11442&min_rtt=519&rtt_var=13872&sent=12936&recv=673&lost=190&retrans=209&sent_bytes=14681021&recv_bytes=156757&delivery_rate=1180470&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11098&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JkHE3iuRTDEHBalV5%2BJ3NFFvaUAhQT6Labp5buDcI8OKNn9YZtjcJLs7KuwCctkkQft4f2APglrtMk%2Fc4N4Yc1R5X8QWiAb%2Fj74c5Is84b5RBiL8ni1T8M5x3g%2BSCB11LFQO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993d9a02b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11442&min_rtt=519&rtt_var=13872&sent=12938&recv=673&lost=190&retrans=209&sent_bytes=14682973&recv_bytes=156757&delivery_rate=1180470&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11099&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 26 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:29 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 10
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb993b99b2b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SeyHcqKWyhEZcSQEszhotwK2rnnpB3WGovULxlo1%2BsNEiPgpnenet%2B6Q5kSNC%2FPz9JJmYy77YrtGeqntPHWhjPcDY84coyMShYNskffLRKe9A6%2BmlP05rXKLcGps6w4p2OWt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993d9a04b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11442&min_rtt=519&rtt_var=13872&sent=12946&recv=673&lost=190&retrans=209&sent_bytes=14690468&recv_bytes=156757&delivery_rate=1180470&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11101&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cdc2PZMEdN8LYAJnca6KKHxMkLrMUdungOMCSC7Ngi5qQ6j5VkR7T3ujv3j72uEB%2BMOjG9xSOsXmk8rFwydtVQ5yDCJsArr5Jh6S0%2FwT7771JWMtV70EAwiUxivOBn6%2FmsCr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993d9a05b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10380&min_rtt=519&rtt_var=12528&sent=12949&recv=674&lost=190&retrans=209&sent_bytes=14692515&recv_bytes=156806&delivery_rate=2308342&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11102&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2B2lDPplAraBhEU8bX6K2xOrVsTz5RQMMXHSIoJ%2FNI9UhqJ0XPuB2TRVtRoJYqKr7n8J8T5Znb5oT9XtELO8G5GcyKTEWP1hHqaqqknFygTw80hO5cV8oWnRQVMAJmZV9woS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993dea6eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8327&min_rtt=519&rtt_var=10651&sent=12954&recv=677&lost=190&retrans=209&sent_bytes=14695143&recv_bytes=157231&delivery_rate=1190&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11160&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347135
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293526
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337259
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218524
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/74366 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashd6c63d3416968d377047c2fe7493e2ab 18aa02716e30bb9acb2587472f269ef69c6ce2b2 5f9a22484bb681276a1aeda58728cd6b8ee27e8d4461d63bbedb21119a8b1ae5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /74366 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:30 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335948
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290723
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392188
expires: Sun, 30 Nov 2025 07:42:30 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDCnc%2FzLdGWOQqDYr7%2FDKF%2B07NpejipJMVP0Px3yEIdfkIYmwZE22Zp%2FoHsinpz%2BxET8s%2FWNuJW71bikFDx%2FoXU5MfvsZHMCaw9sYt7DKIcWuHqH0x2uf4W0xNV9HZI3a0GiTw4k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb993f7c6056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:30 GMT
age: 4151502
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5408
x-timer: S1733816550.332375,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 34 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6vEIPE%2Bof424c7Iv%2F5eDeZnZkkwOqWTmctKzXulCfhMOMCWfdBTCqdD%2FJOHDZ3vUQNIMNiC%2FfUGNlo%2FikL9HOqbajQBBvdFWlkUJ%2BA80FdXdG1IlGuosJ81bI4T9IICRZdyS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993e7b3bb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7041&min_rtt=519&rtt_var=8291&sent=13058&recv=680&lost=190&retrans=209&sent_bytes=14816861&recv_bytes=157630&delivery_rate=1144&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11238&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rNnczzpaXAT1Vo5pUoCHVXQ%2FlunuEmEVbHqLGWlaNub%2FugqIrCNKEifF%2B536xkxRXCpAtLqj3KXVC83Yy8bW7I2%2BchyD2pup%2B2x9MdJR1mBbSM%2BzYnN0s9j%2FkF%2F2DiE6GWu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99402d34b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5300&min_rtt=519&rtt_var=4917&sent=13133&recv=694&lost=190&retrans=209&sent_bytes=14892414&recv_bytes=159888&delivery_rate=849&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11509&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XrcpAlZWTJUrk5%2BHZXnfF0bEikHKExK7AmjE6uBKpAloxYf6L6xeGEXVn5djKf9da23xTBtAQEXSTfGfy5Q%2B9VayaKJXiUUuEWvRzjIkGwUJ47yDEfIjH%2F1H36h%2BHPPSxQ5W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99402d3bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4766&min_rtt=519&rtt_var=4756&sent=13243&recv=696&lost=190&retrans=209&sent_bytes=15023514&recv_bytes=160249&delivery_rate=1514344&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11513&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 3.7 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash59cb2ddda54fe9f9e6d87bb64bb87647 e38151b7cf071fda53d1d5e3d26a6337edf0cbb2 0acbf42baf1edc43ffa48ed2d469846926cda0a370ddd15461a636a9347f9e43
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:30 GMT
date: Tue, 10 Dec 2024 07:42:30 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=roGfZ1xli3EJuzXaMIEe%2FwM%2FMAfsmtEeNJAeF8QGF0xwglVRG63%2FRzbuisKmEMqOeChx%2BeWfWAnYnN3%2FsRz6TwbH42mG4lCQ8fYmkSFgUU9MNGRf6ezg4vbO24VnobT6yslR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99404d5eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4124&min_rtt=519&rtt_var=3136&sent=13254&recv=703&lost=190&retrans=209&sent_bytes=15029296&recv_bytes=162217&delivery_rate=795073&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11530&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 11
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb993f8df3b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zMtiFXA5YzykfEVHz11LoBi5rJnNrRVqM5eyeNiMwyDvxnXa975DVRONwep4T5ckP2b5RdHTSdidLDUh7XFLt3%2B4ZZweN66WkYOXQbX4fLPIc%2BTrcu1G%2FgsCIv%2BPNal0%2BhJV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99404d78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3357&min_rtt=519&rtt_var=3098&sent=13264&recv=708&lost=190&retrans=209&sent_bytes=15034886&recv_bytes=163255&delivery_rate=1282843&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11536&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6%2BlbS7ail5RE921vDt8AJo3ToNU5fqQXS9oDYyMzgnN%2BIWFoOlGrfvR0YARwkjRXUUGYaYxGHcXeqsHqqFRCGYYdrWl7%2FWz4jWefFiPU9EKZm9plYnObCFAzXbyeFuy8pik"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99404d74b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3357&min_rtt=519&rtt_var=3098&sent=13294&recv=709&lost=190&retrans=209&sent_bytes=15070886&recv_bytes=163571&delivery_rate=1282843&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11538&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lY%2FVDPOvsYPcMwfHjRrTG9cmcnBhWzzyx13eJB2%2ByxNNatXxCIQE4bd8elvqezUZewnz9udk3sI979dH%2F%2BELG%2B84JsYQJYJEOa7Hm%2B6AVriY2xvJvUCh42jUFB5F%2FS8bVIck"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99405d81b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3357&min_rtt=519&rtt_var=3098&sent=13284&recv=709&lost=190&retrans=209&sent_bytes=15058886&recv_bytes=163571&delivery_rate=1282843&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11537&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CxEZjsGAbMj%2BziOVWYbZyt7KfMlnj2RGQ03VN7d%2F2%2BqzJRmyQuNm9q5tfNQkRi86jgEFQ2Qm639WODolosCy2djOk7f6fhC5UQ4R3jhBp4MC4Fb5agSdtaB4AG5RONnj2cVL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99405d88b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3357&min_rtt=519&rtt_var=3098&sent=13304&recv=709&lost=190&retrans=209&sent_bytes=15082886&recv_bytes=163571&delivery_rate=1282843&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11538&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 7.0 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash6b1e03e216ee14f7bcf3c5192c071325 04754b9264d59e3673c481c1a6a8497c815ccfc5 b803da91b35b30b02012ab7b9697255c158a5c8e01d97c7a2e0aa3e29b153e83
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yhBGp8IvAg%2Fuz%2Bj9RMFwCcfACXjr8kKR0Cqhj2dT%2FOehf08%2Fnmm%2B%2BbTrpc9WdfjxhpJkTVBk2X65Fo4lBeedqJCCET0%2F0kwWAI6eEAAClXjd8fZj3mhWEYJgBV46et9E0PZH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb993f7c7bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5256&min_rtt=519&rtt_var=5470&sent=13101&recv=688&lost=190&retrans=209&sent_bytes=14860051&recv_bytes=158824&delivery_rate=847&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11400&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=II9PZyvpCvsuxhj7Sv%2BIDpbffcC3VUH9%2BBkq6W3DyGq7KVpoJzjJpRGJxko2HsVacwDRG0t6whwktTgFTBozz8Ecjky5cllfrQ2moXUI2oZxWcao0llF%2B%2BsG78E%2FygQn%2FhBJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99405d91b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2613&min_rtt=519&rtt_var=2444&sent=13447&recv=712&lost=190&retrans=209&sent_bytes=15253499&recv_bytes=163706&delivery_rate=5401195&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11542&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CqvCnPNIdTetDR4qmDW%2FPkQGFNyhujXKIGM1YnArCFHhjQnlKEvPDJPwW%2F%2FsvYVkmbosGBMC2JwJmdhz0IZAyV3o31kAD8KbSPxigDovma6tLzkk1XXeLAl3h0K2eajTuEOv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99405d97b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2613&min_rtt=519&rtt_var=2444&sent=13447&recv=712&lost=190&retrans=209&sent_bytes=15253499&recv_bytes=163706&delivery_rate=5401195&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11545&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7lIpEefXD8rgt7h8xVuvcQZTRfIxZQDVdpTXhAds4v7QoZoB%2BSZIRI%2FHc9bXk4wvl%2FDW42727weQuZN%2F72h7f%2FMed4vlHpraQ5JhCnlXfEiG8PxsHEJlGZSzfBgkNPSkF3p3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99405d9ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2613&min_rtt=519&rtt_var=2444&sent=13447&recv=712&lost=190&retrans=209&sent_bytes=15253499&recv_bytes=163706&delivery_rate=5401195&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11551&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sfpsY4LqQWkgwLTXYntEiNR2YsevOeJ5QctUHFDbN%2FQkqQNRbXq4MtU15GpNl7VRW9YfaGMuCJbq8dDogCXmC0t%2BQ07jy0T61jDV5uluj6S3upT%2FlHQGun%2BQc0scRvG%2Bnlg0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce47b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13728&recv=718&lost=234&retrans=254&sent_bytes=15582621&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11615&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 26 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 11
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb993f7dd7b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UhJUo%2BUfXlcEy42zIh1GYsfH8%2FqJy0ltcdVP11zQ8pSZmXeJwAvpf2MtvpokhV6WEXSu%2BjocMhn8DUge%2F4nvRzXlRlP5lFdtJBMD4WsVbyzUo1Mu0paX1SNoX1pVywalG8sa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce48b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13734&recv=718&lost=234&retrans=254&sent_bytes=15588744&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11616&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QAJ8EXN48fQQfu%2BYw6GPy9VMDLED%2Bn5EZBhzGRZRzlJ0ZGlwDeH%2BU1lpuj7P9kU33%2F8geMGgu4NofvrQwgMD%2B0thb1Vg7XLkHtdwBur0FJ3SY3iGXPbgxhGp7vaofYTkqxJJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce4bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13737&recv=718&lost=234&retrans=254&sent_bytes=15591529&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11617&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IIA8isGIQ4i4xhhazPN%2F3cWH2FtMf9FeLGbNA1tgzXzlbUkKjvMaRFkEaHkvhtv%2BzOk6UqVNMiaFor8mzEygrq2Zr%2FExcc75jlryc%2BUvJo4vcWkR3Sz3pg9yrKDy1Vs8R5ta"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce51b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13739&recv=718&lost=234&retrans=254&sent_bytes=15593480&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11618&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FhL3YAg9BzKNJ2yfl6uty0UThdxWjylJJ23TRlvW2f3NpnSrY8VUMLFLNmHFhpk84gNulMYrWIRNLCLu2lsQwjk%2BJV8PdAS7ogrSTPo6nYpoFZBVJQcg7KTSNtkIMSreTirV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce52b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13741&recv=718&lost=234&retrans=254&sent_bytes=15595498&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11620&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kEP8E1Tsb0JrSiuJd41kWZidjwN8PdEScZT%2Fx6lISc92pYzF5R71k11GMcAg6%2Bneq%2BJZCwm5FvaLHAS0yKlR%2B6k09h09cqpGXWvg2B%2FRij4pRlEzbKpMM6zP5bLsUXzLH%2Frq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce4eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13744&recv=718&lost=234&retrans=254&sent_bytes=15598068&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11620&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5SSdWXzi61UciZ6Qa8ly%2BDRnXH6tdD2G9FT%2FNdivbebhkBt%2F55UINbjLjn%2BIYSR%2BVESEoow6046uzisW%2B6JdXGVocafkKQGUuyuLGpGsHP%2FedscQgi%2FUfOMpSoffuYPT19U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9940ce4fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5001&min_rtt=519&rtt_var=4294&sent=13747&recv=718&lost=234&retrans=254&sent_bytes=15600634&recv_bytes=166180&delivery_rate=865&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11621&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 188 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size188 kB (187992 bytes) Hashe2eaf5c4884ba06ea4ddc8a9bac51e35 aa5a79c3d10f57bb05f14884a342bc8ce77d735e 1ec493d06c456838d3a9196976dccda25c8e983976af52938b576d2fa64c1d24
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fNZejRod6FRkOaVMZaAGFj4lG80iqdunTSvkZV7%2B5bh%2F2fIRbwiy%2B1v1ENaKyeUc7qNvYrVyMeyQ%2BS5z61gyAJthpjm2EV0SLDU8g%2F962ah9vpyCeVivW6EKlpgVXU8At2hJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb993edbc2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5618&min_rtt=519&rtt_var=7130&sent=13065&recv=683&lost=190&retrans=209&sent_bytes=14821798&recv_bytes=158068&delivery_rate=1192&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11331&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347135
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293526
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337259
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218524
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335948
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290723
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/97133 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash3223b3e304ccfb7fbb30af0f61e0ff3e e675863b9c364c26aeb34d5830c23714c52c16b0 b262c4ff8ef6acd2eae712f100a08452cfacb188ef57d5cab04581a9164e82d7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /97133 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:30 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 10 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 10
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ufnk%2FUdC%2BDdlUFcqcZ0j4eNQCyxWh6M%2F1tOlS%2BV33OThmvyTJGEpqcxN7NRVJMzbe7TKXu%2BTLkaCMT95fBSYecHUirBzqsA1qkTFOMZH1CRM2JpYp6%2FiNKdJ8SGg6khqC7TU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9942894eb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6338&min_rtt=519&rtt_var=6033&sent=13860&recv=726&lost=234&retrans=254&sent_bytes=15727395&recv_bytes=167094&delivery_rate=1305&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11890&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:30 GMT
age: 4151503
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5409
x-timer: S1733816551.952840,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5131
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HaZD%2FdYbI7O8s1qJ4E8ikTfZaCfLWNrwRgjDHqrmtFG3moh0eLJ0ffA7yUGfWo6VIX4I%2BffsDzvajbToi6hQIYdAXhx9CUvSE4%2BL2EOphlFW9%2Bft%2F3%2BS3YGN4NBBFCOJiTCo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99441b6cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2945&min_rtt=519&rtt_var=1946&sent=13945&recv=744&lost=234&retrans=254&sent_bytes=15809476&recv_bytes=170351&delivery_rate=945403&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12137&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h8C8AuYvqwCGy0bmMaTvRGz5pV5GlGxFdrEbrfML4D3j2AiN5NNCJJkSBZSnccBRWiFs6hJxUxUgz0kVfJykG5oH7T0ojV7fHB8rpCoP5488vOk7uEBcCnM8uITE%2FrpfaR1C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99441b67b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2945&min_rtt=519&rtt_var=1946&sent=13947&recv=744&lost=234&retrans=254&sent_bytes=15811408&recv_bytes=170351&delivery_rate=945403&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12138&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hzKnIzFLBuGvVB4uFG116Y7cufWX22eWR7XsePB%2B090OAPkG1JjY6vIdjTVmloSyWdp2%2BByBpGZxb%2Bk%2Far7QzVk99sxVaewX8vJD9DhtHeqrQWAYMk%2BDyXJdxjwfYYt%2BCHV3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99441b79b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2773&min_rtt=519&rtt_var=1804&sent=14055&recv=746&lost=234&retrans=254&sent_bytes=15939295&recv_bytes=170717&delivery_rate=205817&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12143&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6sCkzlLOIhgBrXNQmcyQdoJqhEs4Rr4l95zm0xmb%2B46qjX1Nfd70CTXq%2FisWfczjnE9lGS2ngBA%2FlV4DmIPcACEAb3yk1zdurFAWluiyIJHKDzpPVFXMUscuvGwKUnsuUFm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99441b7fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2773&min_rtt=519&rtt_var=1804&sent=14058&recv=746&lost=234&retrans=254&sent_bytes=15942559&recv_bytes=170717&delivery_rate=205817&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12145&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 5.1 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash0146e108008e1a2843b5cbb57ce709d9 e732a4449a9ec025f6a7f983335219b3f2c47795 7b66f293e6a8219dcc3e9dd2f2c64ee51b81c96db87ffbaf7a1c16d4481b9c0c
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V2kE%2B%2FmvbKJi05Z6HTRsyYzXvQg6FQW9Wg9nCgcIkpNK6adgz9BlDcNE1a%2Fb%2BIRA6JSRI2vgARWfIk%2F7iL75e%2FjGc2Cqm2ftPaaz6tafQaRb0CfVk7TWz8ctV4wo0qsJLQEQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99434a59b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3846&min_rtt=519&rtt_var=4373&sent=13893&recv=733&lost=234&retrans=254&sent_bytes=15758584&recv_bytes=168250&delivery_rate=1192&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12013&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6BsE5wR%2B1zKBjpHshSsikyHtie9o9LhfL5nb2MtBNp4i144010d0Mxn8xS%2BzGjmbbghkobG5j29AXT2y7m0Xdz68Y0wlRY5T%2F8qKmuO4UozRAt0tVWyQIcZx3f%2F7UGBfbJm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99442b83b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2784&min_rtt=519&rtt_var=1375&sent=14064&recv=747&lost=234&retrans=254&sent_bytes=15948476&recv_bytes=170763&delivery_rate=13424714&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12146&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 88 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 11
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb994359f6b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vKrOxtTt8aVm23Y6u7Nebc8Xu3S52lEFdcHmoHrJr%2FoYgKbtPnnawWpcmMu4El0dZhmKQXSaMsFtmXzZhu2x124AgiMQyuDlwDApz3w1UcGb7bXlKl2%2FFAtmpKnbz7yNzvUC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99443b97b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2804&min_rtt=519&rtt_var=807&sent=14181&recv=751&lost=234&retrans=254&sent_bytes=16087366&recv_bytes=172331&delivery_rate=1409068&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12157&x=1", cfExtPri, cfHdrFlush;dur=14
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dYc8hwZRfnoBTdYeWkTf1C4lEUfPMa3AYhhAB0xFC%2Fh6x2GCz7Uqb4dTUiayC5mqvBZp3HCkw7lleRqdwo4cD571nwrcdm0uLsbYba3lXkpPYpCOPbK0WQOLXigT1UZtKbwV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99443b99b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2804&min_rtt=519&rtt_var=807&sent=14181&recv=751&lost=234&retrans=254&sent_bytes=16087366&recv_bytes=172331&delivery_rate=1409068&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12157&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M2N%2F4jbesiY534p%2FSLASvjJB5hZF%2BZRzjLkKntt3WMVO6aj2ihMMz2LVtlpXIHnVcEJ2%2FcMjwDWWDedNBxbO6AaupDdPL7CASrLhKyEMk6yePq4A4uMTs24PDF0AfNBUke2k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99443b9db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2804&min_rtt=519&rtt_var=807&sent=14181&recv=751&lost=234&retrans=254&sent_bytes=16087366&recv_bytes=172331&delivery_rate=1409068&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12157&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 31 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash04816fcccf44d620d96e503ce651736e 548a87cab21f0769c9fdf0d3aa7ff7ac036ab3bd 61530ca09be65082f5cc96f151a783af30ef2c815e53b49cf8c80eb0a7adcbd8
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ig0NxNeupr9coLwMyTgr6vmA2nbR7NzvQAl8lxuT8pa8X2HuE1fT4qUQaueT%2BUE6ay8P1BHKEzKZlE4oDOwq6nnyeIKtUF7hyzwFkTdhfucY1rZ%2FKDKHEOe8j4ObJ%2Fv3BF06"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9942c9a3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5262&min_rtt=519&rtt_var=5244&sent=13867&recv=729&lost=234&retrans=254&sent_bytes=15732333&recv_bytes=167532&delivery_rate=1139&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=11964&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 19 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 11
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99436a05b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 36 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashf51f8ef42826392057e406dc8349f87c 14fe121d49ae231a4dd5d885eb05463b37972941 515647f46fd83514493e1611a12bec6fd1a713a4e07befbf7a0e6993c1372275
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:30 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 11
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YcfnDjvo4jz%2FCkuRmuBRrRP3BqZ8%2BdQ3AGGCtzgmQgjcQ0mUBUenhv341bOBZXxK6nrQ3iey1IHffegCzfaBk4tLC6AR0ITi6uHyk0jIV428ns5WqVEPzNg%2Br%2B0EFo0tutqf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99435a76b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3569&min_rtt=519&rtt_var=3833&sent=13897&recv=734&lost=234&retrans=254&sent_bytes=15761523&recv_bytes=168296&delivery_rate=890671&cwnd=192213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12022&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lmrd1MqZPwhoavYJEtDB4OmfXNsdKDJHu3%2BGyoBVh4PZQEJrF2zRRCyvwfmKgNOpVyoGazPcGk3%2FAUTy3ZqM4E%2B9LKOvaKiPUAq7G2nej%2BVyqxUC2RNC3mo%2BxLrUdwJqAEgA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99445be1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2688&min_rtt=519&rtt_var=836&sent=14344&recv=755&lost=234&retrans=254&sent_bytes=16280807&recv_bytes=174990&delivery_rate=6611505&cwnd=193413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12183&x=1", cfExtPri, cfHdrFlush;dur=13
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2FKl3mpxJ2DRBt52NWvP44E4uEF3h53y2OVdwz%2FVZTHZF3kIL%2FKJhc8ooga9aj%2F6leDm%2BLyhP8o%2BPZX0hBrCtAmDF7wf4ap2X0nFlH2I%2B%2BIxmyDrPY1pmjMnyYkgh3HLspBc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99445be4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2688&min_rtt=519&rtt_var=836&sent=14344&recv=755&lost=234&retrans=254&sent_bytes=16280807&recv_bytes=174990&delivery_rate=6611505&cwnd=193413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12184&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HiMTtOBY7BLdp1msnLY3NwM6yEYNweW79dA5xa8VW24%2FFHid7HRuAfaEakRgntmrVj4lIviYjW6%2FJq7azA4vFnz6R6uPJHJsXxSalCUfSLdzfwLPoBUTA5a3Ck4BVH8wo505"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99445be6b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2688&min_rtt=519&rtt_var=836&sent=14344&recv=755&lost=234&retrans=254&sent_bytes=16280807&recv_bytes=174990&delivery_rate=6611505&cwnd=193413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12184&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WcAlnK29342t%2B7pNfJ13w3L8EUBMyHojokAAET8qB6T7aGUFO3KtsHOd3TJLBpWL5V4haCykCGOpULgKffL7SGqkNyWo6%2F%2B5KZGM7p%2FD%2BUOn5QhP9X%2BJx%2Fr2k9rLeBuWRnwG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99445be7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2688&min_rtt=519&rtt_var=836&sent=14344&recv=755&lost=234&retrans=254&sent_bytes=16280807&recv_bytes=174990&delivery_rate=6611505&cwnd=193413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12185&x=1", cfExtPri, cfHdrFlush;dur=11
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 2.6 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash857a8d5c7c7a5fe467297bd5c91450c0 30fa1dd668a623729318810298cc5ac4f915dcd9 246518b6e27a847e1031e94e40ede53ca5a261ca8a0db8f6db93a0c90f9a55cc
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:31 GMT
date: Tue, 10 Dec 2024 07:42:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nj3C76fF2qm4TvvqLVX3BF55wqNP%2BR8DlrDCpj1l6I4%2Fs7VOitS4E7hbAxqAov6R4%2BOdUcMRuVw7nz3s9bUM6tG%2FTuqyZ8RAGB9Mb7Je7jk3DYSP9aQRqRdYMz5MdofHSPvR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99445beab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2688&min_rtt=519&rtt_var=836&sent=14344&recv=755&lost=234&retrans=254&sent_bytes=16280807&recv_bytes=174990&delivery_rate=6611505&cwnd=193413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12185&x=1", cfExtPri, cfHdrFlush;dur=11
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cDLYs9%2F%2F66sVMPSFVFUUs4BFts1UxJc%2FD0M7i4UaX%2BNhbX%2BDWrEOODm23L%2BvEWAFLa9yyhUHuLx6FHA%2BGu%2FGlbec2Kgo0qzcVtUSbsNqIFzvJto3trbUapZWERii6GMVPFIz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99445bebb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2688&min_rtt=519&rtt_var=836&sent=14344&recv=755&lost=234&retrans=254&sent_bytes=16280807&recv_bytes=174990&delivery_rate=6611505&cwnd=193413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12187&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eniJnO8W9nEPw9GRk%2BZaxg7nfQUSs3jl6e5DcIqShNkRjpktF10L5elkfnN69uA9qNRLtKm%2BJGwulMWUU9DODGKA%2B8L59ABcrm7eJolWXiod9WyRi0%2FYZjtgsj0QSPTQZUto"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99447c16b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2754&min_rtt=519&rtt_var=758&sent=14504&recv=757&lost=234&retrans=254&sent_bytes=16463768&recv_bytes=175352&delivery_rate=7630332&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12207&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nj%2FW%2BDBG4T%2B1km5u0xeWe6yf2aNaslnQSfCB3iLGTKBCRXSCH%2F%2Fnk66jxMyKwtctU5gHfOZPMQcC08uIlrU9TDcOq16DZ0C2l%2BrM9hIH%2FPCBokVGnxbsGcOanRssi1YqLDLE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9945fe8db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10662&min_rtt=519&rtt_var=17683&sent=14514&recv=761&lost=234&retrans=257&sent_bytes=16470052&recv_bytes=175823&delivery_rate=1184&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12438&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347136
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293527
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337260
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218525
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335949
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290724
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/35160 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash12370ebd97ca6b0c6525acf2914cc256 89d587b7e1e90b5da89967269eff88883747acea f42a77c9ba9fd4189f3176ac2a32ac5940e48b497f8891579a02dd160958124b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /35160 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:31 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392189
expires: Sun, 30 Nov 2025 07:42:31 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z7m83FlFzW7Qo8jI1ZZ42YOg4sDKNWhtx3O8h44%2FkCboZtDJnTNLaks0MMMvrMGrFNo8ieQ%2FMuyNs9Kn7qFEoZkhxMsa9f0a7YXAzcBz4lUVxiKMul6%2FedZZpmEgyGWospuNo9BV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99477e6e56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5132
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:31 GMT
age: 4151504
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5410
x-timer: S1733816552.608131,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wD9NN1yw0I3ipiVDOYOsHJlnUJNIH6dnnQKTR53zZbMnJ1xIvvVLkhjKjQfOINMvwlLCvzMynpMjK0n0%2Bf7LL8QCHDBS0yEkpPMr3UBXRerm9ziD1drhyxDxI%2FqVnmgZdsG0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99483951b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4113&min_rtt=519&rtt_var=3506&sent=14699&recv=782&lost=234&retrans=257&sent_bytes=16668954&recv_bytes=178931&delivery_rate=1415481&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12803&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BaYIehSAdo%2FIx1%2FLA%2B14YnKfEF0qSNV%2Fns5JUTQzsdjyBtwHlNobVKU5uYDdlFS49v66x5m8%2FrO3p%2FYKMtDGbrf1okGgNCC%2Bn%2BApinTEjTYMIJD13JCV4yXv1ZqOjpme6YDf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99484958b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3823&min_rtt=519&rtt_var=3209&sent=14807&recv=783&lost=234&retrans=257&sent_bytes=16796842&recv_bytes=179254&delivery_rate=835&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12807&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 17 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 12
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99477e89b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mkG3ubXp51VGB3bkmM%2FlC90eoY%2FQgeORJ%2BvhmAOrdt5%2BZGTKCcZM1MTTMro%2BqBQm6VrVmJGi4CCTVZY6aeQD%2BRSgHlSUPFoYwqE87lXRxOx2X%2FZVqRXwDL8EFu0t9QPFxBn4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948495fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3823&min_rtt=519&rtt_var=3209&sent=14813&recv=783&lost=234&retrans=257&sent_bytes=16802496&recv_bytes=179254&delivery_rate=835&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12811&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashb3f2a6c8e962056be44e762004510963 581bc7d051a49eac8695bb639dc32d793a0011b7 da360032ffe9a613cd1f098339374731d2b38a8c761cd2c74ec99441752787c4
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hWyuO32KXQTmEwcn3u6d0dlzemi5VxXmZSQnVt91njR5gFMRDDh26qOlQWBLD5KMwXPsNBPinfkwalHV%2FdUEaqeIw7tWu8xXKoKFUwqUA%2B8yzb0lkHEn%2BsveL4uUPZj%2B01f%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9947785fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5122&min_rtt=519&rtt_var=6540&sent=14652&recv=774&lost=234&retrans=257&sent_bytes=16621080&recv_bytes=177505&delivery_rate=1590598&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12676&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3A2GUAl%2Bl%2FqG1dljP5F8KiBk3vSZPaE9Urx94wGB%2FnEbtdUtNuvIbaok1lLuoqRUBCKoSjlOUU7uvZ4DGJz%2Bn79xGfQdiA3lH%2FuH5R77Hc4DK2co%2BgxjPCDQhnaLR5i2CKpw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948697eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3449&min_rtt=519&rtt_var=2536&sent=14826&recv=791&lost=234&retrans=257&sent_bytes=16808175&recv_bytes=181254&delivery_rate=1094778&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12827&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XOPbfOYIy1%2B8I7oGtMGyEZDrBsbn1Df67NnzQqup1Lv33BJZplSZDxrOYlgLiX9NRQA0wXkkpzWPmmvOQq%2Fwh9yyVztbz2mSpZ9VyOhuigSf9BNn1R%2BUXyzm1htHQULI%2Bwgj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99486980b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3449&min_rtt=519&rtt_var=2536&sent=14826&recv=791&lost=234&retrans=257&sent_bytes=16808175&recv_bytes=181254&delivery_rate=1094778&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12827&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2hmmT2a0ryi%2BAoAT4o%2FXOrRRFcLpkyIjXnUTOqKww%2BR1Uh11p9IdwGpAEjqT0HC9NBQ1fY76e2Fl3gHOc8VFy%2BQlqv0B8LL4keSOJtl09L10F%2F3O9x4kcFap6Yo525o5vBFX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99486984b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3449&min_rtt=519&rtt_var=2536&sent=14984&recv=791&lost=234&retrans=257&sent_bytes=16997361&recv_bytes=181254&delivery_rate=1094778&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12828&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 93 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 12
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99476e7eb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 22 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashe8c3ff3456bc87345607746992e33b19 ffb6057e59ad836c8ac8b8f088cd4d0cbb234363 9b56d41438afd13104db0f26019f9d5cb1681c31bf73511a38381818051c1a78
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8NyQaftjCpXYoUKZ8q%2FaCxGsaIRxUqUzylODGYiB4wuPVflEo06JTyq79OgI7Hsi5Yi8qlhlwieIx0Ob0sn5nqsvgcn00Mt2dHf%2BwCLgkuXi9FWNot4OA2wyD0glzJ1lCTzg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9947a8a1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4628&min_rtt=519&rtt_var=4599&sent=14679&recv=777&lost=234&retrans=257&sent_bytes=16650479&recv_bytes=177891&delivery_rate=1201&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12741&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WKDOfRqaByvnoteMAQpiBUf38QqwEY4F7rEZophKvjrgTykrRG0%2BnA577H6qQdINSZnsQcIOB9evsydjEmpIghjkubR4tVUJ4LM4jczBlIRKe6somG%2F5%2BGEAO3KttF5%2F7cby"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948d9fab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8080&min_rtt=519&rtt_var=11163&sent=15155&recv=795&lost=234&retrans=258&sent_bytes=17200005&recv_bytes=184191&delivery_rate=2658528&cwnd=199413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12898&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 6.3 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash967e19bfe5cfc8e0a155a6255b0ac4e7 2d99cf7c6ba5223138a82d2cfe17d7c75286a27d 5ad8aadb9877a3412e7017cb3d58b9fcc8e3b0b311013beee022459b86d29287
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RkAq1XVrPR7%2BzrbJz4FEAKx%2BF%2FvdEwDy874o7LvEfaJw8liasxrUP9oQksbJFCGHM1GWIg2sVrzaOIqpFq%2BMQWvWWOGX4r7XaihTb57XURJGfClKCd9wSOw9Rj7WoNSCK0EP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99476853b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5733&min_rtt=519&rtt_var=7093&sent=14648&recv=773&lost=234&retrans=257&sent_bytes=16618139&recv_bytes=177460&delivery_rate=1141&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12668&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 1.7 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hashdb7f17fd38a588eb1681f362e146cf2d 111c1203ea65d6ddd27ccd59c0b55264b2960e02 4092d3bb1d3ba460e6219bb4e73acd1463fbdab4a0cc13203c9862d6d6dbbec0
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:31 GMT
date: Tue, 10 Dec 2024 07:42:31 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X2%2B34E1InYpwyJaziW1aGbmQDD2YDIHoyeg8IIQqv5RoIH0FyB1Yxo0YhoWQl7YYQ2K6qo3NhBAQCQ4RIw5wHECgMXDuIkEhRwkpC%2BxkWLO9J0Q2Q3v1C%2BMhoq200AXJ1WBs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948da09b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15239&recv=797&lost=234&retrans=258&sent_bytes=17297252&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12904&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DAeSC2KtyRaMvkL39RvgXkrSSW1F2GfrkFE2JIzWplMIl8T2xBthmIm6WxasntyLjT3GYHJSv%2B155137174oqBaI58LymqlQzJoRTG4Annu8eV6LWvtveUvZE4a8I%2B4i5stn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948da04b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15241&recv=797&lost=234&retrans=258&sent_bytes=17299202&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12904&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bfqw8MNIOZy1l88KBTFVrxI%2BOyRZlA6ePKKaG7OCVX4K3lPp9PjuMjqBLMlxc4Lfnou7t813ZX731SjHRTzLHUq%2B5BPldCIlpraxqt5ztcG8Zl%2FBmSacEjcQmZtUYtcYHCoE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948da0ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15245&recv=797&lost=234&retrans=258&sent_bytes=17303622&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12904&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5SOTd2oLhb6x0HFJPPQosRKcQJqKyHHJmHM%2FIMl6abZ0CG6KRqb163V8f2iNqD44nFtDuPlVAx1o0KwVcqA1ig44cxtxEaEZEs7JtumQUKhVlPCocuOxxFMNY8RfQfWIFDz1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948da0bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15241&recv=797&lost=234&retrans=258&sent_bytes=17299202&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12904&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wrc4r7%2F20zw1jzAiS6Qi5SSGxnX9egIytWSG3kXUnqgIYbphddOylWG4I%2BK8v8O3%2FaX09jlJP0R5Ci4najsTGJFAxLmDaggbdicXg4hU%2F7uVs2OD0%2BiAPlrEE5fWihnIxyYP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948da08b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15253&recv=797&lost=234&retrans=258&sent_bytes=17311116&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12905&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 33 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash25f93c81fa7b96516888b40cd4b2f47e e1b0af6d113df68899b1da323ede2652a1405225 f9e544b20d292687efd5a6668e1b530b1380a68eaa3d9fd69302c3034ac65fbc
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NIcyIOf1fTJJyFWECClNtyKi9zYRfQGkgu8rlrCCKxaf7viSd75FIdyv3lcFw2N5EZWD2YOq%2BxyPu6gdkxtk0zJyv8jfzL2X4MmrS7qmuTGknVITzbeMf9sF6jZdPsxTgyZF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9946efb4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7366&min_rtt=519&rtt_var=10304&sent=14622&recv=768&lost=234&retrans=257&sent_bytes=16591890&recv_bytes=176703&delivery_rate=1199&cwnd=194613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12617&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fIyeKjLXMRED%2FiPBOULhT%2BkbdULHvosaKpv62OIJkPIZ04TN6gonj51DvUYplWU0Sd4%2BbIOa2dSoTRJwViWvoiqSxMfenv%2BSJRq1eegi4VyVSqO3RnSlWxZqgdFeYcbAaPsr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948da0cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15264&recv=797&lost=234&retrans=258&sent_bytes=17322619&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12907&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K6%2BDyYWFH6NHD6nYmpfX9Xfk2pfhDAhqsLfQAjfxUs8XbY090cB3HEKMil3bYuK9UQ1qXUAfz3MA%2BsSHNUhlZB0NyEC7Lr7OR0bQxTuPwgdInPSIcvLZi1NtG%2F6GYIlcrqvv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9948ea19b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8142&min_rtt=519&rtt_var=8496&sent=15266&recv=797&lost=234&retrans=258&sent_bytes=17324641&recv_bytes=184553&delivery_rate=2692196&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=12927&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:31 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHCdjedt7%2FIXqK%2BfOdhqa05Pv0EOwL%2BDeqAPR%2B4eXX4%2BvAdP9okM5cSa4VtpU%2Fi9U617DbufPCRZiJ5mlXtuPUd91eBxUbDUXTqcptgQprJdhOZh4%2FjuCn6LBaEQRl%2BVOx1i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99498b07b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14031&min_rtt=519&rtt_var=19290&sent=15273&recv=800&lost=234&retrans=259&sent_bytes=17328494&recv_bytes=184978&delivery_rate=190610&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13015&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347136
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293527
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337260
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218525
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335949
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290724
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/89009 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash152a05b67f86d13992f4f5ef90be6eb5 a98e309b2b7ce35e08c717e26ece39c20caa7547 ed67080f37638c637672c45e2f5d51449dbf88320d0c48ef8946ca05fed1d7f2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /89009 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:32 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392190
expires: Sun, 30 Nov 2025 07:42:32 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oS9t9Jd8lUWn5Tulx8odzrjzIMdTcwyYtHZZEHdlwiRnqdHgjhRqlM1%2F8xe9tNcSfg9KvV1MF%2BaPH7w2AcD6yD7ZgI68gKDu7DPNCkia5V21tGRbQQpl5Lue0ikh%2FWDOZgx9uag%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb994b4aee56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:32 GMT
age: 4151504
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5411
x-timer: S1733816552.215478,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Sd%2BYBfnpn2HNdUwgUf1aRYl01BXas2zyJu%2BVQaGcooIpP99Iqn6bUmLzVbfm1i8qvOMf5iOt%2BULyX7GsWj1ODD%2F97gO4ary2Pe0DHyaKc2jYro1OthepVMqWFBnhh8rLz%2F7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994bdeadb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4052&min_rtt=519&rtt_var=5061&sent=15460&recv=825&lost=234&retrans=259&sent_bytes=17527514&recv_bytes=189353&delivery_rate=1951083&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13384&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 153 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size153 kB (152664 bytes) Hash8fa110b4eaf9c1aa45605ef3e153aeb5 bafd4eb03c63ed2f8c20a09ed79064aa9b27caaa f24307e450a43568c8af9c32bf113c5dcff9188b9794f687b496a2d992622861
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMJCmcvl7Vm7r8XJHcaPGJOljC9kNq4m9oJRDzQk%2B2%2BN11LV9KOhmtvpa5Ccoifleh7hsuIs1lNchyPRRdEszZ1zifO4C9SHvWk%2BONGKANDyfJVhf3Upc1kvwSNnSQwFlqKw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994b3dd0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5903&min_rtt=519&rtt_var=8252&sent=15411&recv=813&lost=234&retrans=259&sent_bytes=17479521&recv_bytes=186660&delivery_rate=253008&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13285&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DvrSbls5kEh5mN1OyyZwQKP7Jiov7DwTvd7m2L9fWkKGkh6FlfHhaSjNOHu4WSMiTNgilrGnGw4UOzPQfoLSLP6%2BOPwY68gdPUkKQTn28zqi%2BVvyc01amPm2PNxJGM5EYjOq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994beebab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=519&rtt_var=4512&sent=15570&recv=826&lost=234&retrans=259&sent_bytes=17657325&recv_bytes=189399&delivery_rate=190233&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13388&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 13
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb994b4a62b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7seAOIeN7C37uHTSSXTxe8XZDoqPUn3Xc4M3veFxaTVycuamb8XwUGVg8Um0xEIL0R0Qn3itf8rkkublfplp0%2FH2xGOFDDKSoHbw9%2FrtYAfO8v3XmeT%2BzpIMOrHUNuW7Tm3W"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994beeb8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=519&rtt_var=4512&sent=15575&recv=826&lost=234&retrans=259&sent_bytes=17662783&recv_bytes=189399&delivery_rate=190233&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13391&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bb71bYvmMJMvMYYWL4BVqe0SM65rQtWjAs1pgEGU%2FHZxdwpnan1f%2BJ31dFtHKjyknq8XYkvxlOBnl3dI8uC6qlaWKHP4s6PtnqKOJ8KaqowRGFlYnxooyqvSOfqzL0zhV5UC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994beec2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=519&rtt_var=4512&sent=15579&recv=826&lost=234&retrans=259&sent_bytes=17666499&recv_bytes=189399&delivery_rate=190233&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13391&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6%2FRPO2bTZKSYXcAVPFo71tvvjhRLns99WzAIzE8wpiEwRVXF%2BGKS9KCEpO1LDQco%2BheB5eCc60ka3Whq5uB2YyEJtaRtt6%2FdR%2F4EN2%2FydsgysLMcXCac9dJfpoodHTFg57qj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994beec4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3694&min_rtt=519&rtt_var=4512&sent=15632&recv=826&lost=234&retrans=259&sent_bytes=17730055&recv_bytes=189399&delivery_rate=190233&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13392&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h4tJzpOSIJW9hVVlvojAK9J%2BQYOgxIOQ8aE932BqUC%2BqtzCSyaGLZfjIncdTIt%2FLFgiQF1FJVjfiNQ%2BQar7Q7jYVGrLD2eMX3jzlzTO02Mc0mQTnTtrmaorriVRFDJ8CXuPu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994bfed8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3614&min_rtt=519&rtt_var=3545&sent=15737&recv=829&lost=234&retrans=259&sent_bytes=17855699&recv_bytes=190640&delivery_rate=12397854&cwnd=201813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13405&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 93 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 13
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb994b3a46b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0kaeEeJ6knBW%2F6ia9ebqD0wq0pTexHHfUujhM4ZTcqsfeXzC4z49LIKX0zXvxt4wgSvhVSCvsEf50ddldLYQM67NWWiamDOY1%2BNln0XjxOIgdAKWRxAA3l9%2BVUl2ZSznA0E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994bfedcb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3614&min_rtt=519&rtt_var=3545&sent=15740&recv=829&lost=234&retrans=259&sent_bytes=17859138&recv_bytes=190640&delivery_rate=12397854&cwnd=201813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13415&x=1", cfExtPri, cfHdrFlush;dur=45
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 25 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash1295062cd588a2e5aa02ed898e7b3b0f 32aa3975de998403664cb403c52fa268f99e359e e2bee13dbda6b198aea4d0e8629bbafae9033e8fa095f7db8e0e9652fafc6463
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dJNPKbn47hYHoN7hETVZLUH2bXyEIz6b0XYHdJ%2FVtfyedMLDSjO5fN0zgb1OrSLfiA%2F4WEHkb97NodnNRdpwzGWqR1rQzuSV3C%2FU8yMtd2NYNZHDNuWdXmGTPa2DpVpKn5Ax"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994b3dcdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6585&min_rtt=519&rtt_var=9184&sent=15407&recv=812&lost=234&retrans=259&sent_bytes=17476584&recv_bytes=186614&delivery_rate=1173&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13282&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QNwu%2B%2FUueSJtX3Px5Mq57awOqMRrdR7rzFZLsowLzTriWhpqaTLfJy6kYRVFgQguyeKrQHHtYkRZc8G4gXYs%2BIn8Xu0fGCwQuXiICPvyFOzwEvvZzQAMuVBJYT38%2FQkGWvpR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994c6f5bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6899&min_rtt=519&rtt_var=9126&sent=15964&recv=838&lost=234&retrans=260&sent_bytes=18126951&recv_bytes=192680&delivery_rate=25625198&cwnd=204213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13473&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 33 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash25f93c81fa7b96516888b40cd4b2f47e e1b0af6d113df68899b1da323ede2652a1405225 f9e544b20d292687efd5a6668e1b530b1380a68eaa3d9fd69302c3034ac65fbc
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MOy1GkXZjckPPwsvV5OcaTa%2BYMNTMUmgFW2dsOwSm9T6D5xiwTnGAXCjHTJ%2Bq4Fng6NxgfZH2nzuFmHQAwzHd0zOLSfyF1vdQ2Fl6WR77bRTVK5FnJIw0NNkqSle2OUeZspz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb994a4bf8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9049&min_rtt=519&rtt_var=12888&sent=15381&recv=807&lost=234&retrans=259&sent_bytes=17450335&recv_bytes=185858&delivery_rate=1202&cwnd=200613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13161&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abWq6k3ufysKlu1vwgK1EivC5aTl3LtSTSi%2BwpMLCIyMfgXNpiwgzwoJiSfFuLT3dGv7LpSjcxJnOTf%2BRZx69RQxgbUZU8DgUIKZyLcN5gLGBSSC9NT59RgKp0PfsLEIDLXj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994c6f60b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6899&min_rtt=519&rtt_var=9126&sent=15964&recv=838&lost=234&retrans=260&sent_bytes=18126951&recv_bytes=192680&delivery_rate=25625198&cwnd=204213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13470&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AkZLv3P9gyvARjjPEwDXFhrOT8C2R6BvheApAh%2B4u9na1E5iEnSUiS8nIwZi3S8mpFwDfa07SKdOGVW3VMtqjeih9Rfa9GqbvSQYUFUV%2F4U5FkyCKqNTDJlSlAwBiDEEz3Bk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994c6f61b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6899&min_rtt=519&rtt_var=9126&sent=15964&recv=838&lost=234&retrans=260&sent_bytes=18126951&recv_bytes=192680&delivery_rate=25625198&cwnd=204213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13471&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eN8dVH7PDIeWo6SuAPXaW73eeh7fvkli2KOJny7PrzUwpgrUO7nXB2ZrsrCpPPlpSTt6DoO8hSjhJflSrSXJJnL4hIp%2FuSgVsKkmlsQAtLnkDYxWQshzCR6TY7zL%2BaUJA83P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994c6f63b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6899&min_rtt=519&rtt_var=9126&sent=15964&recv=838&lost=234&retrans=260&sent_bytes=18126951&recv_bytes=192680&delivery_rate=25625198&cwnd=204213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13475&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J7Vr1zdw2TQKVSUj7kTrxCA7WLomzCIn8kHzoetHDJQLKNzeiBRgpSqTrrBIdhShKGm5cF%2B3WeSBdfMNPO14jvjvNopJ6Enwv4YZ3DvCH3ajv4z1SgVIEF5SXcQUxBWqiRut"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994c6f6cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6899&min_rtt=519&rtt_var=9126&sent=15964&recv=838&lost=234&retrans=260&sent_bytes=18126951&recv_bytes=192680&delivery_rate=25625198&cwnd=204213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13472&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ebkx8U9o2uqTTJu%2Bdu3kSR%2BvnfeYGQktdcdoAVtlZDs%2FPlbtxezozArNQfbMybwuz%2Fnkl36xa%2FEg4D%2FLYZ%2BeOUapPA9sIPDUzf4jOZ%2FWbUv6Rw9%2Ffs%2FpV0rURmuS%2B5XJkKUp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994cf831b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13295&min_rtt=519&rtt_var=14933&sent=16011&recv=842&lost=234&retrans=261&sent_bytes=18174686&recv_bytes=193965&delivery_rate=628240&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13561&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WL2fbySukU93TS3Wypv9BchLOe88L4qIe1fdsDKkZgBTB1t04EpfY4jVjAoBNzoJz2pm8CJVEOMVS1G5cILaReqS4s1sdB78Kz8eblq4ynIk%2F%2FUMdx1NA%2B%2FO1ALQ9BbgALL3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994cf837b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13295&min_rtt=519&rtt_var=14933&sent=16014&recv=842&lost=234&retrans=261&sent_bytes=18177263&recv_bytes=193965&delivery_rate=628240&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13562&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8QQQw2yI5pWxUEXbb%2FTSN%2BARke1B7Cw8LkCg3aUUvAzPttUyKt48xfRr7FnTB6aMoDGMs130NAgsniGiVYlbo1EpmR%2BYD4n2cMk2wYzpa5nSiyMNlDx47HbIgV8HsGQ9%2BEe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994cf835b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13295&min_rtt=519&rtt_var=14933&sent=16017&recv=842&lost=234&retrans=261&sent_bytes=18179838&recv_bytes=193965&delivery_rate=628240&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13563&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9iEjEKyXT7KGqDRfChpOC5bKt6b4q7KlElvySUpBV%2FjNaCeOwfJnIrNZVc2QCt2Q%2FIpF%2FDKqdALynFTCHpuX%2BD%2B%2BnRKSN6P8cDdPtZM6eWlX5uOXC0ai8MpO1WYzFkkWBgk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994cf834b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11779&min_rtt=519&rtt_var=14231&sent=16020&recv=843&lost=234&retrans=261&sent_bytes=18181885&recv_bytes=194010&delivery_rate=33227&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13563&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WVZOeSlXzRowmX9qeJ3%2FIXDmB4CMQhVEzT2u7G4zxCQlE2%2FPTZS4f6JkMojt6guK%2FMDAtnLRb9JJ6EGGKwm5wOtH5RrSUL%2FzBuwr9%2Bnng7zE4A9vaxVg%2BGKXxWGSVUMnkPBp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994d9916b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8275&min_rtt=519&rtt_var=11294&sent=16028&recv=847&lost=234&retrans=261&sent_bytes=18186901&recv_bytes=194480&delivery_rate=19714&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13661&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347137
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293528
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337261
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218526
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335950
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290725
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/14664 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash1e5353875c22bf0ef99f0258f1937a7d 9e22924d7d2ac4dbf8148e868b015a8e187b87b6 97a0bfb218d861d3c59df6ce9bad76ec954e4dac9efad879008dea9d2851d58c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /14664 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:32 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392190
expires: Sun, 30 Nov 2025 07:42:32 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hwemGib12OSpSdbN82N67Bp21V4taETsAe6k7Jz4z%2BJxqZcHMgDptsgDxp8Y1duiuVRI1MPLso2CPt9K0teV4HfXbqf%2Fmv7jl31Yi0kj2EzjeEr%2FBN441tzhdLGzcM6B7DoKHaBT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb994f2fa456b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:32 GMT
age: 4151505
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5412
x-timer: S1733816553.831321,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5133
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E1R7BpLwO6IhXLYVcmZNOUOPWDXqbZKslFr5n1WPvRDr3xdcroOrlzGa3WJHPfVbZiFH6j0R3Eei2VLHf2k5SLp60aQjloVuUVfK03vq2l3BxvbZVHhbQir2szTjbV0K11ts"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994fcc95b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=519&rtt_var=2919&sent=16203&recv=869&lost=234&retrans=261&sent_bytes=18372341&recv_bytes=198730&delivery_rate=1107&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14012&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i2%2Fsy4RG0mdtOmY%2BgKbZgNZq3RnntaKjJpCtaTQmu5yOegPBNpnJER1Qdr4pgHwQg9y5wJUjOaxDOFdPKPDlDsjZR%2BAgqKAftncSkVeQquferSAQiJlONp%2BpDUvW1cPKq1Jv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994fdca3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=519&rtt_var=2919&sent=16324&recv=870&lost=234&retrans=261&sent_bytes=18515453&recv_bytes=199050&delivery_rate=1107&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14015&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MS57Q7nnrfvvqaARH4mi8Um94xBTo9kKGAJ2yGHkQh3Q1QBqb%2BFjtmY%2FD4x7sAr2LPejz0eihuL1Hm5Nccg2Tz6SmHZPmYcD7LeDpkRFapBvCfQGMirDpjUBS0OcXMCMlnf3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994fdcaab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=519&rtt_var=2919&sent=16326&recv=870&lost=234&retrans=261&sent_bytes=18517380&recv_bytes=199050&delivery_rate=1107&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14018&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 3.2 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash4bca7a62b604d067e07eed958b29de80 fe37918079bd8fc62728c3647ff15c200d06278f 5e7143f7829d59cbdca72cac60015f3611784aab52235db19f4432a305e5195d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:32 GMT
date: Tue, 10 Dec 2024 07:42:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 50 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash9f8c85414927d457c706532a16ab1ff5 98d21fbbc11f94cc76e23c74dc3fe6757b3995a0 023efb1360c7a1d60d0bb243e15b8813eb35e81f5e501937d7c60aedda93b371
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 12
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tb6nZbVSACsbpiFYvg2v8wZ%2FGcsLp7CQJINdqcnWGdIk7Ln9%2B3cAwDIXDrvGHLq2M6jugzmeABbpZiN3FUH%2B2RTPI8uoISh5eXfdBpz%2Fp0avm%2FmBICvkusmjZQI1mxK3q9Ks"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994e5a2cb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6500&min_rtt=519&rtt_var=7242&sent=16132&recv=851&lost=234&retrans=261&sent_bytes=18308628&recv_bytes=194925&delivery_rate=1024&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13782&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 13
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb994f2f37b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 182 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size182 kB (181912 bytes) Hashaa70e0920b3fa0d56564fb1bbf612c65 12221f0b24b221d98a042a5082e947be03facc15 6cb655824ad5717f5c20ac9e071f6fd077b6d7cf5c7bb88102fb352eea1d2c8b
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MUb%2BEJeY8aTWae%2F2GPcbEXFWk8wl%2B2D%2F5pLfTu8fuFSvGe824qymQswguSkccts3Dp4bsYteW%2F%2BZ8KKJTdOpjkO0%2BhpeoQsWym7LAhfHg1LQwyHCzexqCY08G9MnPtMPvBR3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb994e7a88b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5205&min_rtt=519&rtt_var=6337&sent=16139&recv=854&lost=234&retrans=261&sent_bytes=18313563&recv_bytes=195363&delivery_rate=1179&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13837&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 229 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size229 kB (228705 bytes) Hash2a075feac51623eb9ed99178521af5e7 89b2c0bb22c596504c845c9c17d6335101c7f941 28eb2241dc2b4a155a5e1c4d27b58a33e3c8227126be8c97931b6f7ea9188dd7
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IRDMvMZvZ%2FpstFxC5Ktwjp1ZSMQop63%2F9tMzB%2BSfvexchvkrY08HfNaKrctt7zdRo3zuIrC4MY4pf0XQhLIQoEelXNgQtJCtQ50bUIWd2%2FMYI%2BvVwaIshKSE4GM85RFHTOQm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb994f1b99b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3579&min_rtt=519&rtt_var=4184&sent=16169&recv=860&lost=234&retrans=261&sent_bytes=18342752&recv_bytes=196165&delivery_rate=419237&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=13899&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TG5xsNrx%2BhqzbUH1gG%2FFo9KO%2BymAMzWwKdgWtqBLIxBpyGt9WIkeiHG6h%2FyV%2FAdRQIfN8UZtzA8WEhapgZesEcSR%2Fb%2FrZVm%2BIjdaO7BSSWGZmlN2mgghyxPZ20nHjAo%2Bcs3u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d09b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14056&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lvYM%2B8fvbNZH%2FpFi58AfhsrXpny%2Fa2in5kjQ%2FvQrDjp8rTOdJF4l187CefALV7SrxtjO6WAdTTdZfX%2BbqV67BxD5PWSC%2FAjq%2BOPPdfL5vpP2HIDeXBQw10BtAZpNAWC56Clo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d0bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14057&x=1", cfExtPri, cfHdrFlush;dur=17
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJYvRy6o2FKpuJqVV9Gz6ie1PzSkPiPnOUD9HAk%2F4VG3YIhMkcfr%2F41FZDnM1BNSqrYUoQtGsYCXwbw7ijc7G6TxZJR9J1ra4SpYjkQLoTi7r4ZzkDTDYAWUPP3eMMFnlSSR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d0cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16670&recv=876&lost=234&retrans=261&sent_bytes=18925621&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14056&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X8CycNOS6YdSrIDz6SIQlDW%2FybJmrjCWFpr7mkyf1AW3x1juI%2FT%2FP4ENRSqHZ8sJju%2FYR%2BXfNKeGpjaEhZIkojIxMjYMwZJ%2FVRsLcgENaXz4Wu2nFF4yUWC1F6SEKp13bSXD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d0fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14056&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Nmfa08x%2BjbeuOIfPINkiKwS%2BaZtxUiIOnTc6mc6BHuL6hF%2FrrI%2B8Z1qisw4oiK0f%2FCYnjA5RiC2SlBv9JB5mfviHPZY32v0ttBoaJNJ86jNJuBSxqoF%2FGD5dsjAwO9EJ3uC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d11b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14059&x=1", cfExtPri, cfHdrFlush;dur=15
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WF19r31C%2BKh6Vp8lycgGHNdhtoUgHNwtB6j%2FhsnSxhyqC%2Bjra%2B6EIsEFF0or8aaZ%2BR14gY%2FUf3Fe4WtqOF9JGv7FlroaQS2I396X%2FCoUBsaMxBCfryUuVCSDermc3FPu54Ng"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d14b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14057&x=1", cfExtPri, cfHdrFlush;dur=17
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uIVcWP%2F%2BtaGBQCseVlaG4PlxD5H3s26PMmXx6LuIeydt%2FnLcQSe0IZMvBaL%2F7NeWgkyK3o6AOi0ZfIZ%2FqNMYpEMBo9uQoGLvwkQJDGlv9tI%2BNPQ15zECdy0I5Nf%2BmWJ%2F9dNh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d15b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14061&x=1", cfExtPri, cfHdrFlush;dur=13
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=673sgv5LQ%2F44FM86hoebekQGa5AMkEZPizm9XxEA%2FAF%2Fk4GxItyJcdQZZVuWDbWMPYc6ygYASZMPec6XgBVtJ%2FE4xF6CBfLmRLvyMFLY5W%2B3%2Br3zBNf6du17f%2Br4XzH6qB%2FN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d16b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14058&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yHYEt%2BDfA21hwTI3d15Tp33RFqRV208ImRT%2Bns3YE2Ulta7eEV%2FBvz3%2Felm08xgUAbHFID%2F2DWnmDQZtmTzODSj3nZs3LDxF0EawMqyqIlC55osurqgahv8VIT4a%2FgjZKqoV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d18b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14062&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vXLfBvwAdG1cFgC2lmJbDdN8gGlsqHVslz06s3rB7YAzil6KonDInsl8pzV3hKd6okiegYYa0DGUwPlNg6KBnE40ASblECjE%2FgYkj4d60QJRewz1bKYTTTJLeipqADokhaW0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d19b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14058&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BPTrhgUIyi%2BdwUtd7gp344rxI2vW5KLJYD3jvPZ1Z8hu9au1doirXh9SVsYyUNCoKq4sGH9Ue%2Fx5Hs2VfO%2FOrwyJMECDs%2Fh4531uJkypsRq%2F83kyaOa%2BPTKkdzVKYxyYVE67"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99501d1ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3434&min_rtt=519&rtt_var=2044&sent=16676&recv=876&lost=234&retrans=261&sent_bytes=18931806&recv_bytes=202359&delivery_rate=1937197&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14058&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4alQcGtWXY5LzWY3VU%2Fvv53EMsFS675ze%2BmKqT%2B0d7zuv4CYlki7K4%2BkkrmrSYfx3aKXIiPLnR4WtgL9RVBJxgyCCSFU8eiB%2BBoir2lOE6HCWf0NtXM7syfwnC2SVbIixO0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99503d52b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3653&min_rtt=519&rtt_var=1971&sent=16775&recv=878&lost=234&retrans=261&sent_bytes=19043019&recv_bytes=202722&delivery_rate=5509812&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14083&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8rzXVWcM%2Bu7BZewFQ5%2BYqfteMdiOcbTYzqgRz8V%2B5xD%2BXT0jEtzyRWl5gytUb2Seza24hHRgOy3Nmxn0YAISj7UMxoqsNjJ1kfMO4mDGWuENiSn55P5sv0GRlmqOtUPIG28D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99506d94b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6745&min_rtt=519&rtt_var=7661&sent=16779&recv=880&lost=234&retrans=261&sent_bytes=19045096&recv_bytes=203086&delivery_rate=7554435&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14114&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6vsrz6%2BywXjguH%2BL8idCln9b0dCF0aLd%2F1572iM8jCd7nwKgXm6Pw5fZiH0aoNStmw9cAiikDPt5TfeQBO6J5sy5m3vuaypAng%2B7Vf4unOSAzlEy2bL1aD7yae2ySDnhVD5p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99515ed8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8152&min_rtt=519&rtt_var=10957&sent=16785&recv=884&lost=234&retrans=261&sent_bytes=19047751&recv_bytes=203563&delivery_rate=1166&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14261&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347138
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293529
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337262
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218527
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335951
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/81408 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashc11d068539ff2222eab3b3e5eb97c859 585fce5e37da659efb1cd7925516bf908772794d c07d8f611931f4581d9cb774c4b0a0cae0301664d693aa033b5240384bb310fd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /81408 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:33 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392191
expires: Sun, 30 Nov 2025 07:42:33 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mWmETLSfCSe%2Fic2Ju%2FONPIzoATUqQxDm7dfNjAdWH90od4RGD73E3b2YD8xneeqWsWrQ6twDjD68HaGkjCqjXaaNFYAlYWLzQu66rjFKiTjnRcocWsfirrOr5wS5X2h%2BB%2BmgLVBw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9952cc8056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:33 GMT
age: 4151506
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5413
x-timer: S1733816553.421752,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y7wJ2V7LznWaZLbAYVYkGorqoUaAi1xhNuTDs4zUzjlaxoWiwj3%2BAADq3PyP%2FO6QvJ%2FIzG8nj6DCA8oXmr5cY1tBOjWreXfhE8%2BZKnM0%2BS77drmKc1LpezWhXKj6zfVfpnoZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995359f9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3358&min_rtt=519&rtt_var=4058&sent=16955&recv=900&lost=234&retrans=261&sent_bytes=19233047&recv_bytes=206193&delivery_rate=1145&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14575&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tRFm5NfY16W5j3GherlJMY4s9OQIJFLC7WlNOsm9crMlCnnyaFOGhL3u3oz9WwPx6bqUSGSpdozhqo8tuTdwMjYEbqDkA8nZUrwG%2FyqLm8zDVRaClXPpjE0o4ImeiGlAMvrL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99535a08b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3358&min_rtt=519&rtt_var=4058&sent=17062&recv=900&lost=234&retrans=261&sent_bytes=19360907&recv_bytes=206193&delivery_rate=1145&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14580&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 26 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 14
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9952cca2b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VU9VZTvY%2Beu%2FMNP1MFI%2BiLj66Cwg1uwDyelDZuCY8accisrn3zXD%2BE3V3ZXCwMeuBNx6KC6%2FekCCNc%2BQATRoA5yVGPMxSy0e6jBh0jX7OPvs%2BrmkNNlVaevK%2BDv%2FBsdlx3OG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99538a5db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2744&min_rtt=519&rtt_var=2084&sent=17086&recv=906&lost=234&retrans=261&sent_bytes=19381907&recv_bytes=207291&delivery_rate=331580&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14607&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 26 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash44f13b9aa187c3c90c60e8eccadcf43e 1222d7b91e9b0ff20006afea4a6b891396f960c3 6e11b80ee70f5b3c9499ff4b7092dd8c48397c025e346e89ffb827854a109f0a
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xe%2Bmoso8KtjGusDf6W3Tt6Xrmz6q2DUlE2VuXU%2FFHAw9HqLkifnk0TOnxH8%2BVs5IgJwMqHvLpeub6OSNkjUIv7TlIrf48LtZ4tYxqoQgwqj0tbgdFv9jLgcTeNwdJJP%2BuMbL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9952485fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5418&min_rtt=519&rtt_var=7191&sent=16896&recv=890&lost=234&retrans=261&sent_bytes=19174402&recv_bytes=204408&delivery_rate=1152&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14440&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m28O6shoUtcUaVIFzGXoJRDGJjL%2FA7VChy1N3QqsOzFS4VrulOzrryr1Oj7fhVz3rLPVV9lUItcYAlUsNO8P59bD45ALoRJUPFTdSJlpaZLjMiKSKhescmaBgO1pjGGb0aQK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99539a9eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2309&min_rtt=519&rtt_var=1577&sent=17098&recv=914&lost=234&retrans=261&sent_bytes=19387563&recv_bytes=209029&delivery_rate=198530&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14625&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wcHCAGMu6POcaTADvvg44pSDhmdp4k7d77WBcesLzZX94bLHNtqDtE6Zkxu9hMXb7lRWWGU%2B8GoYrMjTICBDj0YXvw6j0CCxEWzggiIgyGtoHPiqYGGbe8TMOsdWM8ztkmr6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953aab0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2309&min_rtt=519&rtt_var=1577&sent=17217&recv=914&lost=234&retrans=261&sent_bytes=19529606&recv_bytes=209029&delivery_rate=198530&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14631&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 203 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size203 kB (202916 bytes) Hash7ae43434768a7b4e3506c9fd1230a6c0 bbc1ee97a4833afd5a9072f3c838f32309a1c82a 05f0f52177f7a1aa866490cb7ea797422dac2f1743acfd2cbea5e5ec25dd858f
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SgVDbyrP%2Bff8sULArnTiCEEJXx9DyOLdcmLtdT766wbJY%2BX4OqBETeXD82uvA21mR3MLceXxIkfPcf0QjZEZ2hovYLG%2BKueCH%2FcM6KdaruwAxnkP9c1XI2%2BJl8YU9jXBDAn5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9952b922b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4423&min_rtt=519&rtt_var=5770&sent=16922&recv=894&lost=234&retrans=261&sent_bytes=19200651&recv_bytes=205122&delivery_rate=8175931&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14485&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 102 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size102 kB (102216 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6lRiE5yJRBS8gCGM3E0s6xGxParLUwoUnzldoTFsObNnXcFvgj5ztF2G%2F%2BVWogsBNFHfP4ZU9hxU9qunFXAFfkakjyKH2VHAH5feIYEtR17an7%2FHUFrt9nX7LKhIyFLvByCq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99522826b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6763&min_rtt=519&rtt_var=8610&sent=16889&recv=887&lost=234&retrans=261&sent_bytes=19169469&recv_bytes=203966&delivery_rate=1152&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14387&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qATcvehSWSurF89AFS2TqozrMQLJat4tpHMvUsXcXHphNj0xUjJ3Ai4fIMvUgYfhdCW7H8lqHhTWdLGb4aTlnPBk9KYB9M2UtZQT%2B9WUiiFieUPgndV5%2FK%2Bbl1Msh8CmPMty"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953aac3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2309&min_rtt=519&rtt_var=1577&sent=17272&recv=914&lost=234&retrans=261&sent_bytes=19595351&recv_bytes=209029&delivery_rate=198530&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14633&x=1", cfExtPri, cfHdrFlush;dur=35
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HEZGjb5Oa4VKkfjZqUvsExE3z5M5Vl5jsnXcmFkXYtdjOlfL9pMuz61SkY8%2BK5zenvJi77G2iV3vs%2BKqZ0oShQ8D1wO%2BWkrZdVF81xKg1yya8FM5H9QsE9McAxARC%2BDe9D5v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb2fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17499&recv=920&lost=234&retrans=261&sent_bytes=19865046&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14677&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l10W2nC6seA8INd%2BHrWlXnLzxh1kDtdOK97DsVS1loC8780cKVUxvM2oSO%2FSjNGliO8Xio6SaCja3KGz8Fv%2Bdq%2Bq1SuMtq648HeC%2By0Je32x90IPhHTcqJMTms42kJ1KpJoa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb2bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17504&recv=920&lost=234&retrans=261&sent_bytes=19870052&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14678&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 22 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 14
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9952dcbcb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 21 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hasheea6d64ac9d51bacc4a98c95a0124734 34cca9c6ec44ccb62249de5c2d54a03e94e53e91 93a08a19711ef65f9c6232151011f3ca9e67d29e6a12b0c33fc7cf071ce277b0
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:32 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VF%2BX3dk%2FZGJ%2F8a8bYPb7Jw7rdvLHw2E5hgnkjQJR%2FEPlL1c4nvYUV%2FAV6MyTs%2Bk8QWclEZAC9J5xYPzAuDyoIpSZ5q%2FRANMx9z3NJAeSrLiXyazcIMFChdCEK3zQ0zBGe2ss"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb994f4be2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3233&min_rtt=519&rtt_var=2919&sent=16310&recv=869&lost=234&retrans=261&sent_bytes=18500192&recv_bytes=198730&delivery_rate=1107&cwnd=205413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14013&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Ie5KUZ2zkqsD1GXDbQT8tJjHupntu%2F4IPc1crxmfAfAfJLor0sA9ku4USt0%2FZEambJTUxSQzcp3ay1Hp4QxU74PvWjiC1ANDKChae68cZj0MfEMTVH6UAoz325C2yLrrfdY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb32b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17518&recv=920&lost=234&retrans=261&sent_bytes=19885560&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14679&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h8k5m8ltjqdEFQvPzs2FbhaV40nxPj01fUEIUG1SvGVyKIYLP6XtzEQbLu1LdSMEtRCcRTobc8Jgug4iHesKU3D8sX82RM0n4e2VGa7MHx0uwpUib6X%2BiuZcGi5%2Frs1DbmXz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb33b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17518&recv=920&lost=234&retrans=261&sent_bytes=19885560&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14679&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zH%2BDhUBsP6WtOyJ9teWWMJjI5qnZ2qgqMajy2c%2BPJmr2ibP95q0I3M0uEz9u4W3AYa9ZHCN3%2BriMMRrLzvzLjF0Qst6VDSKjlQRLnNYEXQFj8Wj9N839kYUScqMum%2B5umPqg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb34b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17518&recv=920&lost=234&retrans=261&sent_bytes=19885560&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14679&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUlwafq2WbtUTgo1%2FTAE7cHupHlA7q5Vm953ibGwTx8nbiTwrDOTvmFVeeZgJ8fdyZ%2BbPQYz4wVFkPiellZqypvYDCZOh00UE1dhXs%2B9Gj7ni2clD2zADj%2FQ63SBWxnLJN08"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb35b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17510&recv=920&lost=234&retrans=261&sent_bytes=19876848&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14678&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cR%2FTeaBftk41A6txjFoVaAVi866IH%2F7BwujOy3NfBe5uRA9Ed9cuAwWuv446O68ylf7L48xGTeav%2BCgLhb%2B2tXKZ%2BbcuAPcEBkfr4x23GH8IXQ66pfUZHGsnjY6BZx8Q5FDi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb37b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17522&recv=920&lost=234&retrans=261&sent_bytes=19889984&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14679&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cQ4rbB6VWlCTPXoWZe84zJZF2oS8kSBnrQf28UzGYHsBNKSSc7kY%2FFb81aNRilYwLo0ZwHc4LPyiAcI6etC3SQ3TNZvkuCLtPn4BX6%2FR%2FhUSm5%2F1VOBSQeSxdEXySwr8%2B8ut"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9953fb38b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2937&min_rtt=519&rtt_var=1981&sent=17537&recv=920&lost=234&retrans=261&sent_bytes=19903927&recv_bytes=212053&delivery_rate=5821449&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14680&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qHfOHuwY1WSFp431nBEvbTZ6JiJEAspBbI7r3730mN0vXzCa1PMQO1%2F%2B3j9PFdSPxRlVpAIfZ%2BFoWbwVJPswlfIZqRf%2BbzQZzXqHtwNjsAA1k%2FPcWqiOvF5aMKRMv1qz00xr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99546bd2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5172&min_rtt=519&rtt_var=5219&sent=17544&recv=925&lost=234&retrans=262&sent_bytes=19907270&recv_bytes=212555&delivery_rate=1142&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14778&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KKElf7CjfYAC76L%2Fw3Vxk%2FG64nMiqNuX7oLUMeGZE8cjrBZgdd9GZogED%2Fm%2B9ru6RSpxYhBsP%2B1D7XLCnM5ddoQMD8h10iZx7BtrlgcsxuVzsD4ZxBhAcfZWQckX7pBqH5OV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9954cc7fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4220&min_rtt=519&rtt_var=4584&sent=17549&recv=928&lost=234&retrans=262&sent_bytes=19909899&recv_bytes=212984&delivery_rate=1182&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14821&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347138
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293529
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337262
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218527
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335951
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/36523 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash8f9a5db9cafea5a6a06d02a8fc7f7cdd 2930606d7575c331cc73d5a5cc8698368c567500 2ac90630386e55c1edac436d143e97ce029f585f27e4a29d750e75ad66e6dc6d
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /36523 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:33 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 35 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 13
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R9Fj3MlZ05ABnVGa2KIdGGM2gmWdUyY%2FxCq%2BCv%2FW7NwWW2eiIdcJYCcoRhaToH%2BB90FpvO7NFoimqH5g4Dzu07mmgFcdi6RMQxZvD%2BYw93yNnhisH4tC6QygtSXQpYLmckzo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99560e3bb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5084&min_rtt=519&rtt_var=4219&sent=17653&recv=931&lost=234&retrans=262&sent_bytes=20031621&recv_bytes=213387&delivery_rate=835&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15015&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:34 GMT
age: 4151506
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5414
x-timer: S1733816554.110793,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I2QjXi7crVATXqz5iKAxtU3o8QiF6ELsxTC2Twh81kX7O6IfFodWYP8oVc8Bg%2ByFn7KeF9C7xJ7K9iBWKGmY%2FE00ulI1fXf3cAynFO5yMI0IsNLmnCHNTjGfTn52mLL07RAn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99583922b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2508&min_rtt=519&rtt_var=1677&sent=17738&recv=948&lost=234&retrans=262&sent_bytes=20113709&recv_bytes=216073&delivery_rate=2603511&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15359&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash250c0f0afb1b145f1f8a00ff8cfdc0f9 5dcc440bfc8f7a8ab0cda34c3afe24f261f47554 528ad28a89c77fa547a335b9b301bc6fb216629a9da03d22555bf89a1ea20a76
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TuJkZmNcIi1D9YSj3%2BkQ1prlrDER5jA7VXSBM1RFcYYEmammPCJUwp4tp58qV8cgdS%2BDSemfUsvETeBc2IpPh9XlBsWaJ5NNjnP8JDzV9XVb29MpxhkYgSS9nBy2x2DVIcH2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99571fccb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3094&min_rtt=519&rtt_var=2664&sent=17691&recv=940&lost=234&retrans=262&sent_bytes=20065772&recv_bytes=214640&delivery_rate=289299&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15179&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 42 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 15
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99571a5bb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QXgHFnfrMdLVboFmaJlyiLleGlm5k2Ql%2FqINIpgzahYUmJk9yCISzY0KERH4Uh9rILGJ02yltD5w4RG4Fxk0wmTBTgh7o1Ec%2BZoZZUITJTs0osgvie%2FvPoPN2OM%2Bv307%2FOIB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99584938b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2508&min_rtt=519&rtt_var=1677&sent=17851&recv=949&lost=234&retrans=262&sent_bytes=20246779&recv_bytes=216664&delivery_rate=2603511&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15367&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 15
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99572a72b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yMvgC%2Fqlevgt4rGUA%2F7%2BK7AgyWabJ3tvCMh2Jo6CD6sSZyaPopgfvmxiU5nT%2FMySwGj78GE6COiP6jsODrmyYZFs%2Bkuhc%2FpOy8kxqSvFY%2BoxmYQxA%2BfSsyZbyyD8GxgaQGao"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99588994b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=17863&recv=956&lost=234&retrans=263&sent_bytes=20254042&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15406&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 136 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Size136 kB (135453 bytes) Hash524c9415489f3160ce09ac56c670e504 20e8fb6e7d0268701267087d0fd95ac3618c752e 0dac618035306f1624df7a8ca7c537ee41cbc5b0478b042c2d47cf653d00723e
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:34 GMT
date: Tue, 10 Dec 2024 07:42:34 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MbEpbVT3hgAz8JKn61HJscVCbesSx8JwXUyxaON1WFvDwmEYxTykhk8%2B9p0dE7RxjIJRRHO7PR2AWrAvjkeJVXe6cD%2FFmg9FdFuEBplU1cOOeq6SS7saD6aROrHAVW5ZgNRS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99588995b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15410&x=1", cfExtPri, cfHdrFlush;dur=50
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 72 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashf7a846535d7d872f88616506f0fcead5 19ad65f3111f35e6c8fb441880fa4e51c56b9326 901126ca4b9f101b21a7126f2944c7a181d27ac1b277dbb69f7cadf70ea92400
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PA0PsdM9%2FrEhtIVFbx79aOce98Ctjg3ctQOyeFRpNesvcqK6QpQBrQ152RMdnZRTpefll4mHkiMvjlFQZbtHXOWzcBZ9obME0avvvHAj7zSk%2F5UkFgZsUGlvvw0LpjFRSLAI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99570fbdb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3351&min_rtt=519&rtt_var=2865&sent=17687&recv=939&lost=234&retrans=262&sent_bytes=20062838&recv_bytes=214592&delivery_rate=1117&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15173&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A82hcm73dey9qUeyc8f0b2tn5eONXhq%2F11YdPVKWhFzL5FpOwnmsNtmmPdDU%2Bmwvua2O2ysogWW%2BpDbEMbtt%2BNV%2FNOvLVeYoppCUgSV4lQBjXBehrgQg1BX%2FS28TbQMTEhmC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9958899bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15410&x=1", cfExtPri, cfHdrFlush;dur=50
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 23 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash06cb0d8e82c99022f9160e8cc6d7a8fa 7fbfb3fa94a531c71e0fbde0831b139f78bb27d0 635cbb7d630e4dbddd90442a2ffbb38eba723b9d750d309046cb9e350a133fe7
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:33 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FuKEhPmKiS6ohv%2FQPFqzX5KpANolzPlj3P0H1C9h6l4Z2qbm10LSX633HMok%2FtbBeoNmF%2FeGncEIr8SNyYob7FYyPO7xBvJdzbtFb7e6Cb%2FoDUehTSdXPpDPh8FQV%2BHBL%2Fml"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9952f971b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2744&min_rtt=519&rtt_var=2084&sent=17073&recv=906&lost=234&retrans=261&sent_bytes=19366674&recv_bytes=207291&delivery_rate=331580&cwnd=207813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=14605&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FhE8mJuZQ7DQuHYrVzUFLeShOTda7DunfXPGJNWu384801r8QdPeEoxkVkTFfAv0EJcyz4Y1MFrPK6L1UIchwCEE3V8HHjfZGNLX50QGpSi3Pd5mW4an11Lct7KLfjRfE1fN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9958899fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15412&x=1", cfExtPri, cfHdrFlush;dur=74
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FWRAkb7YfxDa9vV%2BHqY%2B6hYu0x4vCEmCljKZpjVMwigBHqwiLb84pIjFyhoxv%2FyDjFyl4%2B3sQfWg1V%2BA%2BOirNF%2FCetXk8wNUBLQfmQhQJQ9Gylv76xMbdPs8iDwPmQtedugU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889a3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15412&x=1", cfExtPri, cfHdrFlush;dur=74
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VftedYA5N94%2F1kPuRG%2FYBoszhsY41AT440%2BD%2Bq4gIfHa7d3qsT5wdw%2FMg93g%2F79LU4Yp3mesRpHxynCdJHpNvIolStfBfrj2%2FtEH2d4dqTUKWd2WnMH5tdj8GqkTv%2Fx6xvHA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889a4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15415&x=1", cfExtPri, cfHdrFlush;dur=71
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BeDufm2YNYarSM7tkvY1Ohcuuv4Js5DiCDA9p6q3ENqtxMMEBhXLj622DNpPjGG%2FHqh8iJNcGX0L8HnpzfMuvJuXQR0ffQ0qZK%2FB1R0%2Fm4ixbifNQksSyRWrV2Ci9PaEAkJs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889a7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15412&x=1", cfExtPri, cfHdrFlush;dur=74
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=37YWxFLnPrUwodut%2Booz8hlnWMbWW9Ez%2BdLiDkqUuMwbuQhlhIrtvsybAgSlVsMRqNtCHut7nfyjaSROu6egbOUGZAENBvM1Rd4M3yCqQTmkOWfTaX5h09YxYckcJPxON4MQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889a8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15415&x=1", cfExtPri, cfHdrFlush;dur=71
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvSzrdmubBhbDCeJtI09%2F98BKPUnJ%2BEi%2FJSDszJjwaANPowd%2B4v4V38AdxM%2FdU7VKuLUpgSCrPum9SA3Vt8c2t7baRURLlzxuBtoTQ99EOP9kwIko%2F%2BTQnSWXmgYCp4I3Zto"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889a9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15413&x=1", cfExtPri, cfHdrFlush;dur=73
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4GH3WIH9EzWZ2lHsSZ6Gu7I%2F33wqNuCKbK8zu6qIh4y3CS%2FJ9hk7ull%2FPzq%2Fq8ry9b3TuKJGjcDpDAsaBcP%2FJrMP%2FpiEaRMEzdeu7C8u6LQV9b8mRNQXHOOE5bxJReD9sV2%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889adb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15414&x=1", cfExtPri, cfHdrFlush;dur=72
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lo5feIq5e5r9j0bQWiiEALiigwQtg%2Fhc3xUE1Jj7wNCOij%2FLhbfvdcGs644%2FZzktyzIi3VOOfXD3UnFkoojvKTBs%2BfEvwTXZG6CY1Ck6WNYPSSBpKXVawIeHFTg3LuGoO8Ah"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889b0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15413&x=1", cfExtPri, cfHdrFlush;dur=73
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xI%2FibHbQh%2BvEDdtXllE54yz4lTzEfBFpokB5wCc37LKjRk7qdeNjg6p1afrGtX8glHRE1vqhW52N5ihYBHgmFH%2F%2FsjIDCG5LG6Vha60jPPJcYAJqEy9GDyqZCZcxdaWCM%2Bba"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889b1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15419&x=1", cfExtPri, cfHdrFlush;dur=67
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2FpOWoDQsEWUxO%2FyUj%2FIt1PhTZnw4wcYD1BPDlNnIRKVx3LvJ4UDsqzgJpv9BV7H9dsyTS%2FgjKYVGNkZ4H3ou5U%2BYBCFNDc%2FO7zqHuxUr1lzrLDSjqAPXWk%2BxBiul9%2Br68y6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995889b2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3599&min_rtt=519&rtt_var=2702&sent=18040&recv=956&lost=234&retrans=263&sent_bytes=20465455&recv_bytes=221423&delivery_rate=42422&cwnd=211413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15418&x=1", cfExtPri, cfHdrFlush;dur=68
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sU92HlLCuc0L8P0UBQWgN3c3kzkfTn0I2HJaVP8mkESxgCwsmpJINShTfpyN1VFL3nzPHviOyfxDqVWQUTe6%2BHuO9qolqkCwUWUlrxaoKRD4C%2Bf6Is%2FfZHOr8PYahJOrVwmK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995a1beeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12990&min_rtt=519&rtt_var=12201&sent=18309&recv=962&lost=234&retrans=265&sent_bytes=20774325&recv_bytes=221995&delivery_rate=17264&cwnd=213813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15658&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347139
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/72599 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash53c46256ba975c4d4169dfa83b62236b ce7442eb8f802cdc170f3ba7ce5ede0b129b8a8a 7cc5ec915772efe75421bd9b3d81b3f74d4576d35607d9a3c446e08b80391a5a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /72599 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:34 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293530
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337263
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218528
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335952
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290727
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392192
expires: Sun, 30 Nov 2025 07:42:34 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G2UEzjEHNBeJQkAZh22ile2MXekYJwlIDboxuHVXbzwXQp%2FrW2ApILkgBCaaPUDvA2jAmaQlJ9JiX8KqajxESas3KMJsi10ewyta2NoCCK0a1taVF88jw8eBws4We0JppYVxChnR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb995c786156b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5135
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 59 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 14
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bCC4N1etJ8t50y4Il2b9BMwvgKeduO%2BkrAMfeDjHUPtIa1Vyfu6BgxANpQBiEA7%2FJ4XvCVfNdIdc923t%2BdJWYfwVb%2BnVnp0DNIQgfsl3Y%2F6uSDXxc2KoRl8Qb8ZSl5Q%2Bmq%2Fv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995b0d3fb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11895&min_rtt=519&rtt_var=8630&sent=18413&recv=965&lost=234&retrans=265&sent_bytes=20896047&recv_bytes=222398&delivery_rate=777&cwnd=213813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=15813&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VqQFpN5xLczzQZpXG%2FY8Kkn24vEjqyAXurIagLuTrBoobjzdsVqhhWc30l%2BwPmWVIoitLEA65YjUIi9VCvcr%2FMpGJzFKeV%2Fe8B1quR1n2FPwoyozuIxXYX7QOjNbsF38osWD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d283db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5687&min_rtt=519&rtt_var=6367&sent=18482&recv=982&lost=234&retrans=265&sent_bytes=20959694&recv_bytes=225617&delivery_rate=2773&cwnd=213813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16154&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 1.9 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash0b3fdf82badbe8344c4df65f57db8572 8c570ff9cd9538e4f5072e4ba109ad3fbd1b2a4f 4c53a1fe7e5baffbf7d817cc75d1f4356d0f5d5bddc61f091ace616b79a9aa7d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:35 GMT
date: Tue, 10 Dec 2024 07:42:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stqtD%2BcWXpeji5R2LiLIjFviaZDFlp%2BTg8YCcxXBpI4KUoW9RaXBAvFpJbGdOmENcr8o8w2AuqtEtmyQ7emrTyuoDmYApmFcLSX8VY1g7Np01EdmT2R%2FYVlCwi0bnrfpbPc0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995c6f29b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7900&min_rtt=519&rtt_var=7179&sent=18449&recv=973&lost=234&retrans=265&sent_bytes=20930141&recv_bytes=223603&delivery_rate=1150&cwnd=213813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16035&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2FqUg%2BpIjimppvA8cWkeOodFaihawGyUPh9Jg7p6To2QDp2nkCWNDIZ6h2OsMaDxvvxgtdodITkj0fqSU5ABb7Cno7xcwXc%2Bo2PnuEDVsqOFbCBcqsPUMSz3f45eziXOAOuf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d384db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5687&min_rtt=519&rtt_var=6367&sent=18595&recv=983&lost=234&retrans=265&sent_bytes=21093209&recv_bytes=225937&delivery_rate=2773&cwnd=213813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16161&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 149 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size149 kB (149074 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 15
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb995c7fd9b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x3cz7Xr1OY6AUmLMpcRcx%2BjbqbGOABib02bpBP1r7AVPUmsPjj1dupKUJitceItfDFEtjb1tkzhRb8oPGD7hn%2FrtZ0dznRH3srIlWEHz%2FknZOEvdCI51J8qAbcbj%2FvaEbwMd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d384fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5687&min_rtt=519&rtt_var=6367&sent=18608&recv=983&lost=234&retrans=265&sent_bytes=21108467&recv_bytes=225937&delivery_rate=2773&cwnd=213813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16164&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rW10Z%2Fl48Vv1Sprb3EplrCB96Q7pzhhGZFSfAHFI0wevy2gWpdVGluO5OyYED54CbNuAf5b38arwzB2K4qD%2FYLf4dxibU%2FYuolMiIPmh5le9U9gBIn4IBMphBHDGYGpsJEPi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d88aeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5805&min_rtt=519&rtt_var=5779&sent=18737&recv=988&lost=234&retrans=265&sent_bytes=21256037&recv_bytes=227278&delivery_rate=93819&cwnd=215013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16210&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n3bcLdHw%2BvlKWk4Z%2FUoC%2F5%2FTXDOmUnf8qCsToRBQB6dwZQCbVgpy23LW7zC9qyD8CyxDWL3SzaWdpsHLnThyWDuDT1tTTGse1Fi7VDvj%2BQOwinLjawGRWr3TaFWYdPg1%2BlMS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d88afb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5805&min_rtt=519&rtt_var=5779&sent=18757&recv=988&lost=234&retrans=265&sent_bytes=21280037&recv_bytes=227278&delivery_rate=93819&cwnd=215013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16210&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CXhT%2Bk%2BG6VNW4jxx7tliNS2G3G3P0Wdkt9RD7oRdTMvIBUhUx1DAHkqzmIoh9oh%2BK9d4i%2Frgi6SHVyZo%2FSwnui225xG%2F5PdMhcmvoXwwzmXSKxOkbGVw6ISCV0FOwvaeE54D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d88b0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5805&min_rtt=519&rtt_var=5779&sent=18767&recv=988&lost=234&retrans=265&sent_bytes=21292037&recv_bytes=227278&delivery_rate=93819&cwnd=215013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16210&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOOR7uqzwOAxbBvt5udH26tnKqurOsdcYZJUWR%2BDr9JSFvyZL6MPh5zArzTd6RxYxPnDZzVQqCPRujWOu%2BCS1ccDS96tkmwHY03Hrxx2EG7OnF%2FffNY8IPRwuxb6YyRdOJLa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d88b1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5805&min_rtt=519&rtt_var=5779&sent=18829&recv=989&lost=234&retrans=265&sent_bytes=21366357&recv_bytes=227594&delivery_rate=93819&cwnd=215013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16212&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znVjJoNY8v10WMPTenjuX2feejgDWu%2FaqgdklwNlwgVwgyi4ksyLnN85rIRg4dX%2F7sTHr0l7P9XmXBXfxb%2FCECA%2Fnunhpk8Rf5TWdValE6Y8Em2SIMGY%2FOTAMlesnMWMXpWp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995d98c2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5805&min_rtt=519&rtt_var=5779&sent=18917&recv=989&lost=234&retrans=265&sent_bytes=21471025&recv_bytes=227594&delivery_rate=93819&cwnd=215013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16220&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2BhHeiw5cu%2BppPSnpX%2Fc3sioRfe2Uyn9BXOjOvByn6znEO418T9HplRaE2b%2FyiaLAtYnD4sSr8k433Jc6Ebn6Mc8s3zMydpE%2BrIfTraWlIUU1DgYnSYLH7%2F83AR3Tx8UisTc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995de934b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7448&min_rtt=519&rtt_var=7621&sent=19025&recv=991&lost=234&retrans=265&sent_bytes=21598289&recv_bytes=228790&delivery_rate=4537652&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16267&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHJs0IpvkCGW7I1s4ThjqKE%2Fs6xnm4HU5MlE0EZ8JlQbLjUgDq2OG37LmCpy9jKbwRpXt3XAwRyR9k71L4xdXbWJzPAdFznGltq5u0BVQz79ErSQxyJX8XV7JA7Tz2V4gBYa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995de936b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7448&min_rtt=519&rtt_var=7621&sent=19033&recv=991&lost=234&retrans=265&sent_bytes=21607002&recv_bytes=228790&delivery_rate=4537652&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16268&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jpN24i%2BUT2QdNfxcnYq7PmXNqYoaKRfVN%2Bdu1KLb8AL1yU7CNUGPz51LabpBoN%2BR93%2FC0Ft8l%2FKbLOgQv7gM%2FT8miBz2VURW8VlWbJfG8dd3CzNQ5FNOvvAamoxZDu9sqc5o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995de935b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7448&min_rtt=519&rtt_var=7621&sent=19035&recv=991&lost=234&retrans=265&sent_bytes=21608706&recv_bytes=228790&delivery_rate=4537652&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16268&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ROz8mzrIFjXvCCKfDS%2Fewq6N3MdbqKMI0R8hMLPkp0vCu72yMOUngZPkwGk0RJ1q5m7AbIJtWWd0UwvUJ2CD9DCNLrQ1vV3oHzXS00IOiXpb8FoSkpaVKsY%2FAq87XBEwJwrZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995de933b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7448&min_rtt=519&rtt_var=7621&sent=19039&recv=991&lost=234&retrans=265&sent_bytes=21613133&recv_bytes=228790&delivery_rate=4537652&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16269&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ogPZczIEy64TRxlsi7b0MFjj7dzfYF2xoca%2B%2B3B7q7QytiR41RVG5uFfeS5QxohBsDa7xNm2VrYlCa3SJ1S%2B7fThZCRD%2BtXZBmYz7%2FuMTiovVRiNr7iG8EVdCjjsMeLC8xma"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995e39a9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9067&min_rtt=519&rtt_var=10452&sent=19047&recv=995&lost=234&retrans=265&sent_bytes=21618216&recv_bytes=230628&delivery_rate=342519&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16323&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wdtJdO0497Rd329dd0WN6nicTrCXkRgJdMmnZ8bwjaieBhoqFaKti0NIXKKCIzLRDNVwUuMmOaadqn2DjhlLHBF8E%2FJZaDn2pgIH2MDJQ8ZBhgghleFSwNbguQkK3D%2BkiaEE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995e39aab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9067&min_rtt=519&rtt_var=10452&sent=19050&recv=995&lost=234&retrans=265&sent_bytes=21621006&recv_bytes=230628&delivery_rate=342519&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16325&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S1WMbzIfGMk4MDP6zZHMLnz6AN96sLo%2B7%2FRq%2BYd4NiHUY952kI268jAgACXAsbSefeBcNWVGMteXo02fOLA5PaH64sCIUTaTZ4P9GHyX2K0jzObOwknIXlxDw6eqExhyXa0D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995e39acb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9067&min_rtt=519&rtt_var=10452&sent=19052&recv=995&lost=234&retrans=265&sent_bytes=21622954&recv_bytes=230628&delivery_rate=342519&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16325&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KQbfe6a9yJ0YPeFbPKa48rAGX07kgqLJkNQvMYt2K63TkKW%2BQqgYzLFXrBmlSqi4Ds9Y2Ia1JHPdo8WUiGGPHuzAWX1Ddm4xcD521bJbUz6TDMm7Jo0YwCVFecufo0aQFG%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995e39afb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9067&min_rtt=519&rtt_var=10452&sent=19055&recv=995&lost=234&retrans=265&sent_bytes=21625519&recv_bytes=230628&delivery_rate=342519&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16326&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a5JFFS910dcURIgMpPbWVzJkbZqJ6wIqX%2BwXtzt2nMbpvoc35ZAuZJuyPfthEgyNvcwmOj%2B03u%2BhrElIl3M%2FZuDsbX%2BilxSdObOV0HT90SJLGpf96EfnWwQfY6qgP%2BcFygH1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995e39b1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8108&min_rtt=519&rtt_var=9756&sent=19058&recv=996&lost=234&retrans=265&sent_bytes=21627563&recv_bytes=230676&delivery_rate=238188&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16327&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7nwa7A3fuP%2B3bx66Q97PPCt%2BPn99hzX%2BCfFD6UvAQopH0m3zWUcrCFvzHllEKnhYGWH7atSOqjLIJZgsyUCZW%2Fyy6WkmFjCvD3kjlZjl%2BfFn%2FCB4Tnv4uymoGtH%2BEy%2B2BCjL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995e39aeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8108&min_rtt=519&rtt_var=9756&sent=19061&recv=996&lost=234&retrans=265&sent_bytes=21630142&recv_bytes=230676&delivery_rate=238188&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16327&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=csIn4V7bvCr2%2BA3yfwhdXDqXaIgWgnfmydNvwK%2B6TEnLb%2FPI%2FOmKMXYz8gJatwgprkdO%2BY%2BoCuvZ2nflnRpxWyEcJ9Q7zdFReEq%2BROFETLV02NoNPXPYIJQpEZK0e%2BMkpP7J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb995f9b66b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6420&min_rtt=519&rtt_var=6433&sent=19069&recv=1000&lost=234&retrans=265&sent_bytes=21635160&recv_bytes=231152&delivery_rate=7590&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16538&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347140
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293531
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337264
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218529
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 48 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:34 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 15
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb995c6fc1b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290728
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/16846 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashd6c63d3416968d377047c2fe7493e2ab 18aa02716e30bb9acb2587472f269ef69c6ce2b2 5f9a22484bb681276a1aeda58728cd6b8ee27e8d4461d63bbedb21119a8b1ae5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /16846 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:35 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392193
expires: Sun, 30 Nov 2025 07:42:35 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qGEAdqaasnNmVkm9f4M7YecchO60zme3NKbdJeBFXB9yrWpRvL8jdZajEWRnpAyg5t1rmPUK9cN3lRAvL8r%2FmcDx2OaeoWl%2Buu%2BPKfC4XvIae9imH3Wb7uCeULfmTwWwLLUvD2uC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99615edf56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:35 GMT
age: 4151508
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5416
x-timer: S1733816556.741024,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 55 kB |
IP 188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12693), with CRLF, LF line terminators Hash99cd9cbe2a2af3b12f2ca7e039ca0d0b 04bedc856bb5141c3ca25bd28583140acaf0fed8 9cadecffbf806870d696e9771d663db18bc35c2ed6900778cb46de5723aae2a6
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wprTB7stKLSvj10Zr3LX3wMcCOMp4HKhN6oZbnc0l%2FnIcsodERxmpjV4RsAE03NGTNugU3qeea%2B57na7IqlzK%2BPDaMO4ZGICPFKEmHzmd3Ux3JGxh760BBYoVy8gDlUF35Xt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99608cdfb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5152&min_rtt=519&rtt_var=3681&sent=19180&recv=1006&lost=234&retrans=265&sent_bytes=21761822&recv_bytes=231998&delivery_rate=1051&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16724&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 16
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99616e10b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CdaTXMHQ%2FRhTHpTmmW0Vr9399Ow6mMGwPR9KGtQxQUUUVKXKQDlgh7fEYv06zQIxWY8TO%2FQ9fYNwN928lJ2Qdi9yPxAWwMGNS6QradyUKL7SwzdTIQkLhvgmfeMeU98DyH%2FG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99624f1ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4440&min_rtt=519&rtt_var=1745&sent=19242&recv=1018&lost=234&retrans=265&sent_bytes=21822407&recv_bytes=234416&delivery_rate=1075&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16972&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N5bS8h%2F1W14I4BMmcjgu2QwacXLrf9m4IaNWihPKcK2HMxHDttalIa3rOi36vfILtac6GHmFI3tItD5%2BKqp8%2F5V9tckVTT2YFg0wblSn0tXmM2i26RQgBfbxycyOQS%2Be9r8R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99624f30b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4440&min_rtt=519&rtt_var=1745&sent=19332&recv=1018&lost=234&retrans=265&sent_bytes=21930407&recv_bytes=234416&delivery_rate=1075&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16973&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 16
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99614deab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1aGkDT1Bb8YUluOXcVKPLdlMAHI7T%2BWKvutVzrebC4FOV%2F74Jn2UPsPMThMgxQ2vcZAIHThHnonXMYsAsDSxcWZxdcPkHEAaKZk5X2mYNEQkXVLO1oo8ec9WRqzuM596rdBu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99628f9bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4849&min_rtt=519&rtt_var=1386&sent=19375&recv=1025&lost=234&retrans=265&sent_bytes=21972626&recv_bytes=235560&delivery_rate=1896&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17015&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQBUKFsbEhXP1gXpM4DILBkNcarzueDbw86H2X5KjzWU9AosDC3NeqDDvD9xo69cTr9eq5H09F1jJLhCf8b%2BKjutSH0UHqjI1NUcoka9o5E5GfFuS%2F9EZ%2FvwUnoXs7W%2Bjajh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99629fa3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4849&min_rtt=519&rtt_var=1386&sent=19378&recv=1026&lost=234&retrans=265&sent_bytes=21974850&recv_bytes=235880&delivery_rate=1896&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17017&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8CVgV76ca%2BHec%2BzAPxc5yC9PwJEBg6sRwNa%2FG2zw2vxgHqQS5rdI0JFFZRMtWHVbqf%2BXhSHieQZEIL1TNsxY6j%2FHNr%2BMk6gs4az%2BkKYvYkPUlVwhTCklT0hsVKxPrLe0xJXQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99629fa1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4849&min_rtt=519&rtt_var=1386&sent=19420&recv=1026&lost=234&retrans=265&sent_bytes=22025172&recv_bytes=235880&delivery_rate=1896&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17017&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 203 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size203 kB (202916 bytes) Hash7ae43434768a7b4e3506c9fd1230a6c0 bbc1ee97a4833afd5a9072f3c838f32309a1c82a 05f0f52177f7a1aa866490cb7ea797422dac2f1743acfd2cbea5e5ec25dd858f
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ElkOmk8nYGGOk%2BqihlcXClgCaKOPbnvt9OlP%2BcfgviGLjOxLmPwvmejrnrC6UP01gMD1XGO%2FSqp37swaGRlIQhpcZgVLmaKYNx1urLDoAEazMcr3XHWAkWCQDxLUBA9GvV5N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99613dc7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4572&min_rtt=519&rtt_var=2386&sent=19206&recv=1011&lost=234&retrans=265&sent_bytes=21788069&recv_bytes=232761&delivery_rate=1028&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16808&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w71AUNDjfqzMpUhcmf5paWVs0SW5sVT%2B%2BFaJhSHd%2BpxdmJvJQdUvMPCyyIbkwpMV4hojV8rdChcCrUszC65USlbUUipMW7RO0houM5MKGki%2BO3g2J8mc%2BvO0Egvl44WsLXk3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f82fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19714&recv=1032&lost=234&retrans=266&sent_bytes=22375066&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17081&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5T%2FpapbsqYxR2%2BqLWTnRuoZTsSBSgf1x5k2gswGhq%2FRe6wAC%2Foq%2Fcvlo2NSaQPF%2Fye0y6J9HgOsUCqtL4Z9WyUr70ZE2xjbyz4eIImVh3SGBBSS1a1twgViPuIO%2BcMIekqam"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f83db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17090&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 38 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 15
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IwNTWDeLyTDdlCkbBiWUVwszhhj1Wv4gqQwOcnPlsOg9HjMZ5xmdEsbT7gCmMiTKIpC8k6hnTD%2FPHTKUn6ElmvH3b2c7rE92lo%2FHOUSFTmYCx7AyWcQ93UI8vXHwFkl8wgZS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99604c79b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5707&min_rtt=519&rtt_var=4890&sent=19173&recv=1003&lost=234&retrans=265&sent_bytes=21756889&recv_bytes=231555&delivery_rate=1092&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16655&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OKFEuo%2Bw5hpXsAKuxebcZ51RjjRSUgbiuUhvqd%2B8RplP4bX3wWeY%2BHKB3mJcbkL%2FmLXH1bMWDWkUauCnnVhwRpDbiL1L11SVBznhcAb2aPSL%2ByHoQTbwx3TxqT%2BXJLtrjVoY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f840b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17084&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tTwzuo2rUStqvu1JKh6pvrtua8nPFsRdGy2mAcFD%2BjiOyNqj%2Fc0%2FDuEufN2D7UkKzGZkQhdfa28uvD56kff3b4LDAnPwDeOqmxzOvmmpK42ZtSzVKNVTyFVawO02snzEXk8X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f841b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17087&x=1", cfExtPri, cfHdrFlush;dur=15
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WBcRHdjnhl8D12GuqAayPFoJqFqK79XdWpwQNpPFX3ItCJa2cI7vhMKyTRIIuRtlCZrdBC7vuhtAdulSxOJNgZIEk5v2gk0Tu0FZjzRi1XKIIaBF0mq9IyYOPGZKYkq%2Bken3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f842b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17086&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ehQhyx7oYb4DU3W%2FW%2BfM0bEC2I2pD34gTSl5jBxHLC%2FXa88ZE2aCvlm8%2Fvw74YdDllhu76GXT0iwapxqhS9PEFNmCAOXY30v8wW710iUEhH5SirdM2eouI5JzGEnhjeCNN99"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f843b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17087&x=1", cfExtPri, cfHdrFlush;dur=15
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=llZYfhMH5Ql%2FOh1rpfB2XZgFiseEjDUBn9%2F1PPTF4CALEygl%2FbWtZLvOPlWFwZvUYVKIElrnwT7ULcczdFwiPKdYtDZ6Ia6JqGldROM58KdYB24cFR5m32nqX%2F7IcJpWSAYF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f845b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17084&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JYH2VNx95K1L5SMk7%2FaxbHNmkx05PxnIYHRnv9cenqi6kC%2BTRa6kfSdLX%2Fm1xOstF2O75wBAlh%2FEPF18xoE9ZsO7EvHTxwLVQN07dTfMQiwMyk8jIp4RYWBXqWwOL88n9ro%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f846b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17084&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J4QlK4vtjRaMSusBfkquNSgRofHv6sB2V3LICG06ZqMtk7TigIWFcOmSvy7XOQa83WfXML3X0gHKT0WXkPoA31ODISGtyJK483jEEGV%2FKVWT%2F7%2FefvfNDwkNPV7fpoG8pWHW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f847b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17085&x=1", cfExtPri, cfHdrFlush;dur=17
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jLl%2BrXCYoo5mBhaUjFOAe3tUlGxflofkdlWTKqMOEjZ7zhn%2FShQsY2vAxWWJuHAHqexBxLLyPZwxhnHg1ovQeKgSDo4WIyCxDBpM7EcMpT2HAdlOm3qkYJxQ71OOrDcGiWEK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9962f848b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7908&min_rtt=519&rtt_var=8318&sent=19720&recv=1032&lost=234&retrans=266&sent_bytes=22381477&recv_bytes=239192&delivery_rate=3547952&cwnd=217413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17085&x=1", cfExtPri, cfHdrFlush;dur=17
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wu3yotqAVEjqtOHT43VCfN7eBVXNzHBTuctZwJiNqOwx7WGjciVlwUod0dKlgTaNFnCe%2FOiX8irl9RtRRz4tWCDsLVpK0txdcyGODjTnfXjvEK%2FRWBefI14Em%2FoY9wDQCWgv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99632885b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8432&min_rtt=519&rtt_var=9092&sent=19819&recv=1037&lost=234&retrans=266&sent_bytes=22492459&recv_bytes=239966&delivery_rate=573915&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17111&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VzCPMuVJAq23LvsyEj3BmM%2FQeNvkg%2FEb7TmszPs7ipsWQdSwsi%2B2BQ%2Fj2QYfjzLvSvclmmuOCzSwq%2B42DfJpONqMx%2BgcTWmq6bljGYzWpO3Lm%2FSOeAYqK0fJj6NVBYfgeyRt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9963288ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8432&min_rtt=519&rtt_var=9092&sent=19821&recv=1037&lost=234&retrans=266&sent_bytes=22494480&recv_bytes=239966&delivery_rate=573915&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17112&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XsUxnMpQR9uhgjQWJCOuosz79LXQS1aKvuptNDLUED%2BUXIroAc3rjx8vPsmVJ4bJNQ4eEVPCAVcHHQdbwmqfwPIwKy0ZvOTdiLoNVwYpjueZG4PXFVCUB5HTAAMCRh4HWYJY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996419ebb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14178&min_rtt=519&rtt_var=17037&sent=19827&recv=1041&lost=234&retrans=266&sent_bytes=22497138&recv_bytes=240442&delivery_rate=840&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17259&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347141
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash139a34897329f0af692beab4a83f162a 4fc9a3ddcf2e86def6d5416a5952cb1bdf53c5b1 64aa16702dd605b0ee6bf3ab8e8ef5fcecf2d7d272505926f68b71d9379e099f
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:35 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7WEWdt%2FL7Re6d3JDa%2FUEL6dLt0p2Yz6IkjuOmt%2BVl%2FsWna7wBEhToTOI0rNHHQS7FOjJWD3T1hg%2FGydVPBNJrAdK61ravq4TkKf7pvit9EYpYnljgLqLZKw%2BCyv7olDKc0ye"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9961eea1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4310&min_rtt=519&rtt_var=1568&sent=19357&recv=1019&lost=234&retrans=265&sent_bytes=21957261&recv_bytes=234464&delivery_rate=28074&cwnd=216213&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=16993&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337265
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218530
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335954
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290729
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/11592 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashb371caa35c0bfd16affc6753aab69a2c 95e24eca811bba9bc48e6dfcdcb455dc759b10fa 2cfb1209d1008a4a5186a3f5e65843c73dcbe0acf3e4d620e37a4b205add0ffd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /11592 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392194
expires: Sun, 30 Nov 2025 07:42:36 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rKITjjIoIV0gilj08VoyJ2SjEfpa8oxf00ZwVOn7PzmEUW%2FgYILRJi02vTokHdhmgBtmXFO7K33T7BFz%2FOJTUFsmNzT6Ms4u5flWrOd42NkoWfHM13e5kk%2F6%2FpryUEvUH8y%2FgF6E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9965cca056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5137
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:36 GMT
age: 4151509
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5417
x-timer: S1733816556.454150,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 172 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size172 kB (172292 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 16
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AdbfyhCo6mfupd5Z9t3xqGOnaWlqJ%2BlpQdJ2s%2B4Qk%2B6LSUyPm4CSFEmKuSFMRKxsrnm8nVRinm3JhefyxgXW2eYc5JYrCfwvC0BVN5f1yq2DzusPzN1pSFBMrM8xOn84biju"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99648a9cb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11029&min_rtt=519&rtt_var=11617&sent=19931&recv=1045&lost=234&retrans=266&sent_bytes=22618858&recv_bytes=240892&delivery_rate=908&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17331&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NW4LjMTD4QxxJH71STldVmARCoXNmu0lERM581iz3L4UdBsO80aM3sIkQ8ceW%2Bv6pSC%2FoLOLF4JYmuAFfFkhl%2FN2Jm6n94Sv6ljQz8zUXTBEaFBggwaorekoPJhn4e9J%2FaJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966bd6bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7565&min_rtt=519&rtt_var=5978&sent=20117&recv=1065&lost=234&retrans=266&sent_bytes=22820904&recv_bytes=244538&delivery_rate=1016&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17678&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KRlHnVZrsS9uaCr%2BKuhoVOymJLFFqqOTONEkxA7P8WIYSOEv0%2FZgUknuoWW2CEZrY%2BmsAEivimTN9XL6mO9JO7ft8cko9gHkWYNAsagN1hvofdqd3uonNh6C4McLzPBckJs9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966bd70b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7565&min_rtt=519&rtt_var=5978&sent=20127&recv=1066&lost=234&retrans=266&sent_bytes=22830727&recv_bytes=244857&delivery_rate=1016&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17681&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TYfpY4b4LkBxusR%2FC5sITa0qf4VVHHvK5u0ifunRWVRHQyhT1etmPIsKp1ySDmwPo0FnpidvhcSZ9ls9kSCg9NUmoqUXS1lhwgjwBIlkokxP0qbdI5zu%2F7TAQV8tB3eSiQND"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966bd6cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7565&min_rtt=519&rtt_var=5978&sent=20130&recv=1066&lost=234&retrans=266&sent_bytes=22833986&recv_bytes=244857&delivery_rate=1016&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17681&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 17
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9965babdb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lUABhiYtYLtu23allAu89J8uO%2BHgTAPUOC5vbrDyG%2BNGVDz%2BwYd6QKS%2BcB3%2FKJ14X3pb%2BaoRbk4to1kPyq%2B3PAyL96KVyL0kcEGQqVGRLgItR6bIr7V1I6Jk8%2BYD5M%2BKVCSj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966cd7db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7565&min_rtt=519&rtt_var=5978&sent=20136&recv=1066&lost=234&retrans=266&sent_bytes=22839895&recv_bytes=244857&delivery_rate=1016&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17686&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ri6RDBebxBgeXCjnOndVc208WdnpMoWY4qMuOCdPY8pePxdwwnip1yIhugAKPbkyy0cJLHQDLsHdHN8c1VM7lQX%2FKus4E2VSdKQAiFAVjKkrWW0FEcuyJc5mSw7kqyDwWpGw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966cd78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7565&min_rtt=519&rtt_var=5978&sent=20178&recv=1066&lost=234&retrans=266&sent_bytes=22890225&recv_bytes=244857&delivery_rate=1016&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17687&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sDftTk9CEnZwxJETLO8es5yAv6f%2FAvuGZaRucdP%2B8ssR83MfPP0qVge4mZxU5qU6TXyWC5WT2droIP%2BHtIQWiFfOBXO0Okqda2JxXAq8ea7Igc2WgUllivsNM0XYz%2F7OBh8G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966eda2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9110&min_rtt=519&rtt_var=5401&sent=20325&recv=1072&lost=234&retrans=266&sent_bytes=23059764&recv_bytes=247349&delivery_rate=5538795&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17710&x=1", cfExtPri, cfHdrFlush;dur=24
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 98 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash7982d422e33e0753ef9f1ffb99800e4d d08bfd66f00c48f7b1feac2ffd0c6a4368df1776 48ff568e57189eda24b312f8712f7a15f6415615c4cd1ed06dd747aeffb7e5e9
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=05S33gp7kJcRx0FvMhpUjGbk9%2FKvGSThx9wq5VRs5gtlVdYLrtNOPU3MWIf25CKpyZb5HogE3r6Z1RIZIyeeOyqBn%2B0ZD6tr3c63gVZEaPIfRg8iv%2Bsa6jk6r6sSDzdLBo3X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9965bc37b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7423&min_rtt=519&rtt_var=6069&sent=19968&recv=1054&lost=234&retrans=266&sent_bytes=22652975&recv_bytes=242145&delivery_rate=669664&cwnd=218613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17522&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 19 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 17
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9965daebb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 6.7 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash09da021b7cfce5fec87188ef6b4ac6b5 c1791b3f20ae4e69009cbd89d9dbc16a37433c9a 4aa5b8840de002ab0739d56c670d7e6fd611c87702deae25581fd3c12f45f4a5
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:35 GMT
date: Tue, 10 Dec 2024 07:42:35 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=inGlL6Ronl8CdfVVpLXPrhIoopxc7TdHZxDdzN5Q0b6i%2FKb%2FC1XRr7EFdySrWAzHG40B05RLvTjLbKGsFnak%2BhtStgZSNgvmE1nUPVR76mHWFYijxzb7xwv%2FPnS7U68oinA7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966eda8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9110&min_rtt=519&rtt_var=5401&sent=20325&recv=1072&lost=234&retrans=266&sent_bytes=23059764&recv_bytes=247349&delivery_rate=5538795&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17709&x=1", cfExtPri, cfHdrFlush;dur=80
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2R6OrC5vp4J0FPBBcLig5kTPlX4S20NVxBmlyNGwWGn%2B%2Fm9NUQWKJ6EhwW8quBK%2BiGUzFfXB9i8vKANZ7sz65Vwyvd1fP2pqYX%2Fm%2BOoDHo1PojbDX8JpT8pVp0BZI%2FCNgurT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966eda9b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9110&min_rtt=519&rtt_var=5401&sent=20325&recv=1072&lost=234&retrans=266&sent_bytes=23059764&recv_bytes=247349&delivery_rate=5538795&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17707&x=1", cfExtPri, cfHdrFlush;dur=82
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHmTSAQFGeTzZjBSP7t00HyGZWnTk6KcWPg%2FcdisaNHHRNGVK%2Byxvg%2F1zdEXzlnUuc6wDviv%2FtG0D6bN1RzAmuo5%2BQ6R1KvuAXwk3LWTwij7mfExIiJbrhiWvPUsymo9a9W2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966edb1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9110&min_rtt=519&rtt_var=5401&sent=20325&recv=1072&lost=234&retrans=266&sent_bytes=23059764&recv_bytes=247349&delivery_rate=5538795&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17711&x=1", cfExtPri, cfHdrFlush;dur=78
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BVbmB6NRA1qWuhw6GCBfjlgf4E%2BNCn%2B7t8bT05EEDakzCkOTQPqizePT4KQZ0xAkh74PU512uLlk8xfRGrai8vB9kLh9jpoRPIHHyYt4JR6ZtuSL6Wkl9%2FCH65Dw0pCN3HFe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9966edb3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9110&min_rtt=519&rtt_var=5401&sent=20325&recv=1072&lost=234&retrans=266&sent_bytes=23059764&recv_bytes=247349&delivery_rate=5538795&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17710&x=1", cfExtPri, cfHdrFlush;dur=79
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kWG%2B%2FE5YR1XTeldAhHTRlZNjxldWFExpwVZbj93RSEhPuyZ0fZojjms5aQ%2FXFxOiV4lYb81aYpq6lnZJ4wmegZH6u8kAje0HLhZ0v2%2Fay0t3tAwZNRmtmvInyvXDdwNjvauA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99671e08b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11283&min_rtt=519&rtt_var=8396&sent=20393&recv=1074&lost=234&retrans=266&sent_bytes=23139441&recv_bytes=247987&delivery_rate=8713427&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17746&x=1", cfExtPri, cfHdrFlush;dur=43
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WdbTWtSBANOFephY84CyWqOVEeuvAwYNvHi%2BB1XU668q4U8rf8KJ41nlAjEUKJwOCYquo%2BDMmu7nOwYwiI67166o7vBd3ejl%2Fam3Fw4azKZqtqrKj4nc6gF8fe2oEIH8CbWu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99671e0ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11283&min_rtt=519&rtt_var=8396&sent=20393&recv=1074&lost=234&retrans=266&sent_bytes=23139441&recv_bytes=247987&delivery_rate=8713427&cwnd=219813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17749&x=1", cfExtPri, cfHdrFlush;dur=40
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mh0jZwjAa%2F%2BIUMhvy1llra8am6%2BZ2kN6lB2%2FDUzwoTtV%2FN76wYc4Jo8bXjJ0%2FFlcW6Gxy89VDGAyzbQTv2Vi1Dk1J%2B7ACdbhbkYjL4X7qvIPHmLdeD7QtJo3p4sd0K%2Ft9wNf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99677e6bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22426&min_rtt=519&rtt_var=23811&sent=20570&recv=1078&lost=234&retrans=266&sent_bytes=23345777&recv_bytes=249269&delivery_rate=3701585&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17798&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xT%2Bce3tjaKnafq4ukI8Ojlvsc1D4gOgtcI0kRawQ9pHCEJMPQVqA0ts1KbNYPLH8jnnrod48EKAmoWdrLAxzU6z22FT32%2FfLiOD6NPevRIx7fYDGjosJUpJMGkU4H3s%2Ba1DC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99677e6fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22426&min_rtt=519&rtt_var=23811&sent=20573&recv=1078&lost=234&retrans=266&sent_bytes=23348350&recv_bytes=249269&delivery_rate=3701585&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17799&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hg%2F5hyRucePWQurTLipwQh7t5ElQ8KqebcoJNN6uznbw3s3IvfKxGJj2vUEb3ww7GkEPdasIkW3x6nh709%2B4QmSR9ZhCQJgP4PzL3waf95edhQxz%2BN9QPpPCwHWdoUSXzDD2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99677e70b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22426&min_rtt=519&rtt_var=23811&sent=20575&recv=1078&lost=234&retrans=266&sent_bytes=23350371&recv_bytes=249269&delivery_rate=3701585&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17799&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EsKm5GyxLbPRZaD%2BzF5HnDgQwgyDZqr5voHSjy4WJvmsUF3WKFWkGw1xSQnH9Hvi6Yfc31Inhenm%2BAN7ShRj3sta1suA4CDNqSCNa0VQyJYglzflbDxXlr2P%2B2cBJEc3JAPY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99677e6db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22426&min_rtt=519&rtt_var=23811&sent=20578&recv=1078&lost=234&retrans=266&sent_bytes=23352947&recv_bytes=249269&delivery_rate=3701585&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17800&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:36 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rbbfWSc9zfey1yoFyIXmBB1JahvJh7wGwx3UaMi6xNTgOvVqMgnL4f1u4IwoM64A7o0o39GnzFkotRLhsVs5khK4I%2FxhzrzOQTQkZLP5%2Foj0kSyX9DiDC33K%2B%2FPotlRtdzWp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99681f38b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=31559&min_rtt=519&rtt_var=34873&sent=20586&recv=1082&lost=234&retrans=266&sent_bytes=23357959&recv_bytes=249745&delivery_rate=534&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=17899&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347141
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293532
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337265
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218530
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335954
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290729
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/16148 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash7e57ac922f4cb99f96d05bf1c8d0fe77 c17e39a4acbe4da380151e046549db2e02c23664 a6bc34c1d44f4bad1c788c326cfb6744b19356b81b3d3e15323b4028309f56c3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /16148 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:36 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392195
expires: Sun, 30 Nov 2025 07:42:37 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NRcqZHIMWUXb2CUlaW34A3ZmlqojLVlF4rTw8USbXNWMUcg2GFxRwfdSiTHFhI8j98CcAUx6GkKnwbBa0e4piKeMTlcsbfZqs7rlb4qapDhYDQLax5fL0COzmXJJluVZWBoeI7ys"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb996a0a5e56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5138
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:37 GMT
age: 4151509
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5418
x-timer: S1733816557.144707,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQ29C9pifQhL64w8u8rB6gJDMqgfkDEemUg%2BHgWh6YO%2F%2BgWQWj4lZE5SzerbTgJPAXRoRYxNsvW49xILkiplQTvqzLkIhKGutg%2FAjTJnfitHPU6gFLCvJkknDA6vu%2Bq8Atab"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996adabeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14058&min_rtt=519&rtt_var=10324&sent=20770&recv=1104&lost=234&retrans=266&sent_bytes=23556879&recv_bytes=252654&delivery_rate=128742&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18338&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashfddc3590e2ccd537b00c1c522819f36d cb0fcfc26464d42313138a0a6d6b3726f8513b23 91531dcec1351aa1495a06d0879be04cb7e1a58117bbb5843aacceb053f486f2
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BY565rA192vXRA1hj1FqVeD3eLwjZ0qFaYYuCK9ZqBH0jVVW9QNzX9HXhoRMAgMzqAGaLjwxbJrxJDvTq%2BZMUnuuKyXUrFPYcTRkEA97ZP6tySRQrgwcvrD9yVdDDPW1kKmT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996a09f5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17198&min_rtt=519&rtt_var=12975&sent=20723&recv=1096&lost=234&retrans=266&sent_bytes=23508946&recv_bytes=251490&delivery_rate=544&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18211&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 50 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash6fb3d31b1ee874012051e6fea555e430 f830057229801bf6a01d0f6844c40ac70b6a94b9 248dd78b6d664d4aae835f9da8ca900eafc0555c7f56da5b6318832c56ce6484
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sEzjaP729X6o7y2TFeCdGroaqfNyGN47CQyW4mVNntvXRVEbxmcPifyTXwVhO0EeW9z1quKpP1Jfa%2BZMvXRA7vw%2BU9E4Ink0pqoAgNoAxE3fcgmsScpGCRiej1my8GoKAue5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb996928a7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18803&min_rtt=519&rtt_var=22708&sent=20694&recv=1090&lost=234&retrans=266&sent_bytes=23479794&recv_bytes=250681&delivery_rate=926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18100&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 20 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash1df91b6731fbed5997837967c3fd580a 20ac98fe5f92a36949a238fce7a3b83461c7694e b39cc0afffa41d898f2750376c324344e52d17fe559e90ef32cf93d5cbf07d93
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4LatMqUuRN7ET%2BojyF12kiOeum%2F%2FGgqYi%2BGa7vFsAKOsnIZ4uAyDek3gF1ilhs9LJjWPe%2FEo7TG2U7vrxWjzOkbFYfG0oMJjzoUdqejuEjQR5BcMEVnJER5OYrM3y5NFFnqP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb996a3a1db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13270&min_rtt=519&rtt_var=10861&sent=20751&recv=1100&lost=234&retrans=266&sent_bytes=23538365&recv_bytes=251926&delivery_rate=3461&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18275&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hNj38b%2FZ2a%2FrJy%2FFo4UcHmqwCyD3CnDgX%2BWDuoSfhammHf7fQ8Y5Qc8a67Fq7QMU6AAoEdaOMuT8zp6HdYrsLj2D7BT2XhHNg4qzDCeYL%2BcKVtsQVmFYYLs3AksMCHwtsuhz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b73b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=20890&recv=1114&lost=234&retrans=266&sent_bytes=23693767&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18423&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0765ZgTcqVwPl%2Bn3fNlQaQQVNtWygOscR2FMKpzYiGZcLDrR71z8y%2BSOOU5DRXsyCymRRlRL0Qz39GHMPaM5RhG7rZtoat%2B28ITgu9bEt3ulK7kaNC1hFNd6PlHHAdpsedyQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b6db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=20896&recv=1114&lost=234&retrans=266&sent_bytes=23700568&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18423&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 18
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb996a1fb1b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F4slrplIaakkfI7zZSu%2BUo5ZnEuIHGM6NZM3wV7THbtVLlgdG2SVoAcItyAEBBjbEihHKd75JjqXq7P%2BOJe1nPZUCdYsLlY5SmnAKAGO2KK926F64Z4bQw%2FMJbWT6smRrOhJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b70b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=20896&recv=1114&lost=234&retrans=266&sent_bytes=23700568&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18423&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ehjwed1Jlj%2BbABsbBsa%2B5W%2B0sbphlqUjaWJrgHhdaLz8I%2BqVApVKyfvyMNvi%2F%2FlV3%2FLNAGQJdtZ7gMJXJvo0cGdPIwh2JfvtnARWL%2FLgo7KUoJY4Roc%2BpQHizHBFf13qU9tB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b75b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=20908&recv=1114&lost=234&retrans=266&sent_bytes=23714769&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18424&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347142
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 203 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size203 kB (202916 bytes) Hash7ae43434768a7b4e3506c9fd1230a6c0 bbc1ee97a4833afd5a9072f3c838f32309a1c82a 05f0f52177f7a1aa866490cb7ea797422dac2f1743acfd2cbea5e5ec25dd858f
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LYMs2IBFvp4gXqHCsql1egW5yGD8XEYzGXnFi5PM1Rs2kSWi2JrxDK9RoaaSHr6II%2BJkI50grcu24OqdY76WFyoS1fkNHot3wEGC0M8xsQU3za6jy0cegRWc7Cf1Evvooct1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996a09ebb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17198&min_rtt=519&rtt_var=12975&sent=20720&recv=1096&lost=234&retrans=266&sent_bytes=23506039&recv_bytes=251490&delivery_rate=544&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18209&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xD8LXS2taUpqvmBdyQaxGkV%2BP5Cnj4fKQ6N3LuF5QufQL9QXMQ4X6uC%2BYyrGcKp7gLv%2FXpBc%2BbIq6YO%2F5K5eOOiveChFAyZEV3RqMIZxPyYZ8%2BW3s53R40Abw0r%2FA1DiLEC1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b72b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18425&x=1", cfExtPri, cfHdrFlush;dur=56
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2FsBQTM7DIDwZY01PW7Ej8VG3tjtdMo078AT%2BK1FaRGYx0eV1dPsgmX4l34HDUYxmAQaW5QmXFRZ8x8vrC%2FjgAI%2FuXRvMFfEcIAWwf%2FsCE260cQIy7Bil2QJb8kxJbmZvzEi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b74b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18425&x=1", cfExtPri, cfHdrFlush;dur=56
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2pGIn5YJtwzo9TWCogfbEMLw8nETR0nfO%2FM4N%2FOaqiYv2fT9VFFyyHisocFR3mLOKYNScOnC2CzovOjnml902fMw5fksnpO2Vvq5OD7K3mdfhQtzQapRjsFqGEiYM5tc7bW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b76b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18426&x=1", cfExtPri, cfHdrFlush;dur=55
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aQ0EYK%2FT5tXhsG4AZRPMIYblKwJG5T3hDBYHMcr2zIekgVAndDCX3%2BrqrxTFH7lDSXHFnTOqay8xGVKjrbbTZjbWoVcMTHnIbCvhMpFJrz3IXIgjmsgiO1a2QFweF%2B8SVmLz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18426&x=1", cfExtPri, cfHdrFlush;dur=55
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Zrni%2B7%2FrOcVw%2F4owyPsWxFdK%2FYoYax1oa2RCMYsJAIA6WLTy0wzdpIpOSD6I%2BtBRzHE0my8svtTJYgy1yV3moaWfq6a0Yc3%2FdxAlA1UD3E6QryJGdGnB%2FHQZVgwYcoGWT7C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b7ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21019&recv=1114&lost=234&retrans=266&sent_bytes=23846543&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18425&x=1", cfExtPri, cfHdrFlush;dur=56
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q9ZQQl7GSQU2E0xBheV%2F7HqW8msFZx3DGu7aVtbBA57DNcvU3x2%2B50r2f0iASiIfdoW5s7hZdfzxkRhPPqvGPi%2B1cElrP8c1IImQVJI9Nea9O8TjOowHPFQXSkYf5xq5CGzr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b7bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18426&x=1", cfExtPri, cfHdrFlush;dur=55
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hcmbk4YxuTfx6lbPE6P%2Bk9XFKtHj9hKF%2FBPdcfTj5Tb%2BMrM4u%2F%2Fy0kwZ%2BuMhGPzTPBP8HaNN%2F0v%2BRvs8%2BcJcc2402BRvaVbX0MDxsXwmyAbSG9ytdFCAsfcqnfDciuuDX8cG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b7db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18427&x=1", cfExtPri, cfHdrFlush;dur=54
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5EVG7VRNPZQ7ZjMCRI3yysuWLr2tYXyKMpyZW9XVotq7SkPw1jEk1y5GqGuAyP1msxO1jCRBgt%2BAGktFzam9m7i6e2yDQyiqpe75vQrpUNq4BrW73QNQ%2F81rWVNwkrbXfpp1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b7eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18425&x=1", cfExtPri, cfHdrFlush;dur=68
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rpXof3y59c%2FEHLBH9zodI86lumf70rFV4kotsn6o9AjAOZcSLaXKflTEkaXfLL4Ozq3V8gy%2BCd4ty8rrYvelKrGTXrYNBMBeRnOxCgYrKGVGi3hC9%2BR7PJY7%2FZ0hOjRC8C4Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b7fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18430&x=1", cfExtPri, cfHdrFlush;dur=63
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKEFwVg2JQNoaM%2FAb4B80sNlr2n3sBmeYEPNMCNqsTpMulyCJZ0sRW9vspTvOD3OS3r3UgeYS8SDMaKdCqV1S6A0wS6WMtIul3YoGamEUVaukZuk1Fz2chTUvjEyONiZ01DG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b80b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18427&x=1", cfExtPri, cfHdrFlush;dur=66
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yn9WwaNTShrFSF4xyD5gi79I4yv3XxZtyLrMqy5CFj27qPhc5vvfNFzQpeOWKMOfAyqcHPXW04yQQ01ZRUgJhJg2ErVxgEj9W%2FiFT1fcDThjXfXIY15Z97ft5rxhXWLwiw4X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b6b85b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21074&recv=1114&lost=234&retrans=266&sent_bytes=23911485&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18430&x=1", cfExtPri, cfHdrFlush;dur=63
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xfi8CfGP5YyxbFgBUErD%2FvZkHDWj0fqmCcDskogquyKRL%2F5mb7FE8iy%2F%2FQYGgJuP7vTUp3aWyfeKrxGYewNwmGs5Scw3B0%2B%2F7bhnecHN9WYnR%2By2UfmIBJGG4rM1qi8c3Gqo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996b5b6bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15373&min_rtt=519&rtt_var=10373&sent=21009&recv=1114&lost=234&retrans=266&sent_bytes=23834543&recv_bytes=258634&delivery_rate=1685926&cwnd=221013&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18425&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337266
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218531
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335955
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290730
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/22350 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashf17076f9a00f916949530c1d0282bf9f 439caf0827bb28972da67e6b45c4a440f8b936fd 46b517db761d8258f3bf2f1f82ce01fd5c0ab8fe2df6ef8c608a86a136aadf92
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /22350 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:37 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:37 GMT
age: 4151510
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5419
x-timer: S1733816558.740021,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 10 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 17
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJDLNLe2PNyWg%2BAXmA%2F8tedaqCQC66uWo7lXd6vWAN%2FOKm3cn9lUdGo3ptwA1dwVi4PDQl1jao3h4DB26kRbNgdmZqxSloMDkV2lLpCWw32uN56kegwqD6LKEkNeeXgu%2Bt6g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996ccd66b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=20222&min_rtt=519&rtt_var=11166&sent=21439&recv=1120&lost=234&retrans=266&sent_bytes=24335604&recv_bytes=259181&delivery_rate=575&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18655&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5138
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 151 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size151 kB (150984 bytes) Hash86808eead4f2232e494750b55e76c613 20248988dd74c93f39922933d945832cce675239 b74271d213fb3311c27d2fe41d1424172d6404d80f12bf48647cace91bbcca65
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJIXiQMm2yPRjCftkkwc%2BLEtAj2V3APVyXxg8fbIBX%2BoJnCYFD4cT7XmZq5S5MmxOBcMezZqpxOpqKyTL83yJWIToXl2n%2Fo1Lj6a9e%2Fz553cSrTalFtR4NFHHm1e6Z9RKqog"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb996d0db7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19596&min_rtt=519&rtt_var=7388&sent=21446&recv=1123&lost=234&retrans=266&sent_bytes=24340537&recv_bytes=259623&delivery_rate=574&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18722&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jzQVHLGo9Or6k%2BHZx3wz8hFRU9qcJ8KKXxTrrNe1RffnS4p8xUQ8w6j%2BIc5%2FU35le5WwZ1we7tjiIre5sNBPWAB5VzFav0D%2BoHnohQHMEGJrCDTVq2i%2BZpyiDFezz7b%2FK3M7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996e8835b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17428&min_rtt=519&rtt_var=9086&sent=21631&recv=1140&lost=234&retrans=266&sent_bytes=24545556&recv_bytes=262543&delivery_rate=294700&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18929&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hKZ4r6UrHRD0qOXu%2B7gfLls5ePp4bK15A5vadMdaF8uW8ez%2FlWyYBRE789BNhaSv%2FlOvCscn3YrZnpyD6kc5zwd4Ly%2BlKmiDHqtUKI9RpxRsznSspNIo9Dpm66pQEvXAm5ql"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996e8841b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17428&min_rtt=519&rtt_var=9086&sent=21634&recv=1141&lost=234&retrans=266&sent_bytes=24547518&recv_bytes=262863&delivery_rate=294700&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18934&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fw8D7EOj4xjS7W1csGNdBASb1YKFX7LNmiSgc16KT21g8nlynqvlRNorS55xnV08uct8bS8QsTN5phU6e%2Fx%2BnWm0FKYMdrIgEdi9%2FuEKv7UnOwb%2BF6KvCos2z2cI%2Br6o8ug7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996e883db515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17428&min_rtt=519&rtt_var=9086&sent=21638&recv=1142&lost=234&retrans=266&sent_bytes=24550808&recv_bytes=263182&delivery_rate=294700&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18937&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 24 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 18
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb996dbbf3b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 152 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Size152 kB (152014 bytes) Hash2d4f6f6d4f8cf5659abf441c2c307790 68d098c13c5461b7636190e67109797a69ee25c9 fb3d893ae1d4aa2384d0ab2fee6883fb0d255f9cc40d0a494765aca387abf50c
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VTCdrNrIETnJeBnIdAz5%2BBndhTPbYlGjB%2FigTrIkx5jAME8EfgitszBo9LNlqXmCM8wj8dDeVMOxuK4MEuKHmMoD%2BBSRf7arfi%2BKFIMF87g01ucvkQLfHutrBiSBjgstxzQm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb996def29b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19585&min_rtt=519&rtt_var=9540&sent=21503&recv=1133&lost=234&retrans=266&sent_bytes=24399127&recv_bytes=260870&delivery_rate=934&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18868&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 63 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 18
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb996ddc19b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 202 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Size202 kB (201520 bytes) Hashbf2750f18f53271d1f7b136d48848aeb 78c7216ab7fc9cc390e00d433ef61161bde4c916 ec756f36676ea5eef074b5ae29fc716cb5f03e4b2acd046ffd3aba0460006252
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:37 GMT
date: Tue, 10 Dec 2024 07:42:37 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TF%2BP27qzMj00bt%2BemQaiaSuCAyImqB4P%2FeLwKxI9PE%2Bo%2BFnb9ebQMPxfvl2reeCEEromDOa2MvhHfBXVzeyOgvKJXEXFFe%2FtgPQwvxwnXwF7F283KfPRI4W70QiAR%2BZmBrDk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996eb879b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17818&min_rtt=519&rtt_var=3858&sent=21831&recv=1149&lost=234&retrans=266&sent_bytes=24774276&recv_bytes=264059&delivery_rate=4440186&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18968&x=1", cfExtPri, cfHdrFlush;dur=75
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xpeo16I2%2FfRreU14wRtV216boaCArM2ye3bNazf2TmgLMVKrlMtd1trh6BNe9hao%2Bqc4Ll1o%2BV3q0TjmgzRD4srIP4h5t10pd17Y3PpV3AGSo%2BLOW%2BAWfPspDV4y2l2uIlTs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f4942b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22024&recv=1156&lost=234&retrans=267&sent_bytes=25000199&recv_bytes=266570&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19054&x=1", cfExtPri, cfHdrFlush;dur=13
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yp%2B%2FgGo%2B7pF4LmFb%2FGEOlJ7K18N8K5E8wsmkoaG56o9278RZCjM1n%2FmqxM2GXigkSKGPc49ZEtEczr4bJsrFoXxY0z1T8b0vMBI6pHnMsDcV31viztVASO7eH9aS%2FDehwaMD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f4944b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22024&recv=1156&lost=234&retrans=267&sent_bytes=25000199&recv_bytes=266570&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19055&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2k4P7%2FQ53SJUXRsbnBiWvCgb8wlHHFy2%2BqkgUAAIGOcb9bKaKWTj1n6YlJgw3CbBW84a5ktSw5yj8WuQdYIz7KgP1KawhSKxnbLDL9pjoKryfLb4txHbau%2BNWW74sUz3KrG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f4946b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22024&recv=1156&lost=234&retrans=267&sent_bytes=25000199&recv_bytes=266570&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19055&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wn93Lo%2BlWU4sroXvd%2BMcYf%2FYTje9OiX9apHe%2BiIdIHXgndnyIlqdWNkVDZN1vf37ss1p3LO0aE2M4Tcz7npzz00MxLnQ712EjpITX6Fh6CEvQMhbsbdXx8qpnFuDJniT%2BB37"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f4948b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22025&recv=1157&lost=234&retrans=267&sent_bytes=25000227&recv_bytes=266885&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19065&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUozp7HE3T%2BiMkqSKXNSDEAyjozX7XNAOJkYbxBfxNUNeElakhCz6eNEDLYMzkXt6yrNIW8ATLNx2goAJ%2Fqqo1iI3IG3pWkuRHnXrPDMhGBv%2BikknC4AxtHxZS8nfPAz%2FqwX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f594cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22025&recv=1157&lost=234&retrans=267&sent_bytes=25000227&recv_bytes=266885&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19056&x=1", cfExtPri, cfHdrFlush;dur=11
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hDNuVuN6UIOtxVMNXFtPkIXh1s2Jg0hUk7sJ7odnTax90k1CWphWV86Kmk8G%2Fbb4KKeHVnVzMPmdCCYC636g%2BnnYOuxxANEfMqx3o4s4spqiIRjmtwd9r6guu8XQDmMx2CaB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f595bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22025&recv=1157&lost=234&retrans=267&sent_bytes=25000227&recv_bytes=266885&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19058&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kW%2BuaBJxlYdCdNf7%2BoTzmrsiEP6NrVIsGFOvA5GPfVbKrkALmPO1em7br3WzGz17N2WlzINRyfend9sZOcO%2FEa35qIvV4xohFupp%2Bg%2F5uFDxGNBuy4%2FC%2BXIMMEfnzPylXotZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f5960b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=24803&min_rtt=519&rtt_var=12910&sent=22025&recv=1157&lost=234&retrans=267&sent_bytes=25000227&recv_bytes=266885&delivery_rate=2533012&cwnd=224613&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19067&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dvh3zR1EK4lzH6zD9ZBRZvddyuAyoo9%2FbOeUp9QhGlLUbxdEP6hXF1do6Hshv142Motwq%2B9XutQnXICp5cAgt%2FUiWKLE%2B8Hsu%2BtNLYk3JzyTwtkxAk9freSUQOX%2FhR%2B8eIbw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f5956b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22198&min_rtt=519&rtt_var=11886&sent=22083&recv=1162&lost=234&retrans=267&sent_bytes=25062280&recv_bytes=267926&delivery_rate=2533067&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19075&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fz4%2FObaYF2J2eEVybGz59idIVTk4uZbEfORsIg5An%2B9o1W8zJnpaqul0VOohzd5SssjM635iNfOxoarcfox55elalR1KhgqcA5a9VUytYbo7r5EfDvEY9mXd81d8YdvWl7Xf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f799ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22198&min_rtt=519&rtt_var=11886&sent=22085&recv=1162&lost=234&retrans=267&sent_bytes=25063994&recv_bytes=267926&delivery_rate=2533067&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19078&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bmQA8Kq9Vzn8ZCsQ9lcAhZbPjIi%2FFca6pQFE71XmvRh8ptT1JImf7o%2F2h76giMsVddyYHYIoXQLDY44VWmzoUosJ%2FV2D6z%2BfATGEBNC5v0NmSaRIhjR7hokswUo1JSJtZqQR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f799fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22198&min_rtt=519&rtt_var=11886&sent=22088&recv=1162&lost=234&retrans=267&sent_bytes=25066556&recv_bytes=267926&delivery_rate=2533067&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19079&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yn3xpAFCtlJuoyL%2BByQ%2BRygMkdC0CWcODxCWFu8lFunlcw7xyrrhQmSvSdQiDyI9Ha9E4lqUWv7MgjDHfYHNjwpusY7iKRF89i4Yt55u5vACK0FpF4KUmlYNox0w2qwxmca6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f79b7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22198&min_rtt=519&rtt_var=11886&sent=22094&recv=1163&lost=234&retrans=267&sent_bytes=25071520&recv_bytes=268242&delivery_rate=2533067&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19088&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=klyZjtswUQiA4ItGm%2FUXK6qqttqL8S5t%2Bj7HxR2l9HtGp4W82vOgN8LorA0yeLojGibxlgqdXilojx5m24QUce4qlO3G5cD4FTvVbalcq1bNLLh1q93Nj0L%2FBvCWt1LFTQbR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996f89c4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22198&min_rtt=519&rtt_var=11886&sent=22096&recv=1163&lost=234&retrans=267&sent_bytes=25073542&recv_bytes=268242&delivery_rate=2533067&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19092&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1gAHVbDqhBBm2hqJt4c3QMGLKiaAZ9WpazjK%2Ft7FlPbFHh%2F0PF8Qflqcaj3R362bIww%2FAZU0nwyFkyKeT0Ek7VQH0m5AO8zgEYuSEq4wUjqvyCjxbEHxWtNOtvSZdu6xvxf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99701ac7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21210&min_rtt=519&rtt_var=9403&sent=22102&recv=1167&lost=234&retrans=267&sent_bytes=25076194&recv_bytes=268718&delivery_rate=1015&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19184&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347143
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293534
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337267
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218532
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335956
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290731
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/78697 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash84b75f99232b10662f2cc1f4213f3635 7b8fb6603f81e46e2f012325f6b6c8ad45a9d905 767e3a7547f0ef1cbf05ca008da0dea6e105f21f0edea2da5b1af24827630cf2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /78697 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:38 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392196
expires: Sun, 30 Nov 2025 07:42:38 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wioqwllfwjhZ%2F2PDOGWNgFQGmAYzMYL1Ykd6G30HTS%2Bcj%2Fet8RK7omLg6Vzp0LLis9CzBOzkCtytIoHESzVPJXqrwk%2BCzLT2gIUF2m2taXGQocysZdSbXarkcWLCy%2BPpQIiI3llG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9971ed4e56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:38 GMT
age: 4151510
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5420
x-timer: S1733816558.385997,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 19
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9971c8b8b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 17 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 19
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9971e8ddb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 144 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size144 kB (143477 bytes) Hash09e6c0f4dad35bedc5470014ba6a4e70 865ea285b3bc633c55ec093dd3f80c86d4dbf849 c0057677e6f7a8dbc4ee0188c821da1dd032c411650d905e061148e4fb04a868
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MIwp4zHp10bMyJkSGsz9Xk6r5PgA4tOeeKF30AHFrHdOcvYsLUCvLdB8obu2BSbDPYjksUxWAot25bLJcx34SmvDtvzaZQ9Ls%2F%2BMLA2s3iVBZ4vioNlxW8%2FDy4qJBLtf8NQW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9971ccdbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16963&min_rtt=519&rtt_var=9503&sent=22237&recv=1178&lost=234&retrans=267&sent_bytes=25224309&recv_bytes=270320&delivery_rate=408967&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19451&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 26 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash1234af387bf6a3e4908f376370718875 3853755cdf7664ba8b04da384ab714ad4d3dfef3 6f627f15246c620a849ecbe5ca87de989a14004ef126669f35d7dc9287017ad7
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WuhvXSVZMKR5UbZwN2cg5iZBFNgxgZYzcVywMsL9gdVSO7QmUMdoxylMhy8bQNkaHOp7c%2BEyr5h2XP%2BNpMFViKt0xKhf%2BwnYK%2B1nN2MoYA6G7yxwKk6rWjnqTOtrmjsk71mm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99710c07b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16696&min_rtt=519&rtt_var=9104&sent=22210&recv=1174&lost=234&retrans=267&sent_bytes=25198028&recv_bytes=269606&delivery_rate=895&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19362&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 76 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashe127bdd31b6c73f1edf6a29458bac9c0 941384e0a81998307755294d0cddf6392bd50f89 37b93f8b8e19d97ae5b0a24bfb86abefa5c6cf5d1aa39060c386f9f215f37fd2
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HH8aB9tMWgZ8kQaCCZuQkgeG%2F3mQtuatJwOkeV0JQrBigPAaJel%2FlDYj8PaE0v1nzolF6z2MR79wdPuh3LOgFh%2F8oahUJ4wtr4SMoQw8qp8WIR0m7f2mECCMuhgXRBWxBBKw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9971cce1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16963&min_rtt=519&rtt_var=9503&sent=22240&recv=1178&lost=234&retrans=267&sent_bytes=25227222&recv_bytes=270320&delivery_rate=408967&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19453&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 2.2 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash30a812f55d46c4742bf55cab96903c44 794ce5813773977655aff6e84e1019f0356531e8 686f27fe76ed3873c4b3a78eacb7a121d1826b90ab1783a5195b98c02ffde58c
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:38 GMT
date: Tue, 10 Dec 2024 07:42:38 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NswwyYyww6sgcRUz6EY3tKy9tkeHhza2qjNlgMNkMdBibv4Slbzr6JD6CBQK9YGBGw8FxkAZwB33Z%2BUFwF8og5xaFFpJ8tUhw2Q%2FPXzhBYxWfNJThRCrdGQs76kN8V7ysSo5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99729e40b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19593&x=1", cfExtPri, cfHdrFlush;dur=85
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347143
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293534
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337267
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218532
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335956
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290731
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZJuFQi86wBVfl146L17EmEzTnTur%2BSQYgoJuv%2BBrLKLI%2FGaYi60HW9%2B95ETnhGU1%2Fj16PQsFcWUAnMJ6Hq1q50GSXKkPahqN%2BAuizFTJxviYlV0evBZDUN2sHbj7SZzMBjBd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99729e4fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12067&min_rtt=519&rtt_var=7659&sent=22406&recv=1193&lost=236&retrans=267&sent_bytes=25412069&recv_bytes=274818&delivery_rate=1010&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19586&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TUctDLCPeMxeEl4JL495g9IXuOW3sw0NGYpxUZUaS5lItF6ddC1gBRZMJwN3TxCbPK91FLWKRqTZCUk8Rjn8ALaSKww1xWx19m%2BLWJNBtwAK%2B8ITh0El5xPUmDneB66avd0X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99729e51b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19599&x=1", cfExtPri, cfHdrFlush;dur=79
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JRLYFKoEtd3zL6bjFTfkpe69etmV5s0AC3IW3LNcZ3KrrPdfDQYthwGrRfHx1W3R2Z3LcxsTT4p3GUrav8aAhEsgXZ2Vme77UC5Au6n7K11TbH3DjLjgzpWCjlfQK0x%2BCVPb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9972ae56b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19593&x=1", cfExtPri, cfHdrFlush;dur=85
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtN06JPPI1u6RyfGJHkpPsBXb%2Fl53LrXSeZ569%2BAMp7XHtY2opLFaXvqz%2BCHWLgT%2BjcCOvv93pmRn2tDSuh9oturhwG1JLRMK3wBOcbFPKS2h%2BTXThsBxADtUIZRj8Tbryjg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9972ae59b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11849&min_rtt=519&rtt_var=6180&sent=22485&recv=1194&lost=236&retrans=267&sent_bytes=25504814&recv_bytes=274865&delivery_rate=151259&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19587&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iNHvxCIGxCdSYJSfeKfDAEYZlOnmo59ShWR1k47oFr%2BygbPXTgJj9E7SBeLuRACh4SzNstSHgK5Aq8Peq8ZZKeqVpyD%2FZuRjmndFVSSsxroem%2FFwyYfVnYhRfa4gkTsJeQMr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9972ae60b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19602&x=1", cfExtPri, cfHdrFlush;dur=76
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NMoJmj6%2B6mI7kJKYd6UdgrgrTVeU6z6P7ZXonNw0JSIJfQTvOo7i8lz3aYPQUkXtwLv%2BJg6QfQoD1PD%2B7G0%2FEyhPpBW6Ie%2ButW39H0TLq7OTWtYw4SE3z8bG7Bo1YKZ1mVdl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9972ae71b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19594&x=1", cfExtPri, cfHdrFlush;dur=84
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kq27VwNUrdqyVnOcOv9dOV6qi9HhH4eHL6q8E327FO0GKL4KrLyURyYXfpMe8L0UbtxZQxrZdwe83WXrUr6ZxkYKJwP4tlVDcpKOVQuBLQPIKZCO7fB1%2FhPpLE5nZwexj1Fi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9972be78b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19614&x=1", cfExtPri, cfHdrFlush;dur=65
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETXbsVl4LPBsLTIhWaFKUXwLinRhcfWhY521PLEnn0tLyjHFL%2FnB%2FGYRWehzrtHyjZW6kFzE6LCCK%2FXb5mr%2B6XF9IkTRXo69cz8q1av%2B2HBQphqXHtFc02EG6heRpDbjCRuP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9972be7bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11745&min_rtt=519&rtt_var=4842&sent=22490&recv=1197&lost=236&retrans=267&sent_bytes=25508139&recv_bytes=275543&delivery_rate=283368&cwnd=225813&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19598&x=1", cfExtPri, cfHdrFlush;dur=81
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2B%2Fac1V%2BOviqDKyIEnhhht3Duxtpz6i%2BuSovuoLYApnqkzbrEQRqqMQOGEQ4iZpsUs8UtQWw0xA%2FIE2ctGu%2FriL4ThU4IkHLYXL81o3PrAK7iXYvldsYYfVdZEhWn3UB%2BAZ4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f53b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19689&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pGnHa5XIwSLDXigjudgdKiqOUCiLEB%2Bt5GHhSY3Ouzb1k2rfiYnNwQBUWpyS1OwUs6eo33f2rFAS0SjzktrshOkae%2B6zIx0YG8My9DqYUDzrXGLlMadC6LEN1ThdypdMIvRj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f58b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19689&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnTL19WY%2F9MxbyjjmaDJOPQLe3M33TvU%2F89BOsS5kkNcXTjXoN38tBSl7ZitDu22gq3NxSNk53rjZ8EHEzA6yYHORPtWlFLzCxuRDD1OEdqjQIUtdev12xDTttPwjBIxU%2Fd2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f59b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19698&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D55peGsDs9GMdc4KsfDXa9YIq1To01FLaMp8SVtzIh3ocYf1fbiq3YyXfpFRZ7AZIjW8fvYV3NtwVDUfR%2F5gJywQdRg%2BFx4D1lG16Pqj1TeNUZIWOz1uVbykI2y39k1Rh1tW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f5ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19693&x=1", cfExtPri, cfHdrFlush;dur=6
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oW3VXduXGeCN71epX8Bv1GShW14LyKI9h%2BFZEVfOBPRFzOFsznAx%2F2qYypaAKnY7A2jqs82BmLYTT2vPDH%2FenQAnnBlCZXcVFMYpP9iLfni%2BHbvaZuajrTHhc8zZPUDgd4%2Fs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f5bb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19695&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUbvZqZWWb9utMs%2Fm%2FW9G%2BBd9ZeYeyCKTN6RJksq1LWcbcVlQJSC7bsnAW9yIFUsr3GEizJLA3tXtTkdkCyOthm8mT7gN%2F%2F1TuupWqkiFAA3%2F%2F%2BJydfCsphXHgii90C%2FwLDD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f5cb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19691&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 19
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aDXe36lf9JoKCvp6a%2Bx5y5F%2FfKVJDeFFyON3z4KIH8BxHAI28VvDTGwZe%2BM6%2BA9SY74V51S%2FUskPZNa517iKQFAXYfLSvkD7p%2BlpZ4O58hAh8UwGvzJ%2BpMRdTudBl4KGG0p%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99734f5eb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21231&min_rtt=519&rtt_var=18235&sent=22624&recv=1202&lost=237&retrans=269&sent_bytes=25668248&recv_bytes=277711&delivery_rate=2588335&cwnd=158909&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=19690&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cesupufius.com/30219 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash9e8980da807d66e83a610de4ce2a4f55 5089d03a52743a36b1ecb58f4187a9d9c49a41c3 ba4886d939353f55abfd30312e321438bad7e8c8f6015720f91bacd27fc6a23a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /30219 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:38 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:39 GMT
age: 4151511
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5421
x-timer: S1733816559.064653,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392197
expires: Sun, 30 Nov 2025 07:42:39 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nEht1a4SNG7xXvhe79zlRKC2%2BSq7czSo7r21LyiSd6tdGYHfkxY6RHvOeTSPxTqERW1rM6axi8NSAfM%2FYyhpxJzgLQLzuSoEsNLSSOrKLcXRG3SpCP2h6B5ZT1i8cgmgfh8QPIwW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99762bb156b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5140
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 20
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99763ecab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 25 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 20
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9975fe82b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 125 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Size125 kB (124726 bytes) Hash821e9a9d62cba517e1ed1295ded1a456 f66da083b2f786bbbdd65e574bcbc6d881934690 79a20cc1acf2778b9550350656f44502a0602749bc1af13a060305b97d1f4c6d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:39 GMT
date: Tue, 10 Dec 2024 07:42:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=biOyp%2FL2imfD82cYZ62WV1shPTt6bNHk7ooaLzbQxiuTRL4Y10kBZcB7r8umEGZRrLxGdQHKt8DgH0Lq1cB8CNVJ5qYxDG7gV7AD288Mz9jfC4SHV6qUeNU3ZQuOar%2BK7Q8N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99778e32b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8957&min_rtt=519&rtt_var=8895&sent=23166&recv=1233&lost=244&retrans=277&sent_bytes=26275875&recv_bytes=281595&delivery_rate=864164&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20376&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dZQWpwzva2tatW4NelSTZfQiNwLKAbfj57u7UF3QnrsI0KwVHfNcW8GMlUH6Z2Lo2R%2BSCscQGMarX4XSzJOo%2BUuA0RK5qeFq0l7MITf4M8wM7CLkUPMhRbmj7zPUjiwARQOK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977fea3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23173&recv=1241&lost=244&retrans=277&sent_bytes=26279243&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20440&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3LsYjp3KUUFOCZ6biismEVIznC2cH18zVW6hWbdQ7BAljMleZHihhuCzB%2FxP%2Biz%2BKkDbKQFSSTzYnax5qORE5Jb7iyRyahe9QTGiFW%2F6Nr9EYh0xoUwVpTdg5uN9Wn409s53"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feaab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23175&recv=1241&lost=244&retrans=277&sent_bytes=26281440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20440&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4dFn6tiixMSjP89J3FZ2EShnFlOysg0ZVKwWdDU8SAcjnAZnoWm5KBxEZoclYbZKL84dDhgRQckDJWQ8FhzE1vipPhTNXLipHktomE1ySRIeTMBFCwBw2VPyfhU8rHkaI9rB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feabb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23175&recv=1241&lost=244&retrans=277&sent_bytes=26281440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20440&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NVoY7xKFah6aPFr%2FFE4CxAGB7tgRo6HEks%2B2SAnK49kpiiHuW%2B12NK0Q%2BYfSzqYOWoMqJZ%2FKHMwrqV2PbbO2hGy2SWhdjdSbHvXRnrBYSM1VnMCxvHedYbjQvpS3n0nBKa8d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feadb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23185&recv=1241&lost=244&retrans=277&sent_bytes=26293440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20441&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lf4BC0B3sphoc7OVr8ExDFHCvGq7LZMcPIhyPGTMF1rxypk8VsdwW14yLVMNlEiRhJMKW5RAxbnj%2FfAr4PCXektCkjEjFE48ydIjcdWpHdzOoFDHFQ76Zac7OyqfQVRYCv9E"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977fea7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23309&recv=1241&lost=244&retrans=277&sent_bytes=26438967&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20444&x=1", cfExtPri, cfHdrFlush;dur=50
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 179 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size179 kB (179066 bytes) Hash964892b87e3eb3cb488691084c0b57de ea0eb404d41114b60e7782d84b761c231fab6403 77c7c49b01009531068ac435a2fb7b7730f4d4201299c702c50a73bc2b62d29b
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:38 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g5c%2Fu20oju39F8BfBX7VdTg20e4CwivRDHuAG4dqCKuaRQanrgtu2ZJ7Y1VH8I3jCOhTNFIfDhfMqUAPvClqXccHcimRbJ%2FyIf%2FnjiRenPV6HJCNTvRk%2FEWf1tXrSj9qru4d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99753a4ab515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19664&min_rtt=519&rtt_var=18542&sent=22973&recv=1216&lost=244&retrans=277&sent_bytes=26065141&recv_bytes=278940&delivery_rate=1143&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20033&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ienvi3%2F7RHbc7aKstWdzkhx2Rbn2J5BNRVMqYP3JncYg8zgtyml17MXSNWMhqYb3uOGcjLYlsf4hDuuOF9PLNeDCmffgeiNR5%2BxLc%2FXIrL4tsyLHxTXiYs8sD%2FJBJv%2FcvolY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feacb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23309&recv=1241&lost=244&retrans=277&sent_bytes=26438967&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20448&x=1", cfExtPri, cfHdrFlush;dur=82
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lmit3c5YFUC5JpZ5X0FeX4Rra1SM6x20PxDKfZ4QeKMrqawuqqy5glaecD2nOANgydTvMZGqUZ8W3hYKqxSmDDu77GPbZH27SLzYq78aElZcxwFHaLisYzRZwinNK%2FvCOwdW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feafb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23235&recv=1241&lost=244&retrans=277&sent_bytes=26353440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20442&x=1", cfExtPri, cfHdrFlush;dur=88
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yplfXhIULQgb5cNQo%2FJX9mbX5ZRpnQSlLL2RMET3vy96F1MvluIJT4JTT0gn7U%2B1wPSY%2F3JEKOwDoAUnOhNEkldxTL2i5TvK0%2FC2ui8bhYliC7q04fkhax3yFsYrIuQ3wndS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feb0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23195&recv=1241&lost=244&retrans=277&sent_bytes=26305440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20441&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ehctSmuayyFDVgdgegIpoQGfuI1KPaEGEm2ZF5vl7wKAr2TSWrIlzyWL18ZcUfJwczB%2FOb%2FIJKtAY9CUJCO8GfVtrim5396kqoM6pfHqUMrmg6p6YmALaqpLHxc8OdeY78GM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feb1b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23255&recv=1241&lost=244&retrans=277&sent_bytes=26377440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20443&x=1", cfExtPri, cfHdrFlush;dur=87
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PpnCANag08ZBK7ql%2B1MyxLpO14G%2BH3mi8Hnqe5kehoDRV4zNShBrIifyNSDdJugALpyLP2KzIkxzBcNun%2BcFHMcRJZgowisYyryzAbO0H0P%2B8rRxf%2FgMKKyCZszharTbVFM2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feb3b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23255&recv=1241&lost=244&retrans=277&sent_bytes=26377440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20443&x=1", cfExtPri, cfHdrFlush;dur=87
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oqZgycdb%2BkKT1%2Be%2FtrNiVxOANp4ffO95Gob%2BfPwKJ7FD50oL83vaTj2gBe8yq%2BWP%2F6QnPyZqwxtYwliVih7ZPnYg5fYq2yM%2BX1jyxA2WXWYYymFxP176WOPjjn00D5w4jToJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feb4b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23309&recv=1241&lost=244&retrans=277&sent_bytes=26438967&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20445&x=1", cfExtPri, cfHdrFlush;dur=85
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Y4GMqzNK839GIkcp6U65tPtKX07GuJ5zUaQISLUzC6DOJhuatl0U%2FGrt48hwoCqKbciSObtSwNHIjsUACwPSIveP3TImV3seKHxsSFuX6Wsz%2B6sOUfS5D0285PuzGFOLqfd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feb5b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23309&recv=1241&lost=244&retrans=277&sent_bytes=26438967&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20447&x=1", cfExtPri, cfHdrFlush;dur=83
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gx1dTfpifjSQntrRWZ7O7JfB7qTNEmPOgr%2F%2FhAl%2BQ8y2yJ1gJIcwEdeHfV6jkTCPJsvuX1at2HDMpCnlowu0GN8b5EG6n6S%2FSH6%2F02tj1NC4rP%2F8TstU0Ezbpu7xJQF5JX7B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977feb7b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23265&recv=1241&lost=244&retrans=277&sent_bytes=26389440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20443&x=1", cfExtPri, cfHdrFlush;dur=87
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pez1VKlj9X0zp5ZPnwAlc4QgZZlGfc%2FNWsjHvGjIlt524f%2F2aWi5BpWgNbCmW1ep378GjF4pKuYLoFlMhN%2FOWgR4JfyTEaa2rHNE%2FrlpeIokHFaBPpSXGbdXQM2aadagzaeD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977febbb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23255&recv=1241&lost=244&retrans=277&sent_bytes=26377440&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20443&x=1", cfExtPri, cfHdrFlush;dur=87
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UD2rw0jI4kr0RxSga%2FEAh7rTGCERON4We0u23XVJCT3jOP1RNLE25bW%2F1Q6i44N41tzxRea883be2MpOrbrHoeuM6zlob6UCTsJ9tMI%2FUgkxCOZ8nXSEtkOM1xVSuLujBro6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977fec2b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23309&recv=1241&lost=244&retrans=277&sent_bytes=26438967&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20445&x=1", cfExtPri, cfHdrFlush;dur=85
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZgaEcWaMtgvC4V7CYwJsV%2FyV2pGDmloVuAcGtQy44l75IoxuN3NBXIRyHUWT04dwD9u%2FwPRvOVcooIJ5BT%2BiOlyA4OAJjcIpj4xVm4oKTvh9UnCLwA0cCEIlSQJjvKgLqj6X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9977fea8b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11127&min_rtt=519&rtt_var=10011&sent=23309&recv=1241&lost=244&retrans=277&sent_bytes=26438967&recv_bytes=286668&delivery_rate=60126&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20446&x=1", cfExtPri, cfHdrFlush;dur=48
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0WKzcqMXdn%2BYlvnhiZ9we4QUhp9aS5zK6izstrpGDMefSmyU2djTudScoMxGJjp4PhSm17Bu8M3i1EXFZDHDjmWZdmXkEpqJJ4JYYU5BN8dm5Io8V8%2BGGp7eZUeH9VsMcPB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997938b0b515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18423&min_rtt=519&rtt_var=15361&sent=23619&recv=1246&lost=245&retrans=278&sent_bytes=26799572&recv_bytes=287199&delivery_rate=9259&cwnd=161429&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20658&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 43 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash856a11c809dc508fcccec6c0e1658109 a443c1e86bc848e00b566d5b181db9db0e8d88e6 fa76a400b77acdcb513fa00ae50914b0deb785ef08d7c685e843cd9518096245
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:39 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 20
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H48L4KoBWO6%2BUAnyoGPJ0wVNO5b6VWnUK826TKQaaOWBMaAaHZeUPOQU%2BXZEp6mYe1PhjlPenjUzdYLTXXtjF29tmMA2fpnGZI1liXaXnjyzt4Wm%2Fn9ICA5dusVi8nOSYpEN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99760b8fb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15396&min_rtt=519&rtt_var=10606&sent=23003&recv=1222&lost=244&retrans=277&sent_bytes=26094329&recv_bytes=279750&delivery_rate=124332&cwnd=159749&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=20136&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337268
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218533
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335957
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290732
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/73413 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashb371caa35c0bfd16affc6753aab69a2c 95e24eca811bba9bc48e6dfcdcb455dc759b10fa 2cfb1209d1008a4a5186a3f5e65843c73dcbe0acf3e4d620e37a4b205add0ffd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /73413 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:39 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392198
expires: Sun, 30 Nov 2025 07:42:40 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NwBbtDwDeeqMrucGtNfHOks97cHMHYFF%2B9fRPr7pSLe2YyOtB2CIt7Qlri17SS5XOhVAy%2FVdMJ8%2B1xtdHuZtupakWHJB%2BcV45GiL7mvGdRvticpYqBB0jJERlEzHzeIbl9u4TkbL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb997cbdb156b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5141
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:40 GMT
age: 4151512
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5422
x-timer: S1733816560.118425,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 1.9 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash0b3fdf82badbe8344c4df65f57db8572 8c570ff9cd9538e4f5072e4ba109ad3fbd1b2a4f 4c53a1fe7e5baffbf7d817cc75d1f4356d0f5d5bddc61f091ace616b79a9aa7d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:40 GMT
date: Tue, 10 Dec 2024 07:42:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bk6UzlMvzf7vEv8CPP4Z7rycQp3aodxdxl6It9JTLHdPzlwoaIK3T5B4v7WDiKn3BWypyZHU0PHpfFTbWQ3OaZaus3mS6OrltN8qLMPFEz4LyFIZzfuXG13jB58pV19ohpli"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dab31b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9612&min_rtt=6391&rtt_var=4164&sent=127&recv=22&lost=0&retrans=0&sent_bytes=127001&recv_bytes=5074&delivery_rate=1476107&cwnd=48000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=191&x=1", cfExtPri, cfHdrFlush;dur=6
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qJR6xI1MAsbD1lUgDPuTFtRfy7Io002lbumC4vWPfngxt%2B6cQmdcEDl6q3gvEvYLUPYp83X9l31LdI81t5zq1JdujW2Qz%2FMMevG1nMRkxxT4jlLd%2FNzTEhWSSIZg9GsLtJgj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dbb35b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9908&min_rtt=6391&rtt_var=4764&sent=84&recv=19&lost=0&retrans=0&sent_bytes=78975&recv_bytes=4395&delivery_rate=219964&cwnd=24000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=185&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashb3f2a6c8e962056be44e762004510963 581bc7d051a49eac8695bb639dc32d793a0011b7 da360032ffe9a613cd1f098339374731d2b38a8c761cd2c74ec99441752787c4
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5dMM7Hga%2B3%2FvSThdi%2Fyz79GlfcNCzPdqvGXxTr3yG3fIIkW0UheHFP6EmoaiHBoW9JEpITUFnx7IHYiczuZOD6efbSYND3OiSj8cSLwbMuycZ7YD8NmZPR54OGBiBsPpM2hi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997cca2db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8649&min_rtt=8453&rtt_var=3563&sent=11&recv=6&lost=0&retrans=0&sent_bytes=4050&recv_bytes=1398&delivery_rate=59100&cwnd=12000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=41&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WW%2BH%2FrRL6LnJhTq72fKiAaVWb81tFNwWwpZlDPcrFMdKcO0GumONq4bIUAxo8mOwd2akfRAbjW3LOtBh3KBD4P5CvULM2jvQOe%2BKifx5iQhgPtoHcKJ13LH08jFDDwm3WVnL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dbb44b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9612&min_rtt=6391&rtt_var=4164&sent=126&recv=20&lost=0&retrans=0&sent_bytes=126975&recv_bytes=4441&delivery_rate=1476107&cwnd=48000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=190&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 151 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size151 kB (150984 bytes) Hash86808eead4f2232e494750b55e76c613 20248988dd74c93f39922933d945832cce675239 b74271d213fb3311c27d2fe41d1424172d6404d80f12bf48647cace91bbcca65
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
Alt-Used: 0
HTTP/2 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ualjm4XYIGmejzqrZHtpP7lp3aKko%2FhfafXnAuC6gyEUNXbLInKmuMqOWOJkWmNII6h%2BIdue%2FGp1D7y1%2B%2BCzAJf76o2bFa2Ag4EKdrvrUbF5SAxiwa7vzxB9jtNzsY07fExc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb997baba91c0a-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=9851&min_rtt=552&rtt_var=15487&sent=9&recv=13&lost=0&retrans=1&sent_bytes=3421&recv_bytes=1172&delivery_rate=528017&cwnd=254&unsent_bytes=0&cid=5bce2e589b97075f&ts=105&x=0"
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4M4r9B%2FEfgmsN4zORY4%2BuJx2e0zbLpbz%2FpNhsvABPWC9VzWVUf1KvAIu0IQWUUAfN0pZethmgm%2BKGPO1m7jnZAHEs9F0oTDfPBrp8rseLJ1FOhQ03YZl8ae5V5j5oyxDJem"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dbb3eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9612&min_rtt=6391&rtt_var=4164&sent=126&recv=21&lost=0&retrans=0&sent_bytes=126975&recv_bytes=4759&delivery_rate=1476107&cwnd=48000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=190&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uJq6pYXx7rKk4AtkXajuzhXgf7W7qNPWwr9NG7oGJh%2Fa9q3lLzQJaAedyKPkXn2Uc4NYoB1o2yxGN%2BFhWk%2F62a43XaDYrzI3j7lFQEKMLStbC178rmROpqs%2FZ8qiljUdFeQL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dcb60b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=212&recv=27&lost=0&retrans=0&sent_bytes=223081&recv_bytes=6380&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=203&x=1", cfExtPri, cfHdrFlush;dur=26
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6xkW%2FVv15wwMe4PNbji6xXyEZ%2FhZ6ebhETF1YWSiSpYfLgNPOSlRuEp6xnpJEKgYrkUG1bNp8ENvl04wnVoiZYTEFeDYg3TaQ9IPrrMXMpM%2F2Vs49%2BBV3BDeEpb%2FBfHSF5sA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dcb63b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=212&recv=27&lost=0&retrans=0&sent_bytes=223081&recv_bytes=6380&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=203&x=1", cfExtPri, cfHdrFlush;dur=26
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ROnnkAPiiI5hP4tudIOlwygjTv8cXCesuKAsnAj%2B0GePB2efVOZVoknL8h2WrXAETrSrCvqHc1%2BHZvcsFb573dooBaxejCarBnu135H8LCm%2FJt0qEJ%2BBzK3YPVvNt4OjT3rR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dcb64b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=212&recv=27&lost=0&retrans=0&sent_bytes=223081&recv_bytes=6380&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=203&x=1", cfExtPri, cfHdrFlush;dur=26
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 48 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 21
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb997c9f66b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DVYcYLF%2FPUiDiAL9Ir5EWtdLLAnjRXGYKhEEjGVy4jRbwpyYYs1OogoeL1GyNsnL7tXylYBKlU5B6EXpVbCmAKuI8rC6%2B%2F98lJAxz%2BXuL6vG4AuHEWcKdxM%2FClr3nTCsBqDo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997ddb83b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=215&recv=30&lost=0&retrans=0&sent_bytes=223160&recv_bytes=7323&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=211&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AFkyvw50f5uajy8kksTI3E3UDVdSTP0keMzi0nY4m8jD6LnZZkIgQJh9PWtJg%2FrdwLWuOBRSsYlSkwXVv7Q%2FSWnysd2DaZqfDloxofulMTB63iEs9BQHcaJoPdzPZXQTwMDa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997deb9bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=216&recv=31&lost=0&retrans=0&sent_bytes=223187&recv_bytes=7638&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=216&x=1", cfExtPri, cfHdrFlush;dur=13
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hBqUpJ0GUWN82ZRXCRZP83jRcszgxdLiBruhnnUZQ1IL3xQB%2Bm0lwOhyl3jJ042pEzk3DE7NmIVh3E9%2FrqB6dLAG7aRDIZH0wsR4HadqidTITcUlN3SWYvdPQH7ZE1P1E72T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997deba9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=216&recv=31&lost=0&retrans=0&sent_bytes=223187&recv_bytes=7638&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=217&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhIaIjAbqnLlzUAlubxKcuHk%2BtGQ5O3A5uPp0l0Msj7zh6lLrIeil5v6HInNx9zgZ0cSYaJYv4nHkJSYyd%2F7nJp%2BaB5Wpmw0XvSV6y3bNmjf3v6dq2rSffE1jbqrJlXsS3Oe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997debb0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9256&min_rtt=6391&rtt_var=3835&sent=216&recv=31&lost=0&retrans=0&sent_bytes=223187&recv_bytes=7638&delivery_rate=5695962&cwnd=96000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=220&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HCdTawt0Q1ST2jm1O6053FhMLXgN7AeKTDTKtttAWOhjILPtiha4zC%2B5LSkgzSF02cf73G7y5h%2FUex7nAP%2FpjfnrWmQRHCxe9n6vUjYqehOFoAATiTHHaGTgT1jv%2F0OBPhz3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dfbccb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9856&min_rtt=6391&rtt_var=4076&sent=226&recv=32&lost=0&retrans=0&sent_bytes=235187&recv_bytes=7684&delivery_rate=3092025&cwnd=123600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=230&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abvkVRkTZGAB4aMpe%2FQh6TU%2B2F27PlnD9QtbgIB3t%2Bo76%2FUJ69fZSCoO5OmAMZYiyszrPS9BwG3eaRr88Wd9iQAIWX2tRW46kRorT9TiTQxRIi%2FmMMXw74SN%2FY2k4At6AXVR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997e0be6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9856&min_rtt=6391&rtt_var=4076&sent=323&recv=33&lost=0&retrans=0&sent_bytes=346814&recv_bytes=8555&delivery_rate=3092025&cwnd=123600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=241&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3gqmmGpTXwXFSiYvDqbNkAIu3UenEtjd%2FG96ZLz3IyfjzSDq9DKeeo%2BpaXx62QrjBjY53d5mcRLtPIZpaG57ZL91Xk6sCpx8pRqYMEGcyyNEYKdbXiQ40U8twe7IPRCyaN%2BM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997e0be7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9856&min_rtt=6391&rtt_var=4076&sent=323&recv=33&lost=0&retrans=0&sent_bytes=346814&recv_bytes=8555&delivery_rate=3092025&cwnd=123600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=241&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sN15qY3hLIVX5qkxpQ0QUNhdYN4OovWQBZ1OBMP0IpJ9FsdhTJ7JKLvez0Z1wjq6WCqnR1FIHPXRu5Lwl9GS0IeOuCdDMi1Gl2Ycu0%2F0mBS2lQVKuOt1ttzvbMg%2BVwsmW4%2F%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997e0beab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9600&min_rtt=6391&rtt_var=3568&sent=525&recv=34&lost=0&retrans=0&sent_bytes=586814&recv_bytes=8601&delivery_rate=10565789&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=243&x=1", cfExtPri, cfHdrFlush;dur=57
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2BNiIVzdskvJXpfeLGIeMxq1mKQeEKkdHrvrUDseq8fAxD5hq1BA5sPVaxLV7quxtx%2FCMlUuzHQap6SwUDjSN3xfBkcr02FI2cieu%2F6YDVvQGRIYIRsIB9Dm%2BO6Y8CSgsRjp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997dbb49b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9612&min_rtt=6391&rtt_var=4164&sent=129&recv=24&lost=0&retrans=0&sent_bytes=127054&recv_bytes=5703&delivery_rate=1476107&cwnd=48000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=194&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 85 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 21
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb997cbf7ab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PwsphNduofKU7QXzl%2FtqlkFQFmXDIDm22BIE%2FgZAwXqVldyZxsDbr8Rew2ZxAcxiC67YO3q5Pwrj0bKye9ju2hx6XYf2W95orDk%2BqqjtEfXpFKteA3TWUecARASuCvneAgaw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb997f3d36b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=27077&min_rtt=6391&rtt_var=23082&sent=652&recv=41&lost=11&retrans=13&sent_bytes=726276&recv_bytes=9227&delivery_rate=136877&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=433&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347145
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293536
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337269
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218534
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335958
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290733
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/69658 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash1e5353875c22bf0ef99f0258f1937a7d 9e22924d7d2ac4dbf8148e868b015a8e187b87b6 97a0bfb218d861d3c59df6ce9bad76ec954e4dac9efad879008dea9d2851d58c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /69658 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:40 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392198
expires: Sun, 30 Nov 2025 07:42:40 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m8DqSGmrbPuGuDnOKjSh3gq%2F20tXUIZHGyLIkOKKy%2BX2GXyc2GJ%2FaQX51vqJMMqU8HDt4o0rfA1Q0KFvv5GlZhP6iOHeDA2%2BZ6Xin68%2B1HaqE0QoQzip0FS%2FIAsshk%2Fkn7iNqPz6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99813b6356b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 55 kB |
IP 188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12693), with CRLF, LF line terminators Hash6d0d5075c206aa99aae0a7ab85456a3e 5678b72f9a61b087acc446f84cd64e2edbae1ba0 8e11aaf27c7fe15aca024879d96492ab52a3fa42e07a6364ab3c399fcea625ce
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aypOtl7eMod%2BE3qQS9QUCgG9xUpd2a7AOlCjQAmmdUlnrMREzBROGArwgCkaLY%2BmVSTna4fHHLkW1b%2FOM0NY%2BbAAJjVRlR8GAcCJBpGPWKUlE8EDZoBKiAOfws3%2Bw4XXKAuN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99808ebab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=25479&min_rtt=6391&rtt_var=20507&sent=755&recv=43&lost=11&retrans=13&sent_bytes=847966&recv_bytes=9620&delivery_rate=4619832&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=666&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5141
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 18 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash9d8ec541c25649bffcc6d3e41c620cf6 ccb2e26e2772fcd6a2ad2bd187ce53bc14f6ddaf 5789d1563d23c261f729b25302ed02835c768dbb81f3993cd363e792d4583f76
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TUhnWnMsYv4zA5CjeocXcn8YYE6qEC7Fqskrji45JJFwrzBh6TJwjGmY7RNTXbCe2SHa3PIU2i%2F5LXd%2BWV9MtZibaRHifWwLpo5H1Uex%2F5Ipedn%2FLuz7cnAJTXsVLtBjjvBU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99818fe3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18131&min_rtt=2975&rtt_var=16515&sent=809&recv=50&lost=11&retrans=13&sent_bytes=906463&recv_bytes=10715&delivery_rate=4546344&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=827&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 5.1 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash0146e108008e1a2843b5cbb57ce709d9 e732a4449a9ec025f6a7f983335219b3f2c47795 7b66f293e6a8219dcc3e9dd2f2c64ee51b81c96db87ffbaf7a1c16d4481b9c0c
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f26c8NNIEd%2Bnpdw%2F7RyEcYAhEfnZnF4KeQLmlmgorrKSe6KaIV3wKBpkOs0QuHAgKcPsaPA2qu5tKZlbnDeTxM%2BbpgIyK72OcU9OnCOHqi8lM1ML5iPQsH5I5vA49OVr%2F%2F%2FB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99811f61b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=22276&min_rtt=6391&rtt_var=16766&sent=780&recv=47&lost=11&retrans=13&sent_bytes=874187&recv_bytes=10331&delivery_rate=662130&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=728&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 146 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size146 kB (146323 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 21
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99811cdab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYXzEVJi0m8Uj4mC%2F3jEx%2FX1zaLq9HmOUkpdGLsXP0EEaSV5DQisY%2FvmTEsbZAGQmkCs7Nc7xDYjJ%2FV87q%2BofjnFmh0mmbLLSkhkrOIT3IfVuXeKKz2nMFuDhHzZWxkIFCvY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982089cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14109&min_rtt=2624&rtt_var=12802&sent=963&recv=59&lost=33&retrans=35&sent_bytes=1084877&recv_bytes=12765&delivery_rate=3937074&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=882&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o4b9HoFDvzvQSIS5CBMd5FQQm7bZ%2B9kNGcQXlkOrf75WSFZgCS%2BZn4E7Xe8aD6Wbv3tValoNGVRPszVTz%2FkspMnblX%2B3RdKFO37G%2BM7799TCiD%2FmwSnM4wDgeb5m9pAW1UM1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982089eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14109&min_rtt=2624&rtt_var=12802&sent=966&recv=59&lost=33&retrans=35&sent_bytes=1088139&recv_bytes=12765&delivery_rate=3937074&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=883&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 149 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size149 kB (149074 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 21
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99813cf9b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 77 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash5ac9ff8746b711c3d70825159a820127 a94e9fe6e7174c20249594ddb19df2279c040179 76251a9720c9ed360d731251f5fe3ba468c08e5fc58c4287cabf05f1c2b58271
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:40 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HZssy5lr4vOrPfACQ5eLMT0uFQMU1v2XG0RiKw5U1D7p39UcRk%2BjgL8IYYl%2FxTQCuLIKCsKbYL6UZUYu3k0Nv0qsZd7aMjCjE9eMykZrV%2FFWNumGmfEi1keYrJpkpmXLbD5d"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99812f75b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=19864&min_rtt=2975&rtt_var=17400&sent=783&recv=48&lost=11&retrans=13&sent_bytes=877098&recv_bytes=10376&delivery_rate=261283&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=734&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AGMRD8FIaPSe%2B4r7xhc%2FIrzoXpoapp1WyUel8G0LTNPwhWjmjz3gD9EM1k3GujgSfshwCHBNbG9OcVLhlY3xEiZiG6DUApazCm%2FqgtK96HWdvFCgKIvcrdBr%2FJ5sJyEn%2BNLX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998238f5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12779&min_rtt=2624&rtt_var=9311&sent=1132&recv=68&lost=33&retrans=35&sent_bytes=1279672&recv_bytes=15907&delivery_rate=6334840&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=914&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6QAZ2Deg6KUBBCRhh%2FiwIy4zUz2fh4beTeEIJiisS2pBNO%2FUWna6c9fzh9lK%2BV4kK2FJbRA%2BkuXNnpswBfzG6SRrSrlTAF09JNi%2F5PJAoGPfB4GDuCMRK6J38SBoEUibawsi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998238f0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13107&min_rtt=2624&rtt_var=7638&sent=1139&recv=70&lost=33&retrans=35&sent_bytes=1286495&recv_bytes=16267&delivery_rate=6321549&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=916&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5zFDL8anB1HUjl%2Fd9tJmYm0ql4hwaEVOeYTec6hySIjnns7ItB7cJUMvAHevFEk5kw7S9ErD8BxyxfhDrmuZcL%2B7RA6uAGKMrbQ9pZ0lhlhhurojL6lw%2FoKxPiBSISlcFU47"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998238f1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13107&min_rtt=2624&rtt_var=7638&sent=1172&recv=70&lost=33&retrans=35&sent_bytes=1325695&recv_bytes=16267&delivery_rate=6321549&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=917&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=glqUrAf4j8djnclW%2F35gtEM2kKJt%2FQ6goCrd6BQrOFIfUJdzE%2F0V5DQvkjxFcQIMDxzsi52Dn%2BApFPcQyP85Yc7E3rr1CAhgunTqKiT%2FKEDx9XChvCZRZmhYDlr%2BOQBW11FV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998238f3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13107&min_rtt=2624&rtt_var=7638&sent=1172&recv=70&lost=33&retrans=35&sent_bytes=1325695&recv_bytes=16267&delivery_rate=6321549&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=918&x=1", cfExtPri, cfHdrFlush;dur=64
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8R2ZYsl4Mu8YUPB1bMG8mvagms5ytCUc5Oe1QYfIstn3BTdJIHT%2BH%2Fo4D4PofJH0b628PEt81QhFM4DsmhaT0YiznmAIhA9FL0PSQZOPvch8R6WNl%2BxXd5yVX9iH%2BUE3cqia"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998238f7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13107&min_rtt=2624&rtt_var=7638&sent=1172&recv=70&lost=33&retrans=35&sent_bytes=1325695&recv_bytes=16267&delivery_rate=6321549&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=917&x=1", cfExtPri, cfHdrFlush;dur=65
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hVJJPPNF2Yt7mZ18eyYL1eo4MhTjk5Tg1fDwBFnrkOky7E0gqsGzKz3%2BaFvdUoCY5V%2BrQdvvMN9PQ9B40To53m0e1wKegXoLHoV77QYwyJmRP20coTeu9hjj%2B85zRAQP7RwN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998238f9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13107&min_rtt=2624&rtt_var=7638&sent=1172&recv=70&lost=33&retrans=35&sent_bytes=1325695&recv_bytes=16267&delivery_rate=6321549&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=917&x=1", cfExtPri, cfHdrFlush;dur=65
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FHHxD8nlOcl%2Fs5DAs2s7AmFBOQLoIb8fWh%2FNMN3keI8MEe4zYM6JAEunhxBGACGEIaHbpAHHVvU9rWWNkzvZDHcIFlpG6LAuOoQMx%2F6At1N13kNVlCDoWFC5598nDVsHnwiw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998248fdb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13352&min_rtt=2624&rtt_var=6219&sent=1183&recv=71&lost=33&retrans=35&sent_bytes=1337695&recv_bytes=16312&delivery_rate=829473&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=922&x=1", cfExtPri, cfHdrFlush;dur=60
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GjfQGyS0C%2FF65bRo3gTnXNkbx5hTdKfzz9ZgwGBiqI3vyZDoGGBBPyiWORTArHnpM3amfhwIlru2cKX%2Bpddsl0esNMuESeklEXLKX%2BtKizRk0O3X0BQKs25oFOSFUhnvpbkO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99824909b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13352&min_rtt=2624&rtt_var=6219&sent=1183&recv=71&lost=33&retrans=35&sent_bytes=1337695&recv_bytes=16312&delivery_rate=829473&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=921&x=1", cfExtPri, cfHdrFlush;dur=61
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1l8NUL6p%2FwmZKwqLI2EuBA7L93Qy8P3I7dPoLQN3EpvBZlZWP46wJQQOHM6ErS%2B%2BenS3ZMFtvp6ocpCJXTIASNFQyhJNai2AUDPqE0FQ5ZDESyz2BDOKFbraIjjh6kxsjG8B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982490eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13352&min_rtt=2624&rtt_var=6219&sent=1183&recv=71&lost=33&retrans=35&sent_bytes=1337695&recv_bytes=16312&delivery_rate=829473&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=923&x=1", cfExtPri, cfHdrFlush;dur=59
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2pMqGJEwytB2xX9dtZQu%2BoFjuQ54shAGaInPA%2BWoUKJ%2BTRDlnLF8H%2F9%2F6PRO0IxeUCqwOMg1K0yffDn8GhSZytADKvqqk6UlcAD5DUr61isArqMs1SIjRehlslKEMCKyrTBQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99825917b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13352&min_rtt=2624&rtt_var=6219&sent=1183&recv=71&lost=33&retrans=35&sent_bytes=1337695&recv_bytes=16312&delivery_rate=829473&cwnd=117599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=923&x=1", cfExtPri, cfHdrFlush;dur=59
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xrurmz5K78luGJem5kvb5GbBnefmrtZKjm6ue4dEJIwqD9kcfmncZGHMtzimGNzTGAJ9fZ%2BJjwZM9axxH0Vuw5cjRNtAXqKkptVJqyu6Ch3gxAA7dTtSn1g%2BqepG0Vd41eG4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982b9cfb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17779&min_rtt=2624&rtt_var=16836&sent=1383&recv=80&lost=33&retrans=36&sent_bytes=1575262&recv_bytes=17812&delivery_rate=1816381&cwnd=118799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1006&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lZDww%2F9pW3lhp0ubWkRHLggagbbvJxhwegQKtRaOI41Eb6kaeQd20Zjgab9Vt54xX43jco3QG4uVRUav%2FdW7X0o2%2BBSBrXzDbf7v69cFUbE9XS52Qz9w49Qbw57GqeyMYyQ9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982c9d8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17779&min_rtt=2624&rtt_var=16836&sent=1383&recv=80&lost=33&retrans=36&sent_bytes=1575262&recv_bytes=17812&delivery_rate=1816381&cwnd=118799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=996&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=naUQ%2FFU9lPybqG%2FvyGd%2Fx6zT31QREFNXp47T4TPHcTZOm0TiKLXZfY3a4pTSj5MIe35DjET9ny6P6GOMcs%2BAhlCOBI3o4H2Cr7q60%2FVFcqqDp%2F6nIiw3UgRbEOhFzJizqQvm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982c9dcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17779&min_rtt=2624&rtt_var=16836&sent=1383&recv=80&lost=33&retrans=36&sent_bytes=1575262&recv_bytes=17812&delivery_rate=1816381&cwnd=118799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=996&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UdVlD4tInT28p%2BbM3CuMszEVFsGZU5mrYdQGUe%2FZVY67aNx0%2BgI3BJPjg3v3na4vCDNcs236%2BE4HDTgKNVbvUW1fy7nWWBJC7y60ahnyr8KnvJ8Jg2%2FMcxfqmpSzEcRQAfQv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9982c9deb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17779&min_rtt=2624&rtt_var=16836&sent=1383&recv=80&lost=33&retrans=36&sent_bytes=1575262&recv_bytes=17812&delivery_rate=1816381&cwnd=118799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1003&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bGZIVvPqzJ68nLqL%2F6Od08csCtmT9fo%2FQvoPx1E5FM9pKyMKElgek5B5EuXZC49bvrV4wC8DMz4tvtYNnr2S%2Bk0uaeWYGbX2QTYTsxbstMeza4MnTTn7l1GybPw0k17a6yzm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99832a46b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18066&min_rtt=2624&rtt_var=12869&sent=1419&recv=83&lost=33&retrans=36&sent_bytes=1609545&recv_bytes=18237&delivery_rate=1955349&cwnd=119999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1063&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347146
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293537
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337270
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218535
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335959
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290734
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/32297 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash945e959a8fe27b4922922c8de24b94e2 cc415db0bf64051978896f5f96ce860f24ce79a2 e22326ea981b478bf5821cfeba755d820043776545e58b5a2d5445211ad00d42
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /32297 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:41 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392199
expires: Sun, 30 Nov 2025 07:42:41 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3Ol5TBTWVRBfthVdZmHLFEqRli4u7JMYLlD%2Bu6UWGURBC2L3j7PT%2Bqy7OS2SrRsTnHfNtQnQTlVMRNc0NFuJGzDUMoG4gGL4%2BhBytWcHIbcFDLAVOuuAX2nzfi6fR4YWmnCMggFu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9985f97356b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5142
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:41 GMT
age: 4151514
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5424
x-timer: S1733816562.605431,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 24 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 22
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9985ea99b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 151 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size151 kB (150984 bytes) Hash86808eead4f2232e494750b55e76c613 20248988dd74c93f39922933d945832cce675239 b74271d213fb3311c27d2fe41d1424172d6404d80f12bf48647cace91bbcca65
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T9qEmg7EeaIQ4hx1Ey61gWZOHWeb64P6AK2NoAEZvCbdn6T8cDmgMZwIJueB7tCA8tXUHH9XYBA0j6iE5tppB%2FhByiDrtPxJDzOEjsOwrT5WvXDVxJGVxLQMX8FqzfcaOApK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99849bc8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16709&min_rtt=2624&rtt_var=7092&sent=1528&recv=88&lost=33&retrans=36&sent_bytes=1736144&recv_bytes=19029&delivery_rate=169411&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1316&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IV0RQNtjhnX0KOyH3BffSfiEywujsdLH83EHjkDdsmcCMPdkxaQV2gSTeZAxrXCyy%2F1CqImDBdFIatoF%2FD004cLlpmE8ghNJSG%2FpXIWu86YnraFdFKBQ9buULWrPTUAmnq3k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9985ed66b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15657&min_rtt=2624&rtt_var=5801&sent=1556&recv=92&lost=33&retrans=36&sent_bytes=1765273&recv_bytes=19740&delivery_rate=861583&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1502&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b4NguPUp3ssfsXAfzPD01q%2FuxsMqw9UZfKqW6rBxJ7bUkFPd4x9SSO3%2FEbEpDDeopTHsiCCoMGWbPZ0Y4qeBaZ%2F4E7jbj2E1P1IOd8a6306QczSyxxPRVVQHLW0mnEJg%2BcCk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9986beb4b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12165&min_rtt=2624&rtt_var=7762&sent=1715&recv=102&lost=33&retrans=36&sent_bytes=1946253&recv_bytes=21529&delivery_rate=6020517&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1632&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Bq7vytpW6gR3eEx5yO0gpGmqag4CLnaA0GCngmLFCGw0BVC0t8%2BtUP8MKolZuogb1NgVysztc1gA4zO7b2KIO5Ovzf%2F%2BoqyrIJhoDeaDg9R2oQUPxH3zPW33F%2FcKaqZjs5%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99871f2ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18213&min_rtt=2624&rtt_var=15416&sent=1721&recv=106&lost=33&retrans=36&sent_bytes=1950023&recv_bytes=22255&delivery_rate=318875&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1693&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EIwkkz8xNFqSGI%2F7mOUM0S3qOA8MnjJjs%2BDeWNORL%2FIlTu7uxKEzGBZrKTR48LmPV3X1sHQ9rvpW1TLDOz4ssEEzKPsqWqjEnhyEtkm8wvMO7041poN8zv8S9A9jsJVGKTYY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99872f33b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16380&min_rtt=2624&rtt_var=15227&sent=1723&recv=107&lost=33&retrans=36&sent_bytes=1952219&recv_bytes=22301&delivery_rate=173677&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1698&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GqjDrR56xYquW%2BE2GjHJkKEJQJxaXV63IjSTR5ued5WYPiaHTS7jwXfmA5W5nZfd8vLk9FLa1gKjvcHDkofhgGeneogOHwQhgHQ2GVUuug%2BnZykdotk1YlYIgL3VQmCpv%2FOr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99873f41b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15075&min_rtt=2624&rtt_var=14031&sent=1839&recv=110&lost=33&retrans=36&sent_bytes=2091096&recv_bytes=23267&delivery_rate=18068820&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1708&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uzu0ogyz1VMNGntvwimCZ5tRrzjK%2F9wQKUe4Iy3mLfRY1VElsZC93I8xeHVuaM5UygOg1k5Hso%2FpyZ3Dr9nNwLJysk3XoTsXpTqXMJVFtLlcy%2FZ2byEtnBgYm6dEPdko7RuP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99873f44b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15075&min_rtt=2624&rtt_var=14031&sent=1881&recv=110&lost=33&retrans=36&sent_bytes=2141418&recv_bytes=23267&delivery_rate=18068820&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1712&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 74 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 21
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hIDsAZoE%2BLkL%2BYbdKYy0XQe9kt4dYLmCwbPK6SmMGXFiPHJGpthGgBw%2FNbLmWQdZbf436UC74LAlMcw1%2F01hOUhctkggZmH6CDjTDA61vLbEQfjD2461H7sOeZrsaI71V4lR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99842b6cb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16755&min_rtt=2624&rtt_var=9334&sent=1522&recv=86&lost=33&retrans=36&sent_bytes=1731238&recv_bytes=18636&delivery_rate=95980&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1221&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qn62cITYVB%2B%2Fq2XeAenYxYCHKBrIH5l7BQC7EQrB0YAwAZ5Qy2UmDqdeXexwVKcT7mQN0hGUr7YzHyysj0EsmLwFq7fwP2ZjQ2SB5RRrvyZv2gbrsLJxsqB0vR6WFuV%2BhGML"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afddb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1778&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=myuwMnfyafcI3h5cVA3QwKhxlVIPN5ur5WGmzISMKMG7eTIUv4jGORjpxx%2FZupTSF1VU2A%2F1QQQuG%2FgjcWspbLcORB75gXCneKQe2ZAtDZJGhOpFkKQx%2FwslciqtGzMIvwZo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afdeb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1777&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=McDb6IVh8YBu7NmUveks7lY4h%2FTWvnpVGI%2B2SvOWZq%2F%2BGsiJ%2FdhdPotJU2PfcGsd7KQWCo%2FSVhJOMcXkoSGirEyiU1qEZvSPmT3%2FHUU4wK2z7%2Funw3NbDP3LnLeFSa8JAZ28"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afdfb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1779&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GrG7Xmx3ksTqjsEXgvMxThlSQTHk5%2FW87HoGp%2F4QbVotbSuMfeE0gyMFSlTXY%2FMUiWel61k9FJD617WQqpI%2Fk9QOAljaQTNYgpZ63g9M9E%2Ff9iufzpz%2BzhEWTNpf4HOLq30y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afe0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1780&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q1E6GR04rtCR88zEO2J%2BX3TxAAN6RiSOtVw9anFs8GhqkeJYgVGJeY67wp%2FSCyAKoqOIigGe4kSUkssKVQj790s8BXJRbp9ApGo7NscI9rzdGY4%2F7k6tEjdRsqV%2BTme3iNH2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afe5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1781&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fh19hDWwQAPrOmE5P6%2Bw2rEnE%2FGa2Nuuc027i%2FolVbBGO97JKlYELi5Y5m0EB9BPfRHyF7Q3CB2SCpJqgGDmAMRQ6GXUj1LIXLJplhtZnclPHwPYCJ4iF8v8BEfkJTK1B80u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afe8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1780&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b4vbyUWDBZjCX%2FAsIxSZzilRHyWJk8aJ2cyJ6phh1keU3n2bijfV3yR63vKUbE3fr%2FFnHgPZWmLJZPlaW2OOAq%2BcRZ%2BfdNw8AJv%2FnAr47ntXgaRNgR%2Bs09pss8bNqzeCBLE5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987afe9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16050&min_rtt=2624&rtt_var=14440&sent=2040&recv=114&lost=33&retrans=36&sent_bytes=2330216&recv_bytes=25380&delivery_rate=2007666&cwnd=122399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1781&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1LOZXRmk7aqVovr3f18LK5%2Bu50ngtT2BfT9RlDBDFXuwgNPH9xiCnEYtias9Ae%2Ba4JVIUiJOonjfeNTtiObh4J5lnw9J%2BpMMCRQnKNj7qiaz%2BpWNl13zTCZxd%2FRkdNCNnX2A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9987bfffb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14700&min_rtt=2624&rtt_var=10483&sent=2147&recv=118&lost=33&retrans=36&sent_bytes=2453815&recv_bytes=26101&delivery_rate=11987026&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1793&x=1", cfExtPri, cfHdrFlush;dur=46
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 2.6 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash857a8d5c7c7a5fe467297bd5c91450c0 30fa1dd668a623729318810298cc5ac4f915dcd9 246518b6e27a847e1031e94e40ede53ca5a261ca8a0db8f6db93a0c90f9a55cc
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:41 GMT
date: Tue, 10 Dec 2024 07:42:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Z%2FaksMYWySP56dtv9%2FB53Cq1wWsnKqYKionKiiHvsT0u0UQeF6iy1nbZ38Sz8PP0%2F0B2IqltH0TXiO7HaeO2ibPCDFKxStpkgogLXn9bHf3ml7WS3avKIDLDVAuUxuW%2Fyo7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9988186cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17468&min_rtt=2624&rtt_var=13399&sent=2155&recv=120&lost=33&retrans=36&sent_bytes=2460536&recv_bytes=27018&delivery_rate=2185293&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1849&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kMJk6dguMhtdfip1eOxX6ndC6%2FiUIuklS9m%2B9MJUn%2Bfn5T2qcqgsvbFTrO6fXSOwMxX7YzPF%2FUYZUiANHt29hm7UQCHw3E1CLAL%2BlKQsXKO4vqhpfQ%2FUseKih7h9s0SgDOw2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9988186ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17468&min_rtt=2624&rtt_var=13399&sent=2158&recv=120&lost=33&retrans=36&sent_bytes=2463108&recv_bytes=27018&delivery_rate=2185293&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1850&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTpNrt87zn%2FSpTPUE1GIvwZSxy3K%2BVFH1fQEBibCcWsswkE8utfHuPxOxL%2BvbBDS2UBJEQ4bCCs3tix7WzoIQ%2F8h0U%2FqMfE1NHQibvvMtC%2Bs3ZKwfKQPVx9WMaVMc%2FOQQgjV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9988186bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=17468&min_rtt=2624&rtt_var=13399&sent=2158&recv=120&lost=33&retrans=36&sent_bytes=2463108&recv_bytes=27018&delivery_rate=2185293&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1850&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XLRO4CAGpgmZQ5iUmyR%2FKjx%2BIblk2gR%2FOR9G53W5moRrSCkdF2MJGX4CJi%2BRnuDyE%2F5uWv0K0CTEo49PbB3tEl6vJ8UOwwt5YyIh%2FaK59GxVVYKO4rbJO5EHRHGQm8ub2HLW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9988d961b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16476&min_rtt=2624&rtt_var=12035&sent=2166&recv=122&lost=33&retrans=36&sent_bytes=2470097&recv_bytes=27397&delivery_rate=533577&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1965&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347147
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/24683 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashba98d351b73dcd181c6d64d2aa03145c f3b0808b67e00aea343993679f1f57e22d7c9c12 62e45769462db41f3925d24dc26acab5deb518ba3200748f44cd14222fb318eb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /24683 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:42 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337271
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 25 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash3d2cfad84d2cb14ceefdde732bed8deb 5bc3ebaea4b6467601bf1290b1ec96468312f2c1 0d3dd3c1452a205432baae07c7371fefb5ef84e02c25aeeec17514b5d8beb9a0
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x6YMZDgEiWEUbPaJPD9UocJWD3AS2cSiclQxatagbYClCqoLHhSdwshjDu2Ops83lERvU3fLCHm7uT%2BDiU5E%2Fzd%2BZAn104vbqyZi4vXLpzr%2FH5ACvvnBxOifAmaujY2Ol1Sp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99861de2b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14951&min_rtt=2624&rtt_var=5217&sent=1582&recv=96&lost=33&retrans=36&sent_bytes=1794644&recv_bytes=20172&delivery_rate=1096&cwnd=121199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=1568&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335960
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290735
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392200
expires: Sun, 30 Nov 2025 07:42:42 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JRpjrpbUMppI18B6dFOnXu%2BuDJm2nApietcCshZ03VmdelQu0AGQLsuBQDv97HHK1ek4qLZCBNd46sRPDCP%2FOgtUoBYquU1K0zV9WmQOhtLG3oPShLjv5jgSl%2B9L4J7GFCdR6TgU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb998ae89f56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5143
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:42 GMT
age: 4151514
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5425
x-timer: S1733816562.391078,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 127 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size127 kB (126875 bytes) Hashf8ae603bbcd28426c0a6e863ea9ff2f5 58290b547b3a80c64dbc9035e7fe47125af2a66e ca7608d3b63b1724caa68158f581fd25bde7f5fe930ad6dcb1612fe989935b26
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BN%2Bd5fRM2OlYLDuCRI%2Bo1cQgyJtHFyLQ%2B2bmsKIwbKV%2F3sC4KoQ2HyAOB6MrhKKdQIfRO8KkGODQKK4Wd5dtYzVNtTqtUl6nNR57k8x9SEH1OSaS3LsMnCjnkrehH8XVpsPq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998acc39b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12515&min_rtt=2028&rtt_var=9624&sent=2300&recv=130&lost=33&retrans=36&sent_bytes=2622946&recv_bytes=28853&delivery_rate=712043&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2285&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mC%2ByZsbtdPXdOS4WQ8YBKvTTDbCil5DJovTTVUNu28wR%2F1ua5UcxVnZFCXn4SKxi%2F9Dx3yrxUvxPYVvKstXvJ%2B7huIyQLZVnZSo6Uyklv8RGwBfoaxYpHdkEEqcwiHL06nlq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bcde7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11229&min_rtt=2028&rtt_var=7743&sent=2368&recv=137&lost=33&retrans=36&sent_bytes=2697679&recv_bytes=30503&delivery_rate=395570&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2437&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=904VNw9L9YWJNwWa8G1v20jdZbI6Anv4Y0KspV8ZOTZUG9IQszcxf4S%2F4HCi%2BDgXO695OATzpFh3ObCTDNrdgkVvUv4YCNpu8jd8yMlqjfhmAMQqt9UqMATQ50QiE0EzEF4n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998adc45b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12515&min_rtt=2028&rtt_var=9624&sent=2303&recv=130&lost=33&retrans=36&sent_bytes=2625858&recv_bytes=28853&delivery_rate=712043&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2285&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 67 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash359409141fbfcb72763d611d55c27abc 840204879e02e5c8ae84674d19ba8802a7c0de84 793871259562c9593dc45689039c9eda7779f14b427d31781ea99b6e3f4e33c0
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eATD2m67jVFNKPoGLEqsg6%2FkOvN9cB%2BuJEu4l0BU6v1J%2BIBX%2Fwb3PnVAdMMU6Kwh6ONlVm5p7GXYvLftL7nYtJHJ1Z8NlSDyXCjN1wOAGds%2FzrWdTjV7P9jNJJ%2BHab0gJQYw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb998a1b37b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13569&min_rtt=2028&rtt_var=11954&sent=2275&recv=126&lost=33&retrans=36&sent_bytes=2596715&recv_bytes=28142&delivery_rate=472561&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2212&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDxwwDioL5rHFcF6SpmplnPF%2Fo0qsLb%2B9V1%2FlBAy27GGSqdt2Fk%2FVFA3G7ZjYkK1KRu6RsE1ueyTmZ2oexCNfuABzO%2FOHjTJjO%2FBNZHpm82KkctCs0AD0Q8zNEXUE3UfOP%2BY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bddfab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11229&min_rtt=2028&rtt_var=7743&sent=2457&recv=144&lost=33&retrans=36&sent_bytes=2797443&recv_bytes=32727&delivery_rate=395570&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2447&x=1", cfExtPri, cfHdrFlush;dur=6
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 63 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:41 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 22
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99860ac7b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UoiHwe9W4he8WNrH0PRxbWgFScE9jgqR0JJf2%2Fh0TPYEgY0M3gSeDO2ZSstqFRfWpgP7IpEl6IgU%2Fkv%2BowyYsh1sKpzZlVJsZBNi7xfGwggfYEi8eoVOEGEAYiiPbPK1QbXj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bde00b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2457&x=1", cfExtPri, cfHdrFlush;dur=66
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1SAcNBMNhj9QcA87HS7P6dXqVnO998oWdZmMmK4D9%2FoyRw9mDHW0keL0KiH5NHMRaTBEoWHGR2KpSRYNHZKjg9OLSSsIKh%2Be9xHfA1M9r%2BJxUzcRoUda0kpPK4mz7%2BuTmXLp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bde0fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11229&min_rtt=2028&rtt_var=7743&sent=2459&recv=146&lost=33&retrans=36&sent_bytes=2797497&recv_bytes=33358&delivery_rate=395570&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2452&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 85 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 23
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb998af904b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LYtOQ2dC0BR5nnCycLcmq1CHQCZBcOmpMqDVDvN0KXssppJFpbKVrRl6F5K%2BWNwyzBhOupwJp0MrLZppm1mwfFuVfzgDyZoIQjpjhEx2R0fC0at7WuozWFZTXpHpGOsYhj%2BS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee13b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11229&min_rtt=2028&rtt_var=7743&sent=2459&recv=146&lost=33&retrans=36&sent_bytes=2797497&recv_bytes=33358&delivery_rate=395570&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2453&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FvN5Vr%2Bfmlvqp3V6fAK3Pqu0Nete%2FtsjOKRuhAlf8qYjH4s44kLiO7saf%2BbyoZHRAFgQ5FBJ0z5SYY5nUpYXhkfGa09cSGxF1W367ameCpqW9N%2Fs9afUedhTFY6f5peHCkVb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee15b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2536&recv=150&lost=33&retrans=36&sent_bytes=2887193&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2456&x=1", cfExtPri, cfHdrFlush;dur=77
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jF3TVyeWBkaUm6I4dSEjwEE26yF3O0K9SRwTsC3X4vFT9WZE%2FPuoX8CZew8u6sKqeKPhI%2FvFAiAp7IjCQOJagnzjvhiqHmTdDL70CgPGfho9FWLxP6xXJsnetkNKbhEwMiqW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee1db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2462&x=1", cfExtPri, cfHdrFlush;dur=71
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FrGP%2FhRtX2VkV6uzaEt5rkcABwDCYL7601%2FDXzF9qN4j6U6yUzyh%2BekMC3egRW4AaxP%2BDqe26shTq4PutyMiqhcS%2BBC%2B0L8j3MRkgoTNYScwgazzcD3djx9MR2bmsEM%2B%2FeT1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee1fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2457&x=1", cfExtPri, cfHdrFlush;dur=76
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=an4kBMQzmiO14oSvp89jkukYswrgtqUy3EDO3XJP8Sd8BgWMitcpZUHsD9wFIl18VDAHltoB19Qg%2Fzvat2lvmMAG4M7TAbvO4tuiJa7u0krVSAeB1Ha2CdjDGalLR6TVmUEh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee2ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2463&x=1", cfExtPri, cfHdrFlush;dur=70
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T4hMsYGkrySPcomRHgOLCqMeR%2BDFPRWbOngpVuZSTyablwNVFN%2BIDYLnX579tYwUbC3647rNx5He%2BZd%2BZGdZQx55JKbJzJMu8mh1%2FSuL5k4RNvedoldz%2BKsbvSK3xZ989Ffw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee2bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2463&x=1", cfExtPri, cfHdrFlush;dur=70
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2BXN6Ff1QUcp3t9w2uiwjj4a%2B6pP20hm5k95FPxeRQwWHHDUOvCUA9w%2FV%2BOZciaWbY%2BTcYPDEhrk9t8PVj2UySOH4eC8nmuJdJYSUVFgnu4B%2BKRIzoBwzsNfQWBY%2FGmlxxOU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee2db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2463&x=1", cfExtPri, cfHdrFlush;dur=70
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6yMDBbVQsUPtJfCoHQBY2ro2bVEWee%2FnC4NJalP3cZEXsjcA8FhxYHrZQgF27Tx%2FFn96sytu6dbcus%2FHjiVLRB7f6nv00xC27wKN%2FegpCfeUavAsErqHdsYgiwcAHlBgklX8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee2eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2464&x=1", cfExtPri, cfHdrFlush;dur=69
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZofaRACfpXBoOPlGMWPhJrpahSeklMe2NuAe4QZQ01LVfBUotFNDl%2B%2FfSzY6ElzF%2F0cqajB1af4fxSnpPEWhEpC1oUOOyqL5FH9BzcodX0mTwB%2FxWtsmLOh3SFQk4m%2Bxyjhl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998bee30b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11481&min_rtt=2028&rtt_var=6312&sent=2566&recv=150&lost=33&retrans=36&sent_bytes=2922296&recv_bytes=34902&delivery_rate=4976341&cwnd=124799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2466&x=1", cfExtPri, cfHdrFlush;dur=67
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SwkCaBu0NXTzZO1CMtxDyNv916%2BgTsJlWnr4VoxWsWAZYSPFziMjRzmxcOMuNZa3dVBkEtl98Ymby1PV%2Bn5YHQpZQkexvww8cdnOwjzBz%2BSvuVCU%2BagrnLcT%2FNmOZLn%2FzvK7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998c5ebcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14931&min_rtt=2028&rtt_var=12127&sent=2681&recv=153&lost=33&retrans=37&sent_bytes=3059123&recv_bytes=35865&delivery_rate=1795231&cwnd=125999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2534&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MILayHVrN8vVpeI2DJ2gT88VeoMUV%2B%2F3QY%2BExF1K6W%2BWzyKcz8hLocoPtkYhYvFYh8H%2F25SmMBJ1A8sV29o2R5UnZpnH%2FSWomWO0UprBGH89a435IoMTYY00CroqHzBOXDKn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998c5ebfb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14931&min_rtt=2028&rtt_var=12127&sent=2777&recv=153&lost=33&retrans=37&sent_bytes=3173122&recv_bytes=35865&delivery_rate=1795231&cwnd=125999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2535&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w4I72feR%2BTvw8l6JFEwQI3KtviNOqM46PglgLRiJdVjF%2Fv95bLHDzCTMEAvp9AZcD%2FznUKKh%2BFPo1J%2B%2FwQ9Fz30GmpxAHxCzOLzum8SClBQvShAfGV3IqqK%2FuwhBWYTubwWI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998c5ec0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14931&min_rtt=2028&rtt_var=12127&sent=2744&recv=153&lost=33&retrans=37&sent_bytes=3134384&recv_bytes=35865&delivery_rate=1795231&cwnd=125999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2534&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 23
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Yx3begM8E%2FTaIg2qZmNNmokCmCQuid07ibA24VtBab%2BOi%2FOyJBDleWnek7rzqPa7zNNFLnLUBVSscP4K0mcykV02ATW1CsAu9lKFXYRxkVM7rSH60aUQQ3EA0nLVY1d4XRf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998d882ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21464&min_rtt=1611&rtt_var=21198&sent=2921&recv=158&lost=33&retrans=38&sent_bytes=3333166&recv_bytes=36381&delivery_rate=259881&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2718&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347147
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 7.2 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=moHSMvhJU5qz6AjiwcV05T6p7Z%2F8n%2Bwb1Tsljto%2BFX7RWm7bhW9oT3zctqZm3s4HLpI06z5%2B8lxR%2BG9Q5m%2BS3uvSS50qV%2FbpSOyHSKk05fABLjTkaOo%2FaJ%2F0Dn4hSiMhP9%2B6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99898a73b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=15217&min_rtt=2624&rtt_var=11542&sent=2269&recv=124&lost=33&retrans=36&sent_bytes=2591798&recv_bytes=27750&delivery_rate=6280641&cwnd=123599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2078&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337271
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218536
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335960
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290735
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392201
expires: Sun, 30 Nov 2025 07:42:43 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=imZKUWRHYNwPPYwgkcYaDfbEFgNvmZcFqjw%2BMF9UlelxPpYgaav7UE5lq6YSiZYULBRpPalhZdMxavKWXerFjK6InM9H7sCwKf5AXpZOTGn3ggo0kIKfyCqkCf8VY5n2ZRp8sM6k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99905f2e56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5144
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 59 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:42 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 22
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twIcJ3uV7TVM2K0tX9yworWcHcsrdL%2BiKoHEXKqMifa%2Bb%2F%2FpAABfWIwoSzJjSpa0qHTBDcZxIurolBgBEDGiD3%2B3fu09w3736mBuEb84GdKKtD9Y8wzj8n1P9dYGv9Np1TFq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb998e99b1b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=18569&min_rtt=1611&rtt_var=16662&sent=3025&recv=161&lost=33&retrans=38&sent_bytes=3454884&recv_bytes=36780&delivery_rate=756&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=2890&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 152 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size152 kB (151911 bytes) Hashbf590b5aee97069b687475ab989c30e4 13b7baffca4fcdf99e0df1eed7c0eb4d7a22bb0c 0969e5b910e858decbda82253172b4bb125053feade6acdd29ad3ddbeb71a9ca
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ahL%2F10gpKkB1sWgMWdbRnPc%2BtDZ5TDrTHYsA3P%2BBb3e9fSe2p8Lxa6hQ6VisUIAuGqiiHcrR1byfwvgsRc7y6au6LUC4hdDASuY9F3a%2FkdT%2Fob8arrbk7DtdieVGwOvzgnI0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99904c79b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12720&min_rtt=1611&rtt_var=11175&sent=3061&recv=169&lost=33&retrans=38&sent_bytes=3488974&recv_bytes=37974&delivery_rate=1079&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3163&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iunVcUnzcPibXBVwAQbt0Afi2cdLG3fnphcc8tuyVq6woZsHz8YNMhQfSG4FtOqrt%2BFS3vALKZ9wwuKxw7PumfjBbw5UBRSDY1NLYDXbPmjbsLNNfVOCvFjqjPyTuK0OUQ83"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9991ee99b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8271&min_rtt=1611&rtt_var=4713&sent=3219&recv=182&lost=33&retrans=38&sent_bytes=3664849&recv_bytes=40168&delivery_rate=24189&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3416&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 17 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 24
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99905feab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OwWRj6xuNF8QW%2FzjqKPx45e9by1659ufNLZEXZD9esT8D3SQc%2BlM%2F3SZMBbqfm0ruWEpsMUKDe0jSU7ubTDA0UCKUfNKJANZqelwIkM3JnqBo%2BpQSJJLhYCCK75kIjS0l55a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9991ee9fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8271&min_rtt=1611&rtt_var=4713&sent=3225&recv=182&lost=33&retrans=38&sent_bytes=3670482&recv_bytes=40168&delivery_rate=24189&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3418&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0jhAgK6uc%2FHgyIgS8iPzedgobs9WlJChjF526JPvSaA6Dq3WPvmlJdBRtEAilAA1TFSfHpykxUMB8ffU7N30k%2FHe45lOfEFp9ZnZZUS0MT%2FhqEJmfQsqaNrzrr2lS%2BR%2FwRNe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9991eea0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8271&min_rtt=1611&rtt_var=4713&sent=3228&recv=182&lost=33&retrans=38&sent_bytes=3673740&recv_bytes=40168&delivery_rate=24189&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3420&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2Fi08kE4x6BMaAtVc7SmCe4kHhCZF9i%2Fzb7U9Rxhftd6WEypfgFnHDe4QD4Z%2B8lr7quiIjwBPNbhRTsZTnReE1A5S5GJJTpHaool34Qq2W8EbfaPqmdABPBChHqKj1GKM%2BNA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99920edcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8407&min_rtt=1611&rtt_var=4025&sent=3235&recv=189&lost=33&retrans=38&sent_bytes=3676066&recv_bytes=42416&delivery_rate=1933&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3442&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sxYME2hj0peMD3HzBTZxTg4%2FaSMqaX%2FkYASEplmnkW33vE7qXgr9sj6WCqiAlnVnfUh5lbIqTIPsLGaRQB3p615fr2PAaU%2BDNE5HLgq7Pzj5U0v7E6XTTbf7XfHcBTRthYaG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99920edeb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8407&min_rtt=1611&rtt_var=4025&sent=3341&recv=189&lost=33&retrans=38&sent_bytes=3803265&recv_bytes=42416&delivery_rate=1933&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3444&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O8f04GPtFCohBsAVwlUQYSY26FdQ0NMaMrrkONIsQctzgqYs9bkQ%2BEkvgS6wq6kewAvL2W6APNWXLxDz8W60ZkaaToeo2uj%2BPv3qg%2F63SEETD%2FjMqf9osNDReHL3LWNGFtjB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99920ee1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8407&min_rtt=1611&rtt_var=4025&sent=3341&recv=189&lost=33&retrans=38&sent_bytes=3803265&recv_bytes=42416&delivery_rate=1933&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3447&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4kj7VtPjmCrIhKqI8ehDpqiggt9PjFZzCJdJ%2F%2B53LpSBI8HS3QnQxD6uURfPviwbgLb7iVP%2Bv0p%2F9TAwZbDOS%2B9dBfGMeSXH2ybC7xv1l3G3ffoZx%2Fi4%2BJnE1KvPDNOqCRw%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99920ee3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8407&min_rtt=1611&rtt_var=4025&sent=3341&recv=189&lost=33&retrans=38&sent_bytes=3803265&recv_bytes=42416&delivery_rate=1933&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3444&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wK9vxMTkQDjw8juPSsRGwJJ%2Fyf3mlf2HX5dxSY7Vl5BfOoVGDtyFaeDvwv%2FSZJehi8aDOvjeg0u7L9QeFNKHzFVZL9DLS7ctg9ntQ47Bv9WaW7iwRoYD3ZcD7LWAzf%2BslLvc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99920ee5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8407&min_rtt=1611&rtt_var=4025&sent=3341&recv=189&lost=33&retrans=38&sent_bytes=3803265&recv_bytes=42416&delivery_rate=1933&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3444&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6ogVr%2B0%2BrT2UZUPBd3i%2FTkwhzNC1xtRol%2BfIYBTmDaktTmUAoN%2FFDHSt5uAtx9w3hFi8Wpftd4cTXJzPOQ4k%2BT4mlLuRmKDI%2FjRFAvPGpZFK3vmZSMEoFjVHSsR5Wd9PLZZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99921ee6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8407&min_rtt=1611&rtt_var=4025&sent=3341&recv=189&lost=33&retrans=38&sent_bytes=3803265&recv_bytes=42416&delivery_rate=1933&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3444&x=1", cfExtPri, cfHdrFlush;dur=5
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J0u5M%2B1c55xGAV6BX2aaLTWV2HLdegzBsUovc3rqgdOu7KxHXDTiJbm%2FNlyG7j7nLWhwlSl5WdZMPJnWJz1E2U6lsrWIj%2FyRyX7308kpD6Z8QKeFEonAGmA%2F67wTCxRo%2FHL8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99921ef2b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7996&min_rtt=1611&rtt_var=3841&sent=3341&recv=190&lost=33&retrans=38&sent_bytes=3803265&recv_bytes=42462&delivery_rate=15491482&cwnd=128399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3449&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jtWCwnaYL2atVz68fS5k%2B3U4Y3u43iYAk7LtJn4JIgfIxWkWmOU8h%2BxpF1yATcZh5aY8LU%2B0mIvlYcca2x8M5yq3vcgLZ%2BuymMLzZ7134JanIwA6SufCdqmvl895P4%2Biozu5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99922f0bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8062&min_rtt=1611&rtt_var=3011&sent=3453&recv=192&lost=33&retrans=38&sent_bytes=3934905&recv_bytes=43379&delivery_rate=380399&cwnd=128399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3458&x=1", cfExtPri, cfHdrFlush;dur=53
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kG7Ag226EwaV5%2FydDla4SGToGZyloJi0kvnyBToKcV2aXVT8yrfBanIWg4swFNpx0937TFOGh0E5GFFLVbazs%2BKoLlhkC405whO7iBklcAjdlDSOHx5DN9sJJ9zNibsrDj1r"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99922f0cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8062&min_rtt=1611&rtt_var=3011&sent=3453&recv=192&lost=33&retrans=38&sent_bytes=3934905&recv_bytes=43379&delivery_rate=380399&cwnd=128399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3459&x=1", cfExtPri, cfHdrFlush;dur=52
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QYRNA7or5y8fdptiWg5SDmZFTXCWx7%2BEWM14ws76i%2Fz257GUP%2BakmMwQ2VsLcelffiUm%2FY1ikPDNn77sbLS1KDfwkNs84AYpAJZ8aOCzA0CnQgzesSYn1GScpD2oAwzw48kw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99922f0eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8062&min_rtt=1611&rtt_var=3011&sent=3453&recv=192&lost=33&retrans=38&sent_bytes=3934905&recv_bytes=43379&delivery_rate=380399&cwnd=128399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3461&x=1", cfExtPri, cfHdrFlush;dur=50
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2FsEwrDjrIj2%2Fto7eRq9Ns4ViZGuWnpGR400appsWENwQdZvcsWjq%2BWzUYlZFdJ7WUIhlcE2TD8Ff3RZEZMCRMJS4iWK%2B20B6pnEUw2tK7WT5e33RwACZ14KsqfhLkPvazAR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99928fa3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10084&min_rtt=1611&rtt_var=8286&sent=3660&recv=196&lost=33&retrans=39&sent_bytes=4178230&recv_bytes=45213&delivery_rate=2428279&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3521&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=loE2mahOzYXzyDkq2sSuzXgqldpUGBEAida%2BRc0kvi9nTBlf0ec0mVQ6wHWfY24X7OhlcjjJi3XbY9yk4SDBV%2B7MOsSnj90F2maRUD9anu0fdL4UUGIMtBfo7XvXWRZzqNVB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99928faab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10084&min_rtt=1611&rtt_var=8286&sent=3662&recv=196&lost=33&retrans=39&sent_bytes=4180180&recv_bytes=45213&delivery_rate=2428279&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3523&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VuYxo1roZHg%2FTY0crgnRGwyIfOzxCCaytYi3PQ9HWM9Ip2OyXKSIuElxOYgevsVSn8RTpQpCf72JXU%2FE7%2BxmsJu%2Btt3KV6r52hls8GMDyyH4%2Bko9dFB52G5RiWITMK09M%2F4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99928fa5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10084&min_rtt=1611&rtt_var=8286&sent=3665&recv=196&lost=33&retrans=39&sent_bytes=4182750&recv_bytes=45213&delivery_rate=2428279&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3524&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 4.9 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hashefed9cb6284768ff42fff0cce00338fe b5dce8786fcfab2c5390f0adccad7db6da65f089 a7794d5a636c9af1657047c92477668b502223391a6880755d0a59be8eadfcf2
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:43 GMT
date: Tue, 10 Dec 2024 07:42:43 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 42 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 24
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99904fe1b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L4AALoSDpTSSvuzy2Enm8YmaVx0ZS7rw6KaTp78QRTRAkgvFkNRvpgFckjKgRFdZkKL00MfUVvp%2FHdB6vu0bIt%2FCvvEPpIJxuHUJmgFsI0TFSwauEKNOtfs%2FZCOE1Nt1uGsn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99928fa9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10084&min_rtt=1611&rtt_var=8286&sent=3676&recv=196&lost=33&retrans=39&sent_bytes=4192903&recv_bytes=45213&delivery_rate=2428279&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3527&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cesupufius.com/56703 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashbf5f9f54041bfe8f8009b87753287720 b6c7d7226bcf3132399de039e4534bd441edc811 4d63ab619de431cb73608ee6dd66e1df4d6dd217c6e778182f886401ba6da183
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /56703 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:43 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKH8H6X0k%2FUmm78fN4rT84oSeWwsP94wB2726DQtFuy%2B87TL5r1saGFAcdSSLEtGGOA5pv2yxc5uuieikFekFWi0dXw5sNXikUDISEet0w3HHbnwTN1TPHV%2BKLc9aPJue%2BS1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9993e98bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11467&min_rtt=1611&rtt_var=10483&sent=3681&recv=200&lost=33&retrans=39&sent_bytes=4195146&recv_bytes=45684&delivery_rate=899&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3744&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347148
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293539
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337272
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218537
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335961
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290736
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 8.6 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash80c1feae19625ac114ec2309943446ee b67a7a33e1343e2fe9340e7c1c0bc568f6e4b4c0 f89889e74f1dc931503f4b668cad3e334ffebe0054b2e78a405625208710df37
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jQvphL4ythNQzIQR%2FqcnxTv7rJzzYlQpaBBB%2B2Qh2gQQP0NEOggB3GS194v0R%2BLwhCt0Hr7Le281fur%2F2ibdDUO%2Bn8TMQfwkWP8hR%2FJyQrzcQ1jRT1prGmV618eR4qY89EX2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99953b1cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7687&min_rtt=1525&rtt_var=8458&sent=3817&recv=210&lost=33&retrans=39&sent_bytes=4348015&recv_bytes=46969&delivery_rate=7123507&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3949&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 55 kB |
IP 188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12693), with CRLF, LF line terminators Hash99cd9cbe2a2af3b12f2ca7e039ca0d0b 04bedc856bb5141c3ca25bd28583140acaf0fed8 9cadecffbf806870d696e9771d663db18bc35c2ed6900778cb46de5723aae2a6
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UnWM%2FeuseRO0hK6wAX5NxOa8KldavyLuAtlwdVCaRlUTf9VlAL%2FkaP%2FXFE4KCIk9apV2xW1Uuj%2FebYP386sv1wXU%2FRHLzkh7%2BXXakfJv0aqDbw8%2Ba2w1EN85Pj5lLSAc5B09"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9994ba96b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9573&min_rtt=1611&rtt_var=9226&sent=3792&recv=207&lost=33&retrans=39&sent_bytes=4321792&recv_bytes=46566&delivery_rate=1190&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3900&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:44 GMT
age: 4151516
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5427
x-timer: S1733816564.065662,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 125 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Size125 kB (124726 bytes) Hash821e9a9d62cba517e1ed1295ded1a456 f66da083b2f786bbbdd65e574bcbc6d881934690 79a20cc1acf2778b9550350656f44502a0602749bc1af13a060305b97d1f4c6d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:44 GMT
date: Tue, 10 Dec 2024 07:42:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 47 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash446acb4f7ece262a1a0923e49b81f332 2967fa599421e36bf3acf5365e5d60b648a3764a 3533e0dd56643dadb8d2b82932e02ac1149afab22fc6709a4437771be47ea9b2
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:43 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wlSN8PR3suYQG985kCQwix6GgGqp0v8J5nCu6HtU2O%2FCLRpi5zjrLN2up1oCRugunOyAnvki9GAX1lXwJ%2FSvMBfrpPl4c35NkBRxeNlyhzSSKO9YIASdRbgvq3ksGjdZ1zlg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99904c6cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12720&min_rtt=1611&rtt_var=11175&sent=3058&recv=169&lost=33&retrans=38&sent_bytes=3486066&recv_bytes=37974&delivery_rate=1079&cwnd=127199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3158&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xs3KpJq3W32ewulzs1uIBXxbak6iREyB%2F%2F%2B5cVZ%2FKjng%2BaEpyu7vUXyuXADsqpS6B%2FV%2F3auHkAdyIdrCQjZFyRLIOpYZLSvY9QUKVXbdBrZNTOnIzNa9FwmcbV2umxem5MWj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c41b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=3981&recv=228&lost=33&retrans=39&sent_bytes=4528723&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4092&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 63 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 25
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99956dbbb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sETCpqiroceU1zhtiZ21GdWV1HNOTd8CMxO9HgF%2BmZllIlcZxHX4qH9x%2FXJpGeyc44KWOk9MogUmBORdk1mAnlRl1cxMl%2FOV93ByYEfIHpmdCPIvOfgtL9MZLqs0AGAjMcZP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99954b36b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7090&min_rtt=1525&rtt_var=6529&sent=3822&recv=213&lost=33&retrans=39&sent_bytes=4350983&recv_bytes=47368&delivery_rate=135560&cwnd=129599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=3961&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R7AxVUDRTGWm9aYlZUP1tiZ2Cd8PZdcZshMCvtLdS70j0lNoXxKWYaCFGL9trDPCEDX12shCj0ANrqB1xaI%2BtixrY5dkj1r0BzxBi3e4AzR422LucMTqp%2Fl4Q%2BPiGkldQ84K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c44b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4097&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2Bgygs5XHA1qFXh0oxNLo4ZhJPAkylsxRW5GghWJ948khXQZHwPxn%2BwyleUfxLUXPEu0EL%2BlMFUnN12TDYcqUYPZGx5az9f7%2FRUyZNw0J6k2cWeIQHgRxx2meBzcRFIhB8KO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c45b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4097&x=1", cfExtPri, cfHdrFlush;dur=35
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXPWCYGSk1lSrH8juTMbITcMEfUHtdhmr3IatOqMThzfNa95npDCAP3MDN%2BqKq%2BeC3ZqObD%2Ba42c5sNCkfNDzyvM484KA9IMxpwR96Ya0qTHHSJ7UzPyxbXtpQ8h2xa6SVLh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c4ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4027&recv=228&lost=33&retrans=39&sent_bytes=4582768&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4095&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dCtypxu0gQok40dMdK0AwaACtKCICSC1rBJMlFlNfGl1O39jMx6s7SgtMWEsfHp0U%2BCoRagedg9xneb1qP5y2o2CO8D7eNaxxHqWEK%2Bf0QHOSWDgyr2mtZ8lpSPJlvFCSoq4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c4bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4095&x=1", cfExtPri, cfHdrFlush;dur=42
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dI91kt16c3dgZC7V1Z2cwg04%2BlVlRNEd5Y%2F%2FwXO46knHKmlNydmo3NAeDuV3e8B8Y059t%2FHI4Qdk5NWKiE%2BO%2BbiQg0XYEiAZluTrjHf1NbAUgdnca5es5zEXzr0G0RqIBa30"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c4cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4096&x=1", cfExtPri, cfHdrFlush;dur=41
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=itzDo8WcLpbJrYN%2Fcy2AJxxg1o8sJv7PNCbycJ0%2BihOM8EOIe6aQXj%2BiphaPlA5pypwQrRaIEK1Z%2Fo73Q9E4FrZhDF8h3vX3PvaMre1fp6IfGsn6uokRNGeANB2PN8pi46Th"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c4fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4096&x=1", cfExtPri, cfHdrFlush;dur=41
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sJa7qfJYzUotP5i9CV%2FItQ7cx6jPqYft3%2Fsfa62ibtJawquYFJdd5MT29vAbD8WIs9Wbn%2B%2BZAJgxVgXCLvap3eLF5KqjkIfrR8wtxJuS%2ByPew3LUf8Ri4WWFj5QepZsmt1tU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99961c48b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4037&recv=228&lost=33&retrans=39&sent_bytes=4594768&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4095&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grvMB6RbRG6bkQcOBcHojHtBaF%2BDyZ%2B6jgVHx7dauKcI47yb6uv%2B0U%2B0oS8WDXBxMRx1n%2FtJLJoLElxQUtwCn0iKLx50698J5gShFeQZ2VuRVuGIKIsV%2FLL7n8jTofvsVXh0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99962c51b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4097&x=1", cfExtPri, cfHdrFlush;dur=40
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KH9wmDSZ9CWuRn9dnRazNHK0L2iL3xo4cK2tL8XfFJVvebKep2s8sQewge08U7Utb1fTUFtOu3zdtSMlGSbRlkqhMr0%2BVb2gDKUv8doJMz8E9AdsxJo1MqFHcBn8Qm2Z6E30"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99962c56b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5247&min_rtt=1525&rtt_var=3689&sent=4091&recv=228&lost=33&retrans=39&sent_bytes=4659311&recv_bytes=52148&delivery_rate=7455491&cwnd=130799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4099&x=1", cfExtPri, cfHdrFlush;dur=38
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wxDtf2kZYIWlpRdAM2TH6w7ui4XBlRTw%2FnTp2E8z54ZVSObbtfY1qm7gXyyesd2qxqyb71%2F1xllI44yJhCRgyOacP2avBaXOMeTUvvqhmBwddKwhi0lxLxVlihKDo6e8%2FxP6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cbdb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4142&x=1", cfExtPri, cfHdrFlush;dur=61
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O734pzheRNtxnssV2ukYQl5hUPxcAYiwNPKaAIFDvOgR%2BQJoeS0YcCobLHug8RdMgijTIjpUDCf04G1fHR%2FcFgDTlScb8DrraxNjGotvQE1GpAeMommtSahHmVK4gx4KIzZW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cc2b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4141&x=1", cfExtPri, cfHdrFlush;dur=62
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NoZ%2Br30Tiu3DBGn6I38D6mNfpDt8gvC2VbBYgJkx0ODH6gXVKaQVZSHVO45m%2FYZFD96w7J8m31W8RdhK8S%2FXaD7tfErvbXcqLPtKgC1wGYwcOLUmFI2KVpI%2FJWmyzaQHr8El"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cc4b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4143&x=1", cfExtPri, cfHdrFlush;dur=60
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mNyqAh2cFh8x%2FcNi1yox7b3%2FGg0O23GE4r6%2BlwpKwU%2FnsclR5UyvOoy9pRU4WVvkVhIdiiyHBSoQr1HTF0G%2BDpulEd%2BqrqzuSz1qgjdFHzPxTfkKmWXnQk1oKxcfCgTB9cYh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cc5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4143&x=1", cfExtPri, cfHdrFlush;dur=60
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F9NlSlnehtqf%2BW5RlHAeDX6xtrsYOhTZ3g88BUyKU7QkNseyGyF2Hcgt4gQ%2FdAZUinWkis5YAGelFGQbB%2BC6xZ%2FoHrNzrS%2Br4z36T%2F1ODcQjRVnocER1W%2Fl%2BziFttlROkKlD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cc6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4144&x=1", cfExtPri, cfHdrFlush;dur=59
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SCJIBke5lVpuzGyUI3yI64QhIi5doekCRz5T21fw7%2BgZIF7WGVtYNkDKpiv05I0Qh%2F6cVRM9%2BeekY%2FglQ%2BdyRCxTpWnWPTIBiGy9%2FylVs5hE66ev7tnG59g48mpzMf9KGjJ7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cc8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4144&x=1", cfExtPri, cfHdrFlush;dur=59
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ml5k4BVRxkixgooWK1yQ6dTndPDZnus5Cj7KcYRkhdjBnHIDpC093%2BuCvm4ZYgnFHr0ykk%2F%2BjssgdsVB1V6FFzjtiwbUToFItmCUBTUqn6pQVcJZg1GFy2Mp1o5duMg0YB7y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99966cc9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4593&min_rtt=1525&rtt_var=2448&sent=4321&recv=233&lost=33&retrans=39&sent_bytes=4927270&recv_bytes=54305&delivery_rate=24116013&cwnd=131999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4145&x=1", cfExtPri, cfHdrFlush;dur=58
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3O5%2FQcgye9dCG7OEO3glKaVNtq7ycnazm32lSzHjBDnKzpXzUAPG93xbt9Jh5yOZpKpSroxmFwGGLMN96J5b5OAzBW4BYJK8wsh5DL%2FBDLyUCwFQ2lZSed2iB7dqYtfi250a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9996dd68b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9548&min_rtt=1525&rtt_var=11747&sent=4435&recv=235&lost=33&retrans=40&sent_bytes=5056949&recv_bytes=54684&delivery_rate=2043651&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4213&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347149
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293540
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337273
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335962
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290737
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/93305 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash7e57ac922f4cb99f96d05bf1c8d0fe77 c17e39a4acbe4da380151e046549db2e02c23664 a6bc34c1d44f4bad1c788c326cfb6744b19356b81b3d3e15323b4028309f56c3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /93305 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:44 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392202
expires: Sun, 30 Nov 2025 07:42:44 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A7CSaVnP44knkkpSlyjQjPAjzJdp4opmXyBk2%2F93bxYPlNNKkR9oqFvOztxXcbwmXT60NpO4q%2BkRP8iJwZtz3jjoWiA3JYCJ8xM2qe%2BppuH2PrXLUrptSaqbre9F5Nomrf5blHYO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb9998aab456b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5145
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:44 GMT
age: 4151517
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5428
x-timer: S1733816565.591232,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 152 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size152 kB (151737 bytes) Hashaaf4a8cbc48c8db35bb71282c89f46c6 2bfcc2fdfb270f7953f24686282f2f90e5c2cd56 65e3877edb887d0eabd1aab3735f99d9365d38633d08b0d57f8f9b1a34dcd7ef
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T%2FsHEJt9XyLPSuDLKWG3YpbNK1ZHdflyKXe%2Fb9KsSLcbrIA%2FqwCuuOD8UJV%2BmVa%2B%2F%2BxIhe8El32vQ0js6JyHcdnDLbBeHT8qFl33zmhVML%2FNPsd4qYTsyBXFu6ZH%2BppN5Mko"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99980f1fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10599&min_rtt=1525&rtt_var=11133&sent=4546&recv=243&lost=33&retrans=40&sent_bytes=5183604&recv_bytes=55612&delivery_rate=1140&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4430&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 28 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 24
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u04BHSXWO1S%2BQhjhoCk67hWgHyYEyVyq5J9qq8C23Y%2BGLzcWOzWFaeLskhs6kcV%2FecZL1jm45PyBiMCKfuvz%2FbPslgQJG%2FcrQSf4Km8RVeRQKeI%2FBGt9gAvl1%2BjXq8Nx3WmR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9997ae84b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13248&min_rtt=1525&rtt_var=11626&sent=4539&recv=240&lost=33&retrans=40&sent_bytes=5178668&recv_bytes=55174&delivery_rate=533&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4341&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lP1vAFwQkr1mdJHr5NE%2FMX41KZM6hTYXRlCWMJWXKV9e3wh%2FgRTuI2O%2FBMDGGDrI%2F%2F74w7aahJxTSkUDZ5OB9ue2ECRLAAwFSpGEcJFl82%2Fc9wN%2F7qpnhCcJGIg51hMJU2U%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999959b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9050&min_rtt=1199&rtt_var=5621&sent=4735&recv=262&lost=33&retrans=40&sent_bytes=5390526&recv_bytes=61397&delivery_rate=981&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4644&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JwBn8UbBkzeOZeQKD14jcCI6zCMowymWGFXaOoIDOvPiouZQD85jHNNk1cWXiXwVTHUMDAE0laN1XkpFJNvdmswfInigyeh2wWmgYNFRfip8pIyUJD5vB4zTPP45Z1mnO3TZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99989815b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7072&min_rtt=1199&rtt_var=8201&sent=4576&recv=249&lost=33&retrans=40&sent_bytes=5212802&recv_bytes=56415&delivery_rate=132998&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4491&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7aePZAYG%2Fr7zQumFejG%2Bwunb8Sg3OQLxZ6F7iKloaLz5T%2FMBr7Z8ivzKoia%2F7tvpoPLZqZN6cD%2FzxPVhL62BuvfFqsSVqsliKfDw56WDYbzI6BjVjIrwc6s2GYzCNXri6o5k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999995bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9050&min_rtt=1199&rtt_var=5621&sent=4743&recv=263&lost=33&retrans=40&sent_bytes=5397532&recv_bytes=61710&delivery_rate=981&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4646&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BjAC9d18e%2B3zMnuAOmEKIopMCvBf2MMcPDZAs4Q39ccZJbkXwEDsjAx6pyRm%2BWjP6viwz0BrzJXtvFi0fADixFArwxXh6H3lUOgdpBcyp4kEnCY5cSHC%2BkBeuh88rU98y0fX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999995cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9050&min_rtt=1199&rtt_var=5621&sent=4745&recv=263&lost=33&retrans=40&sent_bytes=5399729&recv_bytes=61710&delivery_rate=981&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4647&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 85 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 25
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb9998a9c5b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h4ssVd2Nq%2B3EffamL%2F66J1WPUtkkN10dmKBrhGZ39XSGGa6jQkMayYBKlAClCkbfToyv8NFXfpOX3cRzEGRY8s7Xj%2FeDBRql%2B2lASrQDjNuLy7siqYUCFRZOFgJnQZHHT5RK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999962b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8267&min_rtt=1199&rtt_var=5782&sent=4856&recv=264&lost=33&retrans=40&sent_bytes=5530731&recv_bytes=61756&delivery_rate=708698&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4650&x=1", cfExtPri, cfHdrFlush;dur=17
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=odrryVsdUANwNuoMCcU47ALouDz5gaIWc5TqEv19Rcda3B%2FtIO%2B5ZLVNi8aEYEg0QKHV3RqscIw%2FrfZHOg9mnGuai4R%2BWWfFIDrP5tt5xpPW1ZS5mZT98SQ%2FnBJPUrXFQe5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999963b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9050&min_rtt=1199&rtt_var=5621&sent=4765&recv=263&lost=33&retrans=40&sent_bytes=5423729&recv_bytes=61710&delivery_rate=981&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4647&x=1", cfExtPri, cfHdrFlush;dur=20
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WavC3AoQ6uE8%2F76j5FXsGMJxbRNvDnP1MLoyUGkT89%2BCXBI9l5OOEDSzsbpVLiBFcrsjH6R1JjU6eZPwFLuvolN61tswKrpOjbh6MXSPckOO4702IkUbEux3Z3f0vPGp%2FsuY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999964b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8267&min_rtt=1199&rtt_var=5782&sent=4856&recv=264&lost=33&retrans=40&sent_bytes=5530731&recv_bytes=61756&delivery_rate=708698&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4651&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F51CFzLwnUG7ImtZXjhSaaL2UQhHiKWxxPXR8Yq%2Fd5deDWGsk8XnDkepuVDQJS6A5R1D5xyslFkKw19qbsR3dWWdI%2FLXZDFyUruAXaWi%2FiosUpTwJRgV%2Bg6PiVrEp%2BxX8C4O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999995eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9050&min_rtt=1199&rtt_var=5621&sent=4755&recv=263&lost=33&retrans=40&sent_bytes=5411729&recv_bytes=61710&delivery_rate=981&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4647&x=1", cfExtPri, cfHdrFlush;dur=2
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 218 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Size218 kB (218025 bytes) Hash6a742435804ebaa3654d7994ac639bdb 33e4261266ab72efe88e589abc20b861209d4f7a 3a57d8483a5abd57f97d66d9929e5838e3a30c9acae46227bcc4bec86f7458f1
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hj3dOeuwUhV%2BTWuQPWKtMt2Lf691GJrkTC%2FKbpvqzaVK8R4u825LhkYCkdb0Z7JcOtydV6nnN7BaqKm88wnyGAK5xotBlzjKeN6v%2FVxEcq7pERxvD7I4JHUScLsyPNMZ1Pem"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb9998a828b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8256&min_rtt=1199&rtt_var=6986&sent=4603&recv=252&lost=33&retrans=40&sent_bytes=5242190&recv_bytes=56801&delivery_rate=683&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4575&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vPR%2B%2FI1pyL5EBADMBpokyvPne%2BaZiiRgZiCttNJmHjlEwsaim3ty1cLFJOJOBZoJOBqk3WfF3FIM8j3bT5%2FP1UDARwMQc2tQN5NKqIhmlEczJlpXbrEk5DMsE27je3nq9GHc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999966b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7698&min_rtt=1199&rtt_var=5475&sent=4971&recv=267&lost=33&retrans=40&sent_bytes=5665185&recv_bytes=63265&delivery_rate=13445997&cwnd=134399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4664&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eSw2%2BirhiC4b8Pqa0asP%2BVOydFEditqoqmOExTPAi%2FSGSLpg%2Bf0wfRQhaXObx%2B6ouVI7TLGKccMRaV1Ofn0Gqu9kXe6d6KzECAfrJlMxlSpiD1bUg%2B0%2BsSMBC6nXEksyxk6j"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999968b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8267&min_rtt=1199&rtt_var=5782&sent=4856&recv=264&lost=33&retrans=40&sent_bytes=5530731&recv_bytes=61756&delivery_rate=708698&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4649&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KXWJi9pF4srplJrbwYN5noGPAOBdLh0N4OXLeSnPrnjzPvPyoZe0Ad%2BVhMtYRwdkD8TU70VMs2uXshAW9oOm7qdSMwny4Qn0Oy5gpp0y9xX%2FDDw9BfZjM%2ByM3ncal3BDZvp3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99999969b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8267&min_rtt=1199&rtt_var=5782&sent=4856&recv=264&lost=33&retrans=40&sent_bytes=5530731&recv_bytes=61756&delivery_rate=708698&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4649&x=1", cfExtPri, cfHdrFlush;dur=18
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tm1cKj5cSPxY%2Bmt8DhRZbMs9fhYEuxS55yEf95URiTMcxlRrSot4U6xeEHK9Ckf1A8sxcxc1idw5HyhUGRKvT6zH7rSo2AM70L589NgL6POpP%2BRJaKDDALWNk9tUJT%2FsSEtj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999a970b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8267&min_rtt=1199&rtt_var=5782&sent=4856&recv=264&lost=33&retrans=40&sent_bytes=5530731&recv_bytes=61756&delivery_rate=708698&cwnd=133199&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4654&x=1", cfExtPri, cfHdrFlush;dur=13
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tRXUe4NLHFxst2sQKndDRoWm%2B%2FJCLWMMHwlKFmlRs7EQ0BIfOJ9qvV%2BnZeiiMlaHei7UzMzECJ37%2Fh%2B4zKiOCspoTquBqwLrJkzFGAw7l1kMOxrg5E3x1jWoIBHzC%2F3U43pW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999b99bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7156&min_rtt=1199&rtt_var=5189&sent=4981&recv=268&lost=33&retrans=40&sent_bytes=5676813&recv_bytes=63311&delivery_rate=14016943&cwnd=134399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4668&x=1", cfExtPri, cfHdrFlush;dur=40
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QgpceiX7AmpaZlZnStYsdpZj2m5ZZ72iu4ekC8r%2BOoChqe7QN9DF5wclf8V6deCbmYHmDpNd%2BMMET6M1pBs9LtIcAgpYpANsz2IzAGsBF11WfTVgH9gXX2t1%2BFp%2FzToS0fWA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999b9abb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7156&min_rtt=1199&rtt_var=5189&sent=5087&recv=268&lost=33&retrans=40&sent_bytes=5799584&recv_bytes=63311&delivery_rate=14016943&cwnd=134399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4678&x=1", cfExtPri, cfHdrFlush;dur=30
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bmy5sl3kj3%2F5J%2BjtHprVe8rPFrxE3pz8qreroQHDXcmx3QpQ9M5wzLlViB5kiOlEBoHMrvoDaYEyRht1cZPC4GpMxIr8NLIowZqWrDgT3rvFey5wofyH5AFZ%2BzE%2FduWZnogI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999b9b0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7156&min_rtt=1199&rtt_var=5189&sent=5033&recv=268&lost=33&retrans=40&sent_bytes=5738094&recv_bytes=63311&delivery_rate=14016943&cwnd=134399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4668&x=1", cfExtPri, cfHdrFlush;dur=40
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MBfwlfPkBQMyatyfAzo4wcF6BdFghyUdmk74NFl90S0p6pYZCdJzGz%2F3eW3tD4LNEyZK54NotK5naad2bojpGTlviP6x8wL1ayat1M%2Bgp%2FBrReMDeXekd3iVh9lZrEQumc%2BI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999b9b3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7156&min_rtt=1199&rtt_var=5189&sent=4981&recv=268&lost=33&retrans=40&sent_bytes=5676813&recv_bytes=63311&delivery_rate=14016943&cwnd=134399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4668&x=1", cfExtPri, cfHdrFlush;dur=40
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wr55IHScPOApEL7qatiGgHBlue0E3DU8p8Ixic1HK09XyVgYvsEBObAHJr%2BMi6IhjzuH2CP5kV5i82FlaODdy9SWE0j1FtBWGcoCS7AqUGKuDWEsEk1qDLTlALU%2BPNhZDB4G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb9999b9b9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7156&min_rtt=1199&rtt_var=5189&sent=5087&recv=268&lost=33&retrans=40&sent_bytes=5799584&recv_bytes=63311&delivery_rate=14016943&cwnd=134399&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4670&x=1", cfExtPri, cfHdrFlush;dur=38
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347149
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293540
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337273
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335962
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290737
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:44 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q0gpZPDXbdXnlD8oVyrQYtUTr5DM6AS%2FKNak%2BydZNFisqI8cXLNHjaFA3BHCKILP3D7%2BsIKjIYRed4iaSe1%2B8kb2IYDdiFod7GseUl5hKC54uvJN4N2HkuaTb1w1fBeUiJrw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999abb55b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10087&min_rtt=1199&rtt_var=10275&sent=5194&recv=272&lost=33&retrans=40&sent_bytes=5917725&recv_bytes=63782&delivery_rate=1162&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4846&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cesupufius.com/18146 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hasha8d686cb44431c0be97dab1ab17dcb2f 0e38a16e9cdddca313072cda501bdd65f2810058 0e21885e9ad947035b1397c97716eec3cccbbec726e45cd370516bec2d6074af
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /18146 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:45 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392203
expires: Sun, 30 Nov 2025 07:42:45 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n6g1iZXH2RJ967KtZk43a6yu43D4uSn60tQeyWUBBSxQgzXgJ%2FhLl6wa8f1nkQfC2N%2BjvaTpKaTKeTYIP6pnDLS5k%2BjZI7iKPPQ14dikfBQIRc73l1oMpef%2Bpv1NfpX6d5z94MM3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb999c6f3f56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5146
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:45 GMT
age: 4151517
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5429
x-timer: S1733816565.199636,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 175 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size175 kB (175235 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ONTFP4gsc0mwX2GOvjWbdqIujF%2Fr3N%2BqAsEReY%2BRRKuSRmIj5Vltvtoi0qqO4pnnMKi%2B0HA%2F0v36%2BC%2B3vKZ44kVvDYC2E2p9WATiuCv%2Fw8Dli1WyFNG7wXP5D482MPpSJB7P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999b9cd2b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9813&min_rtt=1199&rtt_var=7743&sent=5298&recv=275&lost=33&retrans=40&sent_bytes=6039444&recv_bytes=64181&delivery_rate=759&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=4966&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash250c0f0afb1b145f1f8a00ff8cfdc0f9 5dcc440bfc8f7a8ab0cda34c3afe24f261f47554 528ad28a89c77fa547a335b9b301bc6fb216629a9da03d22555bf89a1ea20a76
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XUp7gjl%2BHMMLjcNNLap6AT%2Bi%2BMFuq4V9bvJlnGdGGHtMja308UG8QO9RjWHLMP9Tm%2B7eL%2F6XPOzfVRwh7CpXk%2B%2F%2Fh%2BBXAm7DDa5nlrK926ItujWhW7pkNFum7xTn%2BgdNK8DK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999c6df6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5708&min_rtt=1199&rtt_var=5400&sent=5335&recv=284&lost=33&retrans=40&sent_bytes=6073560&recv_bytes=65421&delivery_rate=258952&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5103&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2B10RHn1%2Bcnoy14BpWTz6vrEqzBas2CPGFC1PQyoQ3hGRPqpjjM5f24pt43k4APUk6%2FPss1xm%2BaEf2VxKN65vI47mOLLomwZaqcDCkdTTv9tAtOOM5uRJCmFV%2BW0%2BdHYwTkn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d3efdb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5765&min_rtt=1199&rtt_var=5709&sent=5496&recv=296&lost=33&retrans=40&sent_bytes=6251356&recv_bytes=67843&delivery_rate=2535357&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5233&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2B1Nl6%2FcNm2bwN2YKJEww5YKq358leF5Lmz%2BkMtABv70y3ign%2FqhIh0Bf0FVz0M%2FTCs4CF1FBzu96nZaXzvieJ%2B17nnTw6uveCY7m%2F6cysBIaWMvJVBy%2BuAj9j59qPWERhRC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d4efeb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5765&min_rtt=1199&rtt_var=5709&sent=5500&recv=296&lost=33&retrans=40&sent_bytes=6255074&recv_bytes=67843&delivery_rate=2535357&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5234&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0TaRgVBO5TOdUUjURzq0l%2BsF5LKrQiWeRJB7SHqnFYXrCDy5qc095i%2FydVK9xU6x1WXJS%2BlATiZkGvqpCiR50Ri44Yc6D%2Bgt%2FVJ9MkEEjdnd0tOqOLlSD8xBQUNNWIHSOm4n"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d4f01b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5765&min_rtt=1199&rtt_var=5709&sent=5503&recv=296&lost=33&retrans=40&sent_bytes=6258339&recv_bytes=67843&delivery_rate=2535357&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5235&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 149 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size149 kB (149074 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 26
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb999c6e44b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=azxuML0fi%2B7h0nOGGrM6PzDAN8EcVDGcGhD4pGo4hBO4nX2WtUwyCFTRm9%2BRNJdJFqrZnH3pffjvoGoYbVhKNY0mO1LfRw5jgmmJPmfgDvZPGHXi1JqTycIS8fZzcVaaoDtX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f5eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5625&recv=303&lost=33&retrans=40&sent_bytes=6399508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5282&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EfmHNiTw8P%2F1D390Y10wJRA0YtH2wIzlNP4PjwFQh4DPTi5eZsglJAGXU0zV%2FU7tEH50S%2BE7qy0KRPapNiTpiuloegIj3A%2B13srdkjPs%2Fz7Pi%2B0K42eDjnRr3b0pq8XQrKMc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f5fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4699&min_rtt=1199&rtt_var=4186&sent=5645&recv=305&lost=33&retrans=40&sent_bytes=6423508&recv_bytes=71573&delivery_rate=3896846&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5284&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERrZ5OPsFmGD%2F7SaR3jA%2BTTB%2BHubLKdGZd8S1GeR3Z0%2B2lP%2Bv01bGfcc0G9zsqPoT4%2BDUubzPNr727%2BRcbNNrekofkHLkdJwBEhsaWjQgSOwQhFLpj805nMmihSb4Qt1vw2P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f60b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5635&recv=303&lost=33&retrans=40&sent_bytes=6411508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5282&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Aukr0%2FLNdWDW9oX%2BvsHxG6yn%2BOOVwx7KExe1eUTeLHarqoTznxukrBHOiD3Q%2B5rPq06c%2FBNeEQ4nMtS34fXagtjS5jFylX6WOh73PtyxTQ4myCCf%2FWEb2s6GS5bfn%2B7MVNK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f62b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4699&min_rtt=1199&rtt_var=4186&sent=5645&recv=305&lost=33&retrans=40&sent_bytes=6423508&recv_bytes=71573&delivery_rate=3896846&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5284&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FiGJOmjZzkfFxovwLUhQDAvllqfIQhJ7ehpHmRCMb6BqONi4SKj6F9Fmx85ZZfIZ2tU%2BijnBWduX8lk4Zz3%2FhFYwLf7eZ5vTi7vZQR628o1KvqdPl1NzZvcH2oyS8vNLH7Ue"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f63b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5645&recv=303&lost=33&retrans=40&sent_bytes=6423508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5284&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zS1t0OHEyik5vYW%2BwbjFeXjKw%2BXpxLrDjcS72nuBlfovrNIPGE7qJMW4TAiTdKiG8dXhD5MVmMLBCjuyCXYnmKGhbqChq1GkQmzfK%2B1yz6p0aiZB69XsAI%2B4DFdndul3Cktg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f64b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5635&recv=303&lost=33&retrans=40&sent_bytes=6411508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5282&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZGEm%2B3Nf4S1L0rKrr%2B07LHqGAbb9OAQLzzmUfJXytQMENHLcODm9JehMMgeE3xAmDI6iXfJ56sUuekLdrf1EBbM%2BRt1n252LTcd90nfp4OSgwLp91HfUFy4zNY8fkhsBzhT1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f66b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4699&min_rtt=1199&rtt_var=4186&sent=5645&recv=305&lost=33&retrans=40&sent_bytes=6423508&recv_bytes=71573&delivery_rate=3896846&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5284&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TDKBMjpaQBQYow3qt7C%2FjgjciqKKCoKfHbZ2U8F0Hhic1MtIxTKcmhJYN6%2BygC6vi04D8nTcdp54mhmaDag1IWTQPgCi9ajZKt%2BxrgjrXXQp%2Ff8HXCer580NkvkUfBENHXOP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f67b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5645&recv=303&lost=33&retrans=40&sent_bytes=6423508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5284&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0mUQV32NRTvuNs9pkqYS4srMlquLybY%2Fxr9QGck%2FEKHbbaasOFnQsZjUpINTV4W5ktuDW%2B5%2BOT2WLNlog%2FfGv1FbEuX%2BBeQaLC0xMRHzPO8JhVX8J4bGf1wuxxDRVyq1IA3G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f68b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5645&recv=303&lost=33&retrans=40&sent_bytes=6423508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5284&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R8v54MeAaGJ9un4OdzlFkVq0XwPjhBV%2F%2BkoigyuvqdbHerMgfX0ptXw2nK%2BFNv1RUJP3lPZtIn5T00gYHkeXwZsbqTDPp53AsLQV9ammvNX56XB5F9lX6hdU6eDSeMxAdxAe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d8f69b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5653&min_rtt=1199&rtt_var=4460&sent=5635&recv=303&lost=33&retrans=40&sent_bytes=6411508&recv_bytes=71482&delivery_rate=341542&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5282&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bzk%2F4rCgwNeSvwTbwkZS%2BC3BXaPhBFRLuxLwKGsanhh4lNZX48Aqyhqc5cM4Mu%2BlPNvHcKosOuAEAcANMmMzqMmRAUZ1Ztx79HUdx%2BfLWJq2%2F3rXWXJwjCwPH7QtmrbW7gY%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d9f73b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4699&min_rtt=1199&rtt_var=4186&sent=5759&recv=305&lost=33&retrans=40&sent_bytes=6559107&recv_bytes=71573&delivery_rate=3896846&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5288&x=1", cfExtPri, cfHdrFlush;dur=25
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YxEqJDffgOELq6C7t7M1cHzLXrrc%2FB5Zy%2BrjBVhdZ9v5S9%2BrCDK6EVlXBQFnz6mkD5%2B0bYV37oSX3Y7N4c73amciCmzMrbH%2Bl5CWP6DjBEwCoFPE%2FLe%2BZ65THuTI1oh%2BSgA0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999d9f77b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4699&min_rtt=1199&rtt_var=4186&sent=5759&recv=305&lost=33&retrans=40&sent_bytes=6559107&recv_bytes=71573&delivery_rate=3896846&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5297&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 24 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashef5502bd9e4a6033d36c68ce7ea94cfa b3a823da297c7406feff156d8763148161aaf356 5875fc4da29ebeb8435b283bb7e2880d398d5d1e3493f954ff3684136ac35fe1
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXzezK3Ky1%2FpRKH3qYXU8zIIgzesfLcT2UtwtqZiaEAlwONJb5txkQgVp0q%2BJuhr3xQuh47%2BieG7HNXgPvA499YF8f4xh6H%2FiSfwKlaGBIBQ89oQn4LRAwE6wDdoW9qvoqBr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999c5deeb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6106&min_rtt=1199&rtt_var=6138&sent=5331&recv=283&lost=33&retrans=40&sent_bytes=6070626&recv_bytes=65376&delivery_rate=1145&cwnd=135599&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5089&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HtWWMFn5Cc2dxGwRWDQ8NjhAllFTDHYnnBnFpJXnwGk42UNg7s6B%2FD301XPShKjZshbJsN3bL5ML4RPIXkOelyY1LCExjZHzu90xfJ5kxBm4zyNB%2FFJ%2F233QKvh%2F2m0Ky9jI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999dcfb0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4779&min_rtt=1199&rtt_var=3299&sent=5875&recv=307&lost=33&retrans=40&sent_bytes=6695934&recv_bytes=72212&delivery_rate=5068341&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5322&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=23ySvrdHkEBDsY9x7VHJcuSOgu8ZEaS6NwRG5EwQAcJ2OvyEvlzctC%2FHjqYBThwhgrl6XIIzap5O3spCDxerievSi7WL%2Fg%2BqV69Auni5hD1MCOzKtN6F8YQN73c0jtpRcFaY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999ddfbfb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4625&min_rtt=1199&rtt_var=2783&sent=5948&recv=309&lost=33&retrans=40&sent_bytes=6775894&recv_bytes=72574&delivery_rate=13640000&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5331&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xc7BcXefZwrSBCdCiy6MtgtyukAqbGsJqVkukyN1sdmrCFL8hAah7BPPjhzQyTOaGfnw2FITXk9kO3gACNjOHle%2FJfoECi1sNssOGzjzPugqY4TXw6IrzztR4zlChde5gs6S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999eb8d3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6270&min_rtt=573&rtt_var=6524&sent=5956&recv=313&lost=33&retrans=41&sent_bytes=6779779&recv_bytes=73043&delivery_rate=1018&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5473&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347150
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293541
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337274
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218539
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 8.7 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hashd8d7265fd578b5368c4864faa870f973 2c6ba020838caa0f23cd9d8a857010dcf36ead38 3091cc468debade543f1610712d315990cdcc4ba05609ce203149f31ad09cc87
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:45 GMT
date: Tue, 10 Dec 2024 07:42:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290738
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/65664 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashba98d351b73dcd181c6d64d2aa03145c f3b0808b67e00aea343993679f1f57e22d7c9c12 62e45769462db41f3925d24dc26acab5deb518ba3200748f44cd14222fb318eb
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /65664 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:45 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392203
expires: Sun, 30 Nov 2025 07:42:45 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WBBMcgIVf6I3WYXQLBrxUlZSPwF%2FXnj%2FjlEsQC0q%2FUrty2eaIxWdjLzUQV9iAaDQyhmgCm7c4Uah5OBx1sOmuS1cqUZy34MFtnwx3%2BDBSxDT5W0GXsM%2BBhIK9sk0EiDF4gkG429Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99a16e1f56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5147
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:46 GMT
age: 4151518
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5430
x-timer: S1733816566.002038,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gvt9VwdlGKafWVssupWacC%2Ft%2B1%2FjIcs1Nzn%2FIy3D9u92UGJbSu5RT64ro4BJy72q1A51aBheD3EyLhQWfqjn8fVSWv4TyxDbX8yWa1FFfGNxgPl7zT8zU4nQrJYVNRb6pTrz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a1fd34b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3336&min_rtt=573&rtt_var=2673&sent=6142&recv=331&lost=33&retrans=41&sent_bytes=6983472&recv_bytes=75477&delivery_rate=6001278&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5985&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashc9fd9e75809e8e18b526bdc13ed10352 c5ba7abd08d75969495455d6268ead0d9a6e4356 d5459cb936dfa18e8c5765d724d86077c94a3bd0ef0eb3a996b22d5bf196d570
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 26
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kpd4CIGwI%2FiFHuFOtYqZsjPT6H0cox54ILdXoDSnRUHb1uVmKdnukpRY%2FsqMZht6l6xhxGdhZHgOL%2BdN%2BWivXFwyxI5FkF3zMaQaXs3ID4N5IIo%2F%2FVIybEJNBdfvqYLqcqKY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a15c5fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4783&min_rtt=573&rtt_var=4205&sent=6093&recv=324&lost=33&retrans=41&sent_bytes=6932670&recv_bytes=74637&delivery_rate=1057&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5892&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mFnZ3ttszopy7uIHoHAiWmhdrH9i9v7fKr%2BmBeTawlPeT63RtwV8%2FMzmlqhtslr8DcDGT5MGrnmW4xcouwkbZuRkBkBKy2DSZhWbjfUlkTSGJjgLUszXBwxLw8XdxdC5wQvY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a21d69b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2922&min_rtt=573&rtt_var=2230&sent=6257&recv=337&lost=33&retrans=41&sent_bytes=7113409&recv_bytes=76828&delivery_rate=344828&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6011&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 50 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash930740eb3b89b10b24b165d6f34b6054 309e262e9e66abb69d53e1dd9a058cde2a9da879 f50b621f9808d88c9c8c2a45e49590671b8ad940665ad46fa02d40833f4eb556
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CX9kvVyawMpdzsjQl1TUmosNuAXsPve6gYOaYgfR5Rqkle0g5c5vAXidQ%2F7QgnUwRS2XCtbsY9CFLLrGh90j0d8usgqHQYUUdsTroWpnsSlOLZQGUe3tn%2F7Y09ENFiTS6xIr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb999fca1bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4423&min_rtt=573&rtt_var=4634&sent=6067&recv=319&lost=33&retrans=41&sent_bytes=6906425&recv_bytes=73880&delivery_rate=1184&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5668&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 33 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:45 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 25
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kQ6NxDf1JKOQRjYm0g60Vb%2FSNWRtbSDQzdkchnxB6EqrBRGfanJN2nQdfOFKNhOjbEUF6qgSAc1G%2BhxU6JOPpI76cb5GC0otlxDRuhzqI9gb6N1d%2FXNLvmi%2BYGfFiuPR8cK8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb999f5985b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5435&min_rtt=573&rtt_var=5117&sent=6060&recv=316&lost=33&retrans=41&sent_bytes=6901493&recv_bytes=73442&delivery_rate=1100&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5566&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tp094PVAjOHMES%2B3NrgTu4YIS%2FCWi55E%2BME%2FYQkMRXdkdEIi9nbfIoUqne3H95HA0sgF0gYNYs1hIw3B3gNKeY9mCIaB3QBb9pUiCzmB06XuL69hlMf4IcwatexEZ9Sz6AbP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a23d8fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2498&min_rtt=573&rtt_var=1575&sent=6272&recv=344&lost=33&retrans=41&sent_bytes=7122730&recv_bytes=79076&delivery_rate=2484&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6029&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PQgQ4EDigfQ9rtbGAG0n0XSmCrVf5iMrphB%2F%2BHyP%2FWk31N67bUHNlkBxEtyOTgc2QwnU%2FCf%2BgFbc7XS24XXgbLiggo0hMfKLGNQDaCUY4OTAptzPjp0pCBucQU36WWlRlIU6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a23d94b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2498&min_rtt=573&rtt_var=1575&sent=6387&recv=345&lost=33&retrans=41&sent_bytes=7259556&recv_bytes=79392&delivery_rate=2484&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6030&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 215 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size215 kB (215141 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 26
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99a17c3ab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TOUlyFCyzfJVFJq0SY7tB43gVIrwzqU%2BCR%2F53OnejUgMY3B6b80CEuUFTruYmOcftYDU0F24JMx5DwciD4FPGr9n6fm5tODORXG%2FAHym3tOlhlgLwyg47ritToJYjEq4uJ0q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a23d98b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2303&min_rtt=573&rtt_var=1242&sent=6525&recv=349&lost=33&retrans=41&sent_bytes=7423609&recv_bytes=80115&delivery_rate=3621840&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6061&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ohms3yC5CfU4Ee1UdChMQxn6ZWbC7PeZLMCaa9uV9vLnj4n3mGn3wYa4YQTE%2BYwF%2BBkVqXBGgmEOQODcQfxYNId67DEhHml0PLgfNNz%2B8HOY9EDA57b7pSnMZXMH%2FKS%2Fxk%2Fq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a23d99b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2498&min_rtt=573&rtt_var=1575&sent=6387&recv=345&lost=33&retrans=41&sent_bytes=7259556&recv_bytes=79392&delivery_rate=2484&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6032&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qhN4%2BY7oynMqLflopGcQDFt8CgN%2BMy1tkrk3PMk03vvALQg8I2qzy%2FCaeMk7hpJFPw%2FGmp%2BsCT2SjJuAE9opmriG3TmMRsMWm7SA3LZLCMFjpfWrohj7HQYKgkCETvJqBCgD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a24da0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2303&min_rtt=573&rtt_var=1242&sent=6525&recv=349&lost=33&retrans=41&sent_bytes=7423609&recv_bytes=80115&delivery_rate=3621840&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6041&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 22 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash00f9c0e980726e2a61e7ec4340eb2ae3 f0b0e747bd9c78fef9baf8ed40e887c2009f35cb b58475c0edc1ee7593c1c6913395d0c81cd7f45324dd65423a7e53c5a6865eb1
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u7Q8SQ2pMINRZtcBEK8kVeMJVvs2PWD1Y6BMlUCWPcFPNRcYlmMtxL0BJP0%2FGNlIMmd5yWloTwm1BNuluxJcMWUycrYVqDVzH0MVU0l3%2FhOecPqP1rIx%2Br7v94fmDj8hJAcU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99a17cadb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3867&min_rtt=573&rtt_var=3161&sent=6125&recv=329&lost=33&retrans=41&sent_bytes=6965030&recv_bytes=75387&delivery_rate=1176&cwnd=136799&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=5979&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ICY%2FtwAbQOAtvEpr%2BvGtUJbMloJJ4DLTQTEgfA1aSFWIXrokQEa1lolvjMG8TiNX5bygsjqoRl0OgyyIzrSTOuvaZMkp3648%2BGloKBacr6fkbVSIb65UsJ5IHgv1%2BTI6oFW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a24dabb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2431&min_rtt=573&rtt_var=1315&sent=6503&recv=348&lost=33&retrans=41&sent_bytes=7397555&recv_bytes=80069&delivery_rate=11568797&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6038&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yuwxi96bJ5hMmDKIKDDCc%2B38CAg%2Bt4Usx17FBbj7CPseyX8Fdsf15AYOPTUEhyY2FJ%2FfBgU2frejVrlAVQlFu3FKaeQvThWpUXYN8HaQwb88ndQ6H4aVCDfiU3B81%2BmJcxn9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a24db6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2303&min_rtt=573&rtt_var=1242&sent=6525&recv=349&lost=33&retrans=41&sent_bytes=7423609&recv_bytes=80115&delivery_rate=3621840&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6043&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94gNUw%2FXEpM8qJGrgWrBMfkuISM8cNgNkGaulSi8M9B1mvkXI1nvYa5daObeMm0MjQ04pYbTaM3PHjzq5gwKxq%2FSHHi1XmXKQxcsdPCf3WDhbxrAMWqM%2FP4AaL6MiDVVtYEP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a24db7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2303&min_rtt=573&rtt_var=1242&sent=6525&recv=349&lost=33&retrans=41&sent_bytes=7423609&recv_bytes=80115&delivery_rate=3621840&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6042&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsNd9pjU26OIY9dCvhCsslvhWkfxRJhau8NvtqEBWMSItRHD8cyr64NI%2BykVH7Rq8GI6lv9STGqa4UFuiUqSeq9ZH28N6vMlASFLoAii8buLPgYuMOmcojIVm%2F%2B6gChYQD61"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a27df1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2384&min_rtt=573&rtt_var=1093&sent=6641&recv=352&lost=33&retrans=41&sent_bytes=7561608&recv_bytes=81899&delivery_rate=6093297&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6071&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ByCbvOM8Xf9dyGyoy7Au24H%2BSg7hBzUrrLyxu9tPUKtWMlDQdxXocdjTLecVGWZ19pD8121IrNDh%2BnX%2B4Bbbh6ZJlVC3G4m18%2FArJU4huVoAHvVcpOcoc5IPbnLJaMcYbIuY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a27df4b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2384&min_rtt=573&rtt_var=1093&sent=6641&recv=352&lost=33&retrans=41&sent_bytes=7561608&recv_bytes=81899&delivery_rate=6093297&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6072&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FpxgXzuZB278RVB2Arx9Znsyt1tANhqKZ8tyFYYmbaeAsJJLFpxjvc13tBXqySQ0Xx6xNWkSym5NFRuCkUqyZQKWaJJjfTKdH2zFio%2FdgQtb90IrLpjgig9Ie3PtfEab4nvv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a27df6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2384&min_rtt=573&rtt_var=1093&sent=6641&recv=352&lost=33&retrans=41&sent_bytes=7561608&recv_bytes=81899&delivery_rate=6093297&cwnd=137999&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6072&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RgktEq9nXILpwoq%2BVDG9dyCJGPYlDJC6tGZA56Y2pInPk8bUwGfWZyTyE3S0ZeiNFy9xsO5z8tJw3cFiHMXqNINPEI5%2BRjnaSqZXrjMxxnhtrSvxWpi%2BoQL%2FKRslfWZh306F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a27df7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3063&min_rtt=573&rtt_var=1923&sent=6706&recv=354&lost=33&retrans=41&sent_bytes=7633361&recv_bytes=81990&delivery_rate=14442408&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6073&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J26DqEMGx6i4pjryT65ngbt3iRscaaIKtMQlWdazbdUav9pbfHc6dpCaicRGbj0Bjqkyzd4503ka5WEjCJVK5Vbfih8rIcsh165Ns7RmbW3HZlccHxv%2BzHmUO1wfEISe7S0v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a27df5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2603&min_rtt=573&rtt_var=1876&sent=6708&recv=356&lost=33&retrans=41&sent_bytes=7635383&recv_bytes=82080&delivery_rate=5591879&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6075&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AK9exOMdhIl8uGyGi336F7EtlC1BxomKiKBpmT243TdwGb1lBAIMtsmDczkRY5WKDEIC4O882ZeXZT69QCzKBt7aMNCPF3lwtblc86iEEFEHhCcew%2FwGKKCqFeED6BGXLWlx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a27df8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2603&min_rtt=573&rtt_var=1876&sent=6711&recv=356&lost=33&retrans=41&sent_bytes=7637939&recv_bytes=82080&delivery_rate=5591879&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6076&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VdAZ5YRDLbeJSQT46AG9VGpG%2BmXhiiMGObPurj5UVQdeNrS3FDICT%2FozC78z6mXkvzDBktawsAlh1NYdgiF2QT592vumLnAJTgkF2NVzAdKjA0PrIhrQ3YgVYczdAcpTZQkp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a3af90b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7435&min_rtt=573&rtt_var=8698&sent=6719&recv=360&lost=33&retrans=42&sent_bytes=7641822&recv_bytes=82551&delivery_rate=1107&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6261&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347151
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293542
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337275
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218540
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335964
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290739
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/98645 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashfb30313a2c9e7263be88eee62a58b2c3 fec813531ecf61e688b01c78a844d2b0d923cd7f 7600a3716b1f4e1f95058714687675277497df545c8b65b6d65e3bc8cc85d130
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /98645 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:46 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392204
expires: Sun, 30 Nov 2025 07:42:46 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3AEJUNsMdJlSb7i5lKNPhaVRxELopMXDGGhsO7zt1eQyaVZnXse8T%2FL0GFOKaek%2FDSbFL1nfUybZdNBCGvkCxXIW9fN4vQN%2Fb%2BXayBSAcZ3q8anN4A9Vqzsa4ew2YnTsb%2F7nvgAF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99a56a7256b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5147
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:46 GMT
age: 4151519
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5431
x-timer: S1733816567.633628,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 188 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size188 kB (188492 bytes) Hash79e4ee370d92756b7fca380ace5a9017 d7b8ed848f94e44b7574b1cc5bf383e7ff7daa3f 6587570876936c04a17a02978bad6e00d24b685d44b1e00fe041b9b223afb017
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4z1vyLsOH5RcNuxQ70Pcawnr5HDVnysuwDJeMHYCOO87ZMRFLEQ3xycLrcKJ1vQR%2BXj49Ofngjnv27PRi00IWw8NxiuNtPlfYHc9alqCxek3dyHHHyWltZPlYUTcC4ycLV7V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99a4889db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5126&min_rtt=573&rtt_var=5981&sent=6831&recv=367&lost=33&retrans=42&sent_bytes=7768505&recv_bytes=83431&delivery_rate=1095&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6429&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 3.3 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash051f9c6daf01c6283f1fa5dfa24c5b72 c6959a8d930348fc49832463d596db36b8a84568 1ff361733d8c8bb90c7efa36fc6aa117075c151053d661bb57ff7d1a685523e1
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OhgKfohjXP56uNiBlpkPfJt2BkpdmRjBptXjT4yG4AcY%2FgsyDIZ5niN0lP23z1lZfoJ82OEegYcY3SlwbYoxdQkwIvPiafasDctQTSBmgeVW7MTzZbsBcU2jgLoaQKc1THin"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a5599db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3523&min_rtt=573&rtt_var=3959&sent=6884&recv=374&lost=33&retrans=42&sent_bytes=7824146&recv_bytes=84526&delivery_rate=2083266&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6550&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fK1%2F22%2Fo6xTfFxfmFFT9Ad%2B6GkReqAkbAvWwELrg83XZd75%2BwipYrlyBQ16YPnwgNClKjEKTnKpO4iCEIc2NuGERzURk35ZbFE1V2UPfDVc0dS6%2FmWylRUJeZsIzc2jrDYOw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a559a8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3819&min_rtt=573&rtt_var=4489&sent=6857&recv=372&lost=33&retrans=42&sent_bytes=7794752&recv_bytes=84187&delivery_rate=1181&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6528&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2BzahqWpskCL3D%2F3Uebh0AqkQsRjP5n2GXHO4z2A9liOErCy0%2FwMIUyCBBg7GrULamrI2ioVXT7%2Bht%2FV%2FCRoZKg3zHoPBH%2FNuWcUV0wX%2BuOVtp9jx8j2yr%2BKxI0CInM5YZ8B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a65ae5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3566&min_rtt=573&rtt_var=2698&sent=7022&recv=384&lost=33&retrans=42&sent_bytes=7979145&recv_bytes=86066&delivery_rate=159706&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6690&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 2.2 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash30a812f55d46c4742bf55cab96903c44 794ce5813773977655aff6e84e1019f0356531e8 686f27fe76ed3873c4b3a78eacb7a121d1826b90ab1783a5195b98c02ffde58c
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:46 GMT
date: Tue, 10 Dec 2024 07:42:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9dUK5w9Pm1x5DKikVtZqULc3rhkb9B%2F%2F%2FVhaldvocSkWHSqIPwvSaz%2FBCHa2Vp2qkuUGm%2FwQulzTBgzuk887ee%2BGViHLENyro78CBjUnKraOKUapvXOOnn2E85EqZMmxDnen"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a69b49b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2876&min_rtt=573&rtt_var=2193&sent=7032&recv=389&lost=33&retrans=42&sent_bytes=7984734&recv_bytes=87118&delivery_rate=247067&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6728&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9w3Go9uz4Xhta3%2ByWzjpcUn348GYXl%2FiWAC3rVBtCM%2FkffAwEtm5M892sPIOkkK187BuQLY%2BOBuMaQkz87B8I6ari136ALjfXxb4jM%2FMHUxV%2BDj%2FhgdiTNP95owE%2Fyc0PWNo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ab52b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2876&min_rtt=573&rtt_var=2193&sent=7148&recv=389&lost=33&retrans=42&sent_bytes=8123593&recv_bytes=87118&delivery_rate=247067&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6735&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YZodUh6CYu8sel2PB1gFI0ueT4A9ooHhI2tZJOULdU3kaQfuCsHf%2FTnSVteqJpZ4G2bKi4QFW5kVZ1AyWZvPaEJuIh0b0Nl8DHpPUcG1TJbjq6peHiJ7qF1uUU%2FxSsSpioEa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6db9db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4032&min_rtt=573&rtt_var=3469&sent=7193&recv=395&lost=33&retrans=42&sent_bytes=8174002&recv_bytes=91263&delivery_rate=9996141&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6772&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDbYzJuWBFIflsO53qh4e2%2FzZrxbjrvseX0v7XL18fE8WZ3quzxC%2BnuLGm2pNlgQI5qVkGOH%2Fe%2BHC2mvoxd%2B9DORw9u1QFbZLNf5SKEiigwMWUPLy9mqw%2FmcrUl0F0CYrysZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6db9fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4032&min_rtt=573&rtt_var=3469&sent=7193&recv=395&lost=33&retrans=42&sent_bytes=8174002&recv_bytes=91263&delivery_rate=9996141&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6772&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SR0U9vLJW34uRM1yg2Sx%2Fl42c7sWGISyfMhstBBbEk2Tpy95Vz4lBEnSNVyo8hWLZvVnxkMsw%2FMlQgSbtpk4gHa9YRV9qiEdPk0UuWEnmfXpqwH6JHxbqzfcTC50pW%2BgDipZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6eba7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6776&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eom53FiFF7yTP2ED9uCnV9BSqzrdCuvPtyR0aqpCefYtvIOBlWmVbVqj%2B6Ov701TeVWC5FqGtPfaieJebftozjH4sdLQ%2Bq152PwZN2Whdu7pqXJrkDcO4Hyf5nFIaRXcIjy%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6eba9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6776&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NgY5mtvPp5IUBgbYvK8OspLLqY%2Bta74C%2BqF8R%2BWMFnHAYfaYZSrIdZ9POYh4kVg1NK1CRWAn9gz%2F3GTQrdNzTXVMrmSRRJj6LSBpIDaFu7xvLHJ62LkVx8yiLCzBv9pZ0Wgh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebaab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6778&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tl7%2FoRIVVkPSxBKqK5pIghEPh6EEGNtaQtLYwRKgqqXrfg8OFRn0%2Fgb8iVGp1uCSn%2FW4W6IhTFVjZX0B%2BckRO0AfbXrkt12893H9Ejpqah18U6IP9ToGquOWPzV4ZVmG3yMC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebabb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6778&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=58ZVENSbFgrNOYZYwuBGNDp7ctdDjPJzSQv2A7yp3SxDqEyBG3PYK6DNrqhg%2Bc%2F56hPDWt5y6wdd%2F3x1XBuUjH7TMnNL8aFv8BhNqdrVzPa7%2BQEhpcWISSi6neJeRvkJW9ZE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebadb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6777&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=To6Uo8l3kRNu5Ih5eNKtkQ76BPLOcXsvmOUlxDqK4VXkdjAhBs7QyFD2MvbyqaCPtftoUQdONwAfAsbDF%2BUJ1vTgvjEef1ZFDY2CQyLIPgQr4SJMJaPYyG9ZSEsvHHiPcPt8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebaeb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6777&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nF%2BUMVsJMszRiQRO5B5ZOjHXyeUXctihOVWHZz%2Fyjwag76w2OgJBJbHe0PMsoQB0BAPqH5gC6j1qQbwTaEQ8VlogDDKxxTqyOFCvEXnlY7j0y18BiYtS2pfffXtVdME%2F%2Fh%2Fj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebb0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6779&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U3BD7hzflDaBtU%2F%2BQdgkjbRkWdjWXiYvWwVhsNwEwjTbh6pW3uMsFNkvpensVQ6Ku56ysVeEyOSTfsmOaAtzkSbxB1l8RC6fv9ChYL7Hf%2FCsdrZeP1gREez%2FMvnHf6jrahA9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebb2b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6778&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4lgkrBsEZ%2FuUCnARd1HZmOhJJE8B9Xfp64LCxpK9%2Ft%2Bc9lKQg9AXFIoqJId69S9brb81LLNBTizQn97nNSa1Z%2B0Oy4Oo00fDiIpywTlP3TVZGxnWbmQzXZRDwaGIfSJVvWVt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebb5b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6779&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VbZwkAeUUuWGuxJt7PxP1m5DAcZzWTC8meGv7kE%2F2jkLKIeT1IikppSTiC3jMWYGjdEopHa%2Bp9g%2FAHrQFkNIiYBZfvsL8fMzhlRP1%2FuFFFZnId6bH4wU1jD2ASMz4YZ%2BkOSX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebb7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6782&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=trUk%2BHqnJyPj4ao%2BYyT%2F1EyhikySsBMk1gMXidcxkeX5iAyYMzXFAR2F3gCoPsGwUyds6GNFt3AHWkEFnKiu3UVPM59C%2BJd3s71QwjrhaP1oF9LHU2IcdpdoXFle3DaP37hP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebbab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6781&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7190XdXwgq8IScx9J%2FHcS1A5TypeF%2BKbY2kFjYGJy0itz2dUIJY7OcCbxomjXWwzfq4PdVJYSF2AmY9feTyF6KUUTCOsgqgNlnIwL8%2Fzceew5f7HezzgZPgkkwPxUrAZifXs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a6ebbcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4891&min_rtt=573&rtt_var=4320&sent=7359&recv=396&lost=33&retrans=42&sent_bytes=8373202&recv_bytes=91308&delivery_rate=1419&cwnd=199200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=6780&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cesupufius.com/96291 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashb851dc783254c39dad076d58db877d84 187ddbbdccf24ead6f710ea95dd9e9b0f8e65b1f 75695b017237efd9dca2276e562a271104d0e02b45325cbb6aabea7868a71d5b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /96291 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:47 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DZzKkAJ3lu7fXUuAsPrfFL5pQoSdR1Mh0o41SAQCX70SS2maPJelZ16iJoaUjlpH1wVrQP6DnySPm9D2PLbHJpYXDdy%2BYdP6kka9vE%2BiyiJa62DSOdhcVh1VVKsqn%2ByUTjbC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a88df6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=14192&min_rtt=573&rtt_var=17789&sent=7479&recv=401&lost=33&retrans=43&sent_bytes=8503794&recv_bytes=91824&delivery_rate=15477&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7037&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 29 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:46 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 27
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99a56930b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337276
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218541
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335965
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290740
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US | 151.101.129.91 | 200 OK | 68 B |
URL services.addons.mozilla.org/api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US IP 151.101.129.91:0
Hash4f822d39c269d2c47e3174b6c6bad3b7 d56bd07959c766e9c18faa9cf1070548f9236b65 cda00e555c758b1c13b6cbd17049ca8471057d16c60f08f551dbc331308eecf3
GET /api/v4/addons/search/?guid=default-theme%40mozilla.org%2Caddons-search-detection%40mozilla.com%2Cgoogle%40search.mozilla.org%2Cwikipedia%40search.mozilla.org%2Cbing%40search.mozilla.org%2Cddg%40search.mozilla.org%2Cfirefox-compact-light%40mozilla.org%2Cfirefox-compact-dark%40mozilla.org%2Cfirefox-alpenglow%40mozilla.org%2Camazon%40search.mozilla.org&lang=en-US HTTP/1.1
Host: services.addons.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
content-type: application/json
allow: GET, HEAD, OPTIONS
x-amo-request-id: 6e029e7aeba9402ab011dc50d0a8c3e9
etag: "4f822d39c269d2c47e3174b6c6bad3b7"
content-security-policy: frame-src https://www.recaptcha.net/recaptcha/; form-action 'self'; script-src https://*.google-analytics.com https://*.googletagmanager.com https://www.recaptcha.net/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://addons.mozilla.org/static-server/; object-src 'none'; child-src https://www.recaptcha.net/recaptcha/; img-src 'self' blob: data: https://addons.mozilla.org/static-server/ https://addons.mozilla.org/user-media/ https://*.google-analytics.com https://*.googletagmanager.com; default-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; style-src 'unsafe-inline' https://addons.mozilla.org/static-server/; font-src 'self' https://addons.mozilla.org/static-server/; media-src https://videos.cdn.mozilla.net; report-uri /__cspreport__, default-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; object-src 'none'; report-uri /__cspreport__
x-frame-options: DENY, deny
strict-transport-security: max-age=31536000
x-content-type-options: nosniff, nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
cache-control: max-age=3600
x-xss-protection: 0
via: 1.1 google, 1.1 varnish, 1.1 varnish
content-encoding: br
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:47 GMT
age: 2140
x-served-by: cache-bfi-kbfi7400039-BFI, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 1, 2
x-timer: S1733816567.202945,VS0,VE0
vary: origin, X-Country-Code, Accept-Language, Accept-Encoding
content-length: 68
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392205
expires: Sun, 30 Nov 2025 07:42:47 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHyWKymoQENYaBIF%2BPafVeacZq9vGpxRymDeeWGf4Qvwn5Ft7pS4%2BGvoA41lEWtUdbtdSyB%2Bc6Zajv5SH9mHInA%2FDkkrmh9N0UHqX64%2FRnu%2Fg81%2FcAnUvk6anEfQFk%2BNmzaZCFn5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99aa3fbf56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 55 kB |
IP 188.114.96.1:0
File typeHTML document, Unicode text, UTF-8 text, with very long lines (12693), with CRLF, LF line terminators Hash6d0d5075c206aa99aae0a7ab85456a3e 5678b72f9a61b087acc446f84cd64e2edbae1ba0 8e11aaf27c7fe15aca024879d96492ab52a3fa42e07a6364ab3c399fcea625ce
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SmGHnGQPKDOwt4nhhWZF11DNLPR%2B2nzmbbCP%2F3eagtOdqiEBC90u5IHG%2BMzxgWSw9s1pEon5n7w4svKDKPFEdD1DIEkpCAJEEMRcwox2nT62AXb5DXMqqanipCC30none6Gz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99a98ef8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12863&min_rtt=573&rtt_var=16817&sent=7590&recv=407&lost=33&retrans=43&sent_bytes=8630444&recv_bytes=92661&delivery_rate=1170&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7234&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5148
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 147 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size147 kB (147076 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 28
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99aa1edcb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qi9OXPr53vtWozxQzjfndRkIuN0baviEhgXAYuEKa36tKpwltncjIWNx30cVm7dE9mEfuRIcxCsRb%2BcFERlhZEnBK4GRltp5cix6VIh%2B7v8zHPFPhSyta3xuaI95be8SiduS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99aaf8bcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6400&min_rtt=573&rtt_var=7516&sent=7774&recv=420&lost=33&retrans=43&sent_bytes=8835392&recv_bytes=94844&delivery_rate=213127&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7425&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 17 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 28
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99aa4f03b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xuZbY9%2FoFqCNWux7FGisEmh5uFREzpuq9nDo5PP%2F5hmUWTThsxbT48YM%2BzhRIRSicb9sip%2BwSZJZ1MZOC5io3qwKlyONWM0w%2Fgvolxq%2BOBEPVcsyb8P9sKAmypVSFhUcMIaq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab08d6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5237&min_rtt=573&rtt_var=6223&sent=7783&recv=424&lost=33&retrans=43&sent_bytes=8841104&recv_bytes=96410&delivery_rate=596977&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7439&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VXZY9hsweBteSYDfvwEHa3qHhrOlPtqABhmbJAgbAYhaPcrMzRDun2UPbIxSyxC84YAyXXgmCQZzgwr%2BkvybKn2XwqBxgN138LdqwZks97FwAzEvAGsryvDc14b20n%2FHraaC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab08d7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5237&min_rtt=573&rtt_var=6223&sent=7786&recv=424&lost=33&retrans=43&sent_bytes=8844365&recv_bytes=96410&delivery_rate=596977&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7440&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xGwD4G1ONYa2yrcWYOZ9aBIST1BS9Pf9Kz%2BjStVCcYLfPvIzjeYzeySizt6hLq1uetkk%2F2zQuzsNALFDza7r9mZolRoi9Jo%2B2PGz7KWUllsMlH%2FMAk7zjH3EXu1IrHFDS6TD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab08dab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5237&min_rtt=573&rtt_var=6223&sent=7788&recv=425&lost=33&retrans=43&sent_bytes=8846559&recv_bytes=97285&delivery_rate=596977&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7440&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YjaO3naS1KPa4kbGeiXufFV1CZkxA1nB%2B0cwLe645Hj7RRC0lgFe5sR8TZ%2BtZgKs3sphVuanlRwSXZE6qjxBq%2BkLNO%2BRjdHh0EC2oikdB2s3gZOHllTFDTz%2FXmWZu44u1e9V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab08dcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5237&min_rtt=573&rtt_var=6223&sent=7798&recv=425&lost=33&retrans=43&sent_bytes=8858559&recv_bytes=97285&delivery_rate=596977&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7442&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a6h%2BwjE8nZtou0dD7dW9Eh7tCjMxqD3J7d06ZkB47pAkh%2BT3wu4TljIUulX8E92sudhnYpqAg83QqAE2MWUcIXIE0S8XlDiW5pcGEKVBx6%2BV47g3cUoPfN8zS79Cf233BxOb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab08ddb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5237&min_rtt=573&rtt_var=6223&sent=7798&recv=425&lost=33&retrans=43&sent_bytes=8858559&recv_bytes=97285&delivery_rate=596977&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7442&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 8.9 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VL0I4JX%2BVp9GvMr%2BM7IFq9xb7oPvgUx%2BfcDPehqBMMvpNe11U4jOHM7C9%2BixyC2s7HT4bwijUKCHH%2B5Ktj9k1XQDkm873tHCrjYri4l9gdAWbShfXptcAkupVMq0hobHTyJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99a90e80b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=16288&min_rtt=573&rtt_var=19306&sent=7583&recv=404&lost=33&retrans=43&sent_bytes=8625512&recv_bytes=92223&delivery_rate=408&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7122&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NrL27Ge7jlHld3wO8GkRUaHhbZZbrfBozyRKI23AI%2BkzRWYoYiKhVMAwunPRoAm6jv9pSdvu5Hj5nirBhY4Ea%2B0imFRUdgOUSHxIiL6FIFYJbcgzPD5vKOvnvJhswARF2t5a"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab18f7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4712&min_rtt=573&rtt_var=5719&sent=7976&recv=427&lost=33&retrans=43&sent_bytes=9070959&recv_bytes=97646&delivery_rate=622115&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7451&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jVi17do7Bmxpp74Ely9ZP3R0hwavZCFeXNfoT3tP1w7F95uUIl8bJEZnP%2BwdIRylkNbjFLHxheCYlKfYpxkNl%2B294qT9B%2BJ8hCA%2FVNeQ%2BJ5xvDz9N4liyxcO5bAYHYavAGYA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab18fab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4712&min_rtt=573&rtt_var=5719&sent=7976&recv=427&lost=33&retrans=43&sent_bytes=9070959&recv_bytes=97646&delivery_rate=622115&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7451&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvljmyLm2UW5O5gBFPXSqpNb3N3gdU4zyIf9RDu7Epr9YPAYI%2BL1zTlKZWqCceBD1Lk4dCuJOvcAbvIiqHV4lctMZ3zwSF9JGgiRUexZ6jsa3%2Fxbj9J0tYkqud2BZnpAMPQW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ab18efb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4712&min_rtt=573&rtt_var=5719&sent=7976&recv=427&lost=33&retrans=43&sent_bytes=9070959&recv_bytes=97646&delivery_rate=622115&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7448&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVfjOQLtrLRaZnasWDfwVkN1PvDX8Dl5QeTD9tnIYnIYqIRtBNLGu8Sg1Rk2X7cUbER9mO%2BpxPlKA67grX6l78WYppIOIf5Ku9Aw28iWuZu4oj1SX%2Bi%2F86ZQ2SNSOuKMTDQH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9cdb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8203&recv=432&lost=37&retrans=48&sent_bytes=9337641&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7561&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fctGw%2BTzuVAn7fY%2BBpM2MVoKXB40jqD2b2mihSbKg8FWTUky9pYxmnQayyM1fYC69X3PXmtRpS89XyoeDfD6C3IKZD8Vedf7scrYsozOxWBe5LiUlxPyfeTlw5yVATq3Gvx%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9ccb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8207&recv=432&lost=37&retrans=48&sent_bytes=9342063&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7561&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ap3gF776HumuMa8FcIslyHFIRjbuprpQiX0l3wwmGcKpHp2ji1Zt2CBM2ovkZCjG%2BkaCfUK86co2RGyiWVOQm8xhxV7Ifn9WifwiZEF6camkfsAm4ivphOeVs7dX%2BTBJwomA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9ceb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8215&recv=432&lost=37&retrans=48&sent_bytes=9350772&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7562&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TXkBq1gjElEriJmoGzZZPskzkwrm%2Fl1GGldXxf9qz8MQ59O5%2BQ%2BxvfHcdRvutPxpmE7p63Y1EbRhBIPLDoK081kl2j%2B8ukHvn6vBJ18NUaLm5sxX8A43xN57Mvhd4hfNVhNA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9cfb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8207&recv=432&lost=37&retrans=48&sent_bytes=9342063&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7561&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HflE4wQMSdvS%2FnhQN0OwvU6VkW%2BIKyo3yAqI1VqMFs%2B2mZiVEYywaF5AoVbLGJc%2FEtezUwqIupAyCVPjmnZZxfGW21px34mwKm3LIveHldYlnimaKLOhzsQiuAovovEQ4Rfm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9d1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8220&recv=432&lost=37&retrans=48&sent_bytes=9355259&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7562&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h9CnBnqDt8%2B38KCI1vzilne%2B7xQxwvszl5L9Fv%2FKzg4snItnU4rCh2q%2BJQhMVBxolSMx5%2F2q3CaW2pXr1aGKiUfEEE0FZjUa1zgihxaDZgb66Uu%2B4X5yBxDJlqYpMtN3BQZo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9d2b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8223&recv=432&lost=37&retrans=48&sent_bytes=9357824&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7562&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oI4jtT80vfGpB1wGcyz3Wkg4ieMkysXuB1gNueIozLdfS4L7a%2Bl7VqHHgzG3DOcuZVof5odUDHcy7QWj57BjciyZRqGYWKBKCr6ncE3odDRruAbu9Wrc%2FoXE5orqIVXcj%2Bqt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9d0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8228&recv=432&lost=37&retrans=48&sent_bytes=9362758&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7563&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SWk6vvib90ifOvIFxFCMTVqRZEJiS3bms4sEsXwKvFLfoaxk7nVEj3Rk7ray2%2BfuWftwxbzVVw4iQQm6mZ87f7YkRJOgV3NhzSY3oHruAwNzzM%2FkAHlxwwo2Pb%2BR1boq%2FdC%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99abc9d3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11272&min_rtt=573&rtt_var=14431&sent=8230&recv=432&lost=37&retrans=48&sent_bytes=9364705&recv_bytes=100362&delivery_rate=1932042&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7564&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 21 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash687981b131b3a44dff1f4c64993ebb5c 41042bb12589e684032d175d5d4a1723f44661d9 5b8bce8284a98621aac968e1276910d811340d9b5206f9e61d81a2decfee4580
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l6LLcELKziUA7g7pXB0dK1prHlhyMbR2Myb5j0M10yTfgQCQrLXexxIfg08KMqt7%2FGnDgzwzdYwkc9ZNb8tPTdH4A2ZpsWbS0mAmhRTvulB4RvOa12%2FKZsWfeL%2FBwEFQl%2FCv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99aa1fb7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8948&min_rtt=573&rtt_var=12999&sent=7615&recv=411&lost=33&retrans=43&sent_bytes=8656661&recv_bytes=93110&delivery_rate=1188&cwnd=224400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7288&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | 200 OK | 42 B |
URL aus5.mozilla.org/update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP 35.244.181.201:0
ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text Hashf8f24fa0c857d8f2ee493e131b85ab62 cb6049f830a54d14a19d4104fc0bb5ab5fdedbe6 e0dadbc9cd1f1bd8ce3118cc3383e0d0f6d147f055265d498d99deea956ba00f
GET /update/3/SystemAddons/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: text/xml; charset=utf-8
content-length: 42
rule-id: unknown
rule-data-version: unknown
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
via: 1.1 google
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 28
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wtiHQlM%2FlDmdzLBp76La4jTRSmQSaOfBQjY0EGq7zpuThv80p39IrIqv%2F3WneYVYj2S6GnbiiCM%2Bo8KRikMNAAi0%2F9qRufJgoi%2Bt5HZs9FU2iAkGyQ8u4Q6uQIftTATMNBy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ad2bcab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8900&min_rtt=573&rtt_var=9782&sent=8238&recv=436&lost=37&retrans=48&sent_bytes=9369380&recv_bytes=100831&delivery_rate=1098&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7780&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347152
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337276
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218541
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335965
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290740
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/60945 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash1e5353875c22bf0ef99f0258f1937a7d 9e22924d7d2ac4dbf8148e868b015a8e187b87b6 97a0bfb218d861d3c59df6ce9bad76ec954e4dac9efad879008dea9d2851d58c
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /60945 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:47 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392206
expires: Sun, 30 Nov 2025 07:42:48 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5qTNc6lpkT2CnldaAgR88TJmPP6JZlLf12k8bZyRujWAA297eT8DVKloKjMn6jsui3uiMsfV%2B0TxJZlykSmC50kc55m2eTqNjN%2B%2BkAF7R13A2hzYnOCeZwvxsmEMN%2FkBaMvNJT3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99af1de556b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5149
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:48 GMT
age: 4151520
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5433
x-timer: S1733816568.185190,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 126 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size126 kB (126122 bytes) Hash5f07872a790904f403e3eecccf0ec48e e9c24f6e6cd3bdf39a49c055a19718d944eeb549 412f8a03c445c4cf5f6a08a83f145841b09589cf59b6940b91e7884def2d9f97
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7KOP6zKTCyuTFdMdSbszGbAUBSlcnIf8QHhUqV%2BEO1pp86rq8my2XhLqFEuguzO%2Fc0oibuWiJ9YQT9pOpOOSlrm36GSptBP93XQBXI%2Fkxyw3wz6g3uMse2UnaeeUv%2BA6jtvB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99af0e33b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4768&min_rtt=573&rtt_var=5307&sent=8376&recv=447&lost=37&retrans=48&sent_bytes=9522315&recv_bytes=102426&delivery_rate=1188&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8076&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash250c0f0afb1b145f1f8a00ff8cfdc0f9 5dcc440bfc8f7a8ab0cda34c3afe24f261f47554 528ad28a89c77fa547a335b9b301bc6fb216629a9da03d22555bf89a1ea20a76
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TG1KEO8UaM1QA70cU5hTW0jCQEc9MmE%2BSV5H6Rsh7RyoqY7VD2D%2FxsCDxnGPr6yGYzqNS8YzHwdcbL8i5iSIl3MC1oVhLeYFYZBnTiDxtPMvH%2BxLgvhjfDsDikboQ5jowSj%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99af0e3bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4290&min_rtt=573&rtt_var=4936&sent=8380&recv=448&lost=37&retrans=48&sent_bytes=9525249&recv_bytes=102471&delivery_rate=331287&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8081&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F4qK6wtgz3%2FARYzVa1JG13fIPNqoRyDWlgUpPwI3RmRvBOM3vpZbHmtUELhqZrkvembHDProSBN6yjua8%2Bigro89aU2LPogVqb7NsDgyTwk5WeAALugck2pRjHAfQAv%2FU5hs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afaf09b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3581&min_rtt=573&rtt_var=4011&sent=8519&recv=454&lost=37&retrans=48&sent_bytes=9684510&recv_bytes=103806&delivery_rate=1180&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8181&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 2.2 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hash30a812f55d46c4742bf55cab96903c44 794ce5813773977655aff6e84e1019f0356531e8 686f27fe76ed3873c4b3a78eacb7a121d1826b90ab1783a5195b98c02ffde58c
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:48 GMT
date: Tue, 10 Dec 2024 07:42:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DiC2QMDRGFASr81OMouXiI6XtE8NJ9QKTlxkMkuIgc62WtgMjXLo560xfJjJv4WH4ULwCuPxvu7FVCKcdAomhdaDLE2yxCoJYYKrl7kdBx6uhrbPrnErgInHr1PGP7wJ3Za5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afcf28b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2813&min_rtt=573&rtt_var=2882&sent=8547&recv=460&lost=37&retrans=48&sent_bytes=9709011&recv_bytes=105454&delivery_rate=2016717&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8197&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 149 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size149 kB (149074 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 29
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99af1c63b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=egIEBZ%2BA5nDM7Ssw4NaXdnaPk1dK4kT37ufEYj3MEffyBMizp6BZCRGjegDc7BBfN1REFZ5h2%2F7%2BKxrSx%2FqMabPgVkGdosvETyDWJaLRlPLk4%2FxuvnpxS9K2LJn9dU4ILc5J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afcf32b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2564&min_rtt=573&rtt_var=2658&sent=8667&recv=462&lost=37&retrans=48&sent_bytes=9851151&recv_bytes=105818&delivery_rate=1364108&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8202&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U1m0OThhuPqp3PwalT%2Bod%2F1XjLmgKoW996faleTh88LXciL6UvVD12OJd0T102vlVh6Ax4Q04pS%2F%2B7Re8slFV0QKiDa1gQQgVhg9suTmmDnKHpPpznjfCF0S0BboiporBLzu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afcf33b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2399&min_rtt=573&rtt_var=2323&sent=8751&recv=463&lost=37&retrans=48&sent_bytes=9949870&recv_bytes=105864&delivery_rate=3365741&cwnd=237600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8210&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8KlyRislfvuU60sc6d43K6IN3OrWosHKPi5rXBEdc8HjqX4PDrOGSXkDU3v4eHU%2FZMVRKMVuEsERu2vNRiLReDPR21i3jfoOOsQUoMhxbtRbWmnlnqcGwkTafkF1wM7bERjx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afdf3cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2564&min_rtt=573&rtt_var=2658&sent=8688&recv=462&lost=37&retrans=48&sent_bytes=9875331&recv_bytes=105818&delivery_rate=1364108&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8206&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2wbBVa0cbCbm6Z5YVfx2t5efZV%2BWDy55iPlAmi7KVRuMUOO1Fy%2BVFTWGmTRZMQ9NHEuu6P7%2FGgbQ%2FPG5zQDWB7SUFHnW3en955sMdOj%2BgkxXCbgO3B%2FeDljo0irg1lZEtwST"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afff76b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2591&min_rtt=573&rtt_var=2125&sent=8947&recv=466&lost=37&retrans=48&sent_bytes=10180964&recv_bytes=107375&delivery_rate=18409351&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8231&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7qSdRIkmjDQKHaxECXCNp8gAHJtzfe64q%2FSSS3DTOhDL4rLLLyNcLqg4e1TVqJCuMDWRYGtwpqbNbhXVr%2FlFBk3VU9z79HZmkc3kBe2Uw4b5s7tO0R0IhgmaWuPIQAukt4rs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afff75b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2591&min_rtt=573&rtt_var=2125&sent=8953&recv=466&lost=37&retrans=48&sent_bytes=10187764&recv_bytes=107375&delivery_rate=18409351&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8232&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DqLwY9O3UakKdL90TEbRnqN7hvXi4v3l2RHYSsAG8dsvWSXMNDDgKpyBLVsjMWmXbfLFsvI4EfdyX3JXiKYAHCntRTvGXFXSV%2FepAk1xEkiNzA4QuGln9z5P586HvMnqyfGL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afff78b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2591&min_rtt=573&rtt_var=2125&sent=8955&recv=466&lost=37&retrans=48&sent_bytes=10189897&recv_bytes=107375&delivery_rate=18409351&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8242&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZe%2B1QT0dNIniv2J0TvnMCiWncVwxLEZyUXlq9%2FQmqDLxPU7Is8Rf%2FsPMD4sXTzqAbKHjevY69yACeU8zQOvTz9en3%2B6X3wbGRLRo3UvE30FdG60Ku7uaPatZfTIPT1JCPpw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b04fb2b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5043&min_rtt=573&rtt_var=6497&sent=8977&recv=470&lost=37&retrans=49&sent_bytes=10212855&recv_bytes=108368&delivery_rate=689565&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8273&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ls0Q3OmXplpisyOIRHduhCbQaMZd%2FVehgXi%2FyHUioeaEyt29gNy10Cvc4mShGynm4%2FmofG5cbRkCVqwRzUcuautBribcsB0XzDlAWiHMZ6WO0btGxjVckKKjddkuL9Q4K0Jn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b04fb4b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5043&min_rtt=573&rtt_var=6497&sent=8980&recv=470&lost=37&retrans=49&sent_bytes=10215643&recv_bytes=108368&delivery_rate=689565&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8274&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eIyDWelfBe%2FeaB%2Fnncciyvsllfhj28e5Yt6H1otrRweaRXXJCZzXLomUT8AGvURqjxhzrS05Np9ConAwQ2JR4VHb2GDtS49QsZvrSwYaT0qe6z23%2FF11C9A11GHnuF7PcYuP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b04fb1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5043&min_rtt=573&rtt_var=6497&sent=8982&recv=470&lost=37&retrans=49&sent_bytes=10217590&recv_bytes=108368&delivery_rate=689565&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8275&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vkTxchrY1%2FWBebDlGd%2BY4lVNz1EFEVw8QhQrGRU9CBnycx1G%2FeOlctYx5A3YIQvd%2Ffbr1l7%2BnPIq1VyWxKsCg%2BpbsBywLhIgYaQ4GDSWtsAvmHSD9UQnZkWNL68TEf9nQYcO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afff79b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2591&min_rtt=573&rtt_var=2125&sent=8955&recv=466&lost=37&retrans=48&sent_bytes=10189897&recv_bytes=107375&delivery_rate=18409351&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8233&x=1", cfExtPri, cfHdrFlush;dur=31
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TUDOMaxS%2BWpCWUvwFUDL5qldQsbhvJzEIwvmzkEKxgTDjNTmG8874Zf3HqXSGHaKTZMKRjcI2Q%2FCNED2WRPaNEruk0O8SHS6WL%2F1M%2B7J3ZJHyGHljzZMXAHeXugi6n6uK4up"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99afff7ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2591&min_rtt=573&rtt_var=2125&sent=8955&recv=466&lost=37&retrans=48&sent_bytes=10189897&recv_bytes=107375&delivery_rate=18409351&cwnd=240000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8233&x=1", cfExtPri, cfHdrFlush;dur=31
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BhTUiJXUl9w9uwgTc8j353VjJYNKtO2cJ211%2B%2FAXfy61%2Bjz4UHctLQWQ33l1ghjHa37jnm9gY%2Fx8NfcbsFoaUR6hhhd4JBqD6pqIRhYg0afjQujm9x1EYt%2FSiIx%2BFdX%2BewZD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b0880ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6942&min_rtt=573&rtt_var=8690&sent=8996&recv=474&lost=45&retrans=57&sent_bytes=10227755&recv_bytes=109647&delivery_rate=272801&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8321&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VB5IXBGer0eBBkNB0X57JU6Avlqdp04Og4l6faEILMv5wsye4WzhfJE3LitKKlAeFyPAy8I%2BkCBeKiQnveJ1s8Xizp%2FTDaJ8RBAYvtVk2GimOMhLklfx1RPt%2BoJfze52WP%2F1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b08815b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6942&min_rtt=573&rtt_var=8690&sent=8999&recv=474&lost=45&retrans=57&sent_bytes=10230323&recv_bytes=109647&delivery_rate=272801&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8321&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XEH3Bm%2FNO1ifWMwq8OSX0nzyB6Y2W3jW%2FuQyROrIuyXpM2cgN6%2Bw%2Fwbo%2FtEBF87g0VZGNjmh1xgTIs1k97jh%2BJUuIJyBLP48Yk%2BJ4nfyOlnj9re0ewZmmNQ7dsCQtZS2sMpH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b08812b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5555&min_rtt=573&rtt_var=7307&sent=9004&recv=476&lost=45&retrans=57&sent_bytes=10232944&recv_bytes=109737&delivery_rate=534132&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8325&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PY0A1hFBPwzWdfWZx%2Bl9WdIuea2GLCWyoZ5qEHLWktCnjFWbLD9xLVi4ozcbtNSvD7MAXVcwtkBSJr9bDtj8vKZVo7pyKt0JZai2si%2BaJgVnAOmT6ySTpMR6srpOt6AycAvZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b08810b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4955&min_rtt=573&rtt_var=6679&sent=9007&recv=477&lost=45&retrans=57&sent_bytes=10234993&recv_bytes=109781&delivery_rate=705543&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8326&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oC9ZEeQxZ5%2Ft6PI8gg%2F1KVFpkTETx71K8qxNmfavfjysjMlSEt8H1ld%2B1ctcSh4E4h4mGSHj3tmI63by4e1q0cOMgE7EpLq%2B4XzR4J2sd92vLeDL5VzOV2jFxCHot6MHOCiE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b108c9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4025&min_rtt=573&rtt_var=5365&sent=9014&recv=480&lost=45&retrans=57&sent_bytes=10239974&recv_bytes=110204&delivery_rate=1187&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8398&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347153
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293544
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337277
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218542
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335966
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 72 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash0b77a9751315ba69da15f867ebd36b12 079dc3f8063fd1d9fa7922b23ec87e28bc373d1d 2665b7346e50a4f01f4706e499a66fede63ded41cb29f822d994b1c4a7823165
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sBrf%2F8TDrIrG7pvtcTwqrf1ebawmMuzwJbWA50i5IA%2FzVsYQ8Zs%2B%2FYKFQkflVYvySuqtYq%2FF2PN7l%2Fxb21z7h7IcK9gK%2FeDPlMOR7LcwQKdPjcXoYOjJKSPNWI03I7xAiSVP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99ae5d29b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6445&min_rtt=573&rtt_var=6508&sent=8349&recv=442&lost=37&retrans=48&sent_bytes=9496035&recv_bytes=101669&delivery_rate=1130&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7997&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| cesupufius.com/70367 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash9e8980da807d66e83a610de4ce2a4f55 5089d03a52743a36b1ecb58f4187a9d9c49a41c3 ba4886d939353f55abfd30312e321438bad7e8c8f6015720f91bacd27fc6a23a
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /70367 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:48 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392206
expires: Sun, 30 Nov 2025 07:42:48 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SrwGbQmGuEmmeYr8ea8iegTAxA0zH%2BTwq3YasBuY2FhII%2B4aJuzBt0fnNiEi6tNBTmTiQBIFN%2BJmKTyEmu2dNbpEoTnNT4BrVpBexH0bpKqngntjNmMrEFrr1m%2FpZ1eL8ZogLbh6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99b2aa7456b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:48 GMT
age: 4151521
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5434
x-timer: S1733816569.743311,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5149
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:47 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 27
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETKzx2akzpUdgrc8EZKkpt5eVoY1H1g1vL0dwvWuSBhv424kesj0v2t6MbTvjgZjjmmyd56%2BVr%2FUBUL%2B1j%2FebQUYSE05kthh%2B%2BJ9LiPHUUgivz%2BxCrILq7RV%2BDIg1XIN%2BhyE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99adcc7cb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7897&min_rtt=573&rtt_var=7151&sent=8342&recv=439&lost=37&retrans=48&sent_bytes=9491098&recv_bytes=101230&delivery_rate=965&cwnd=166320&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=7876&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 125 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Size125 kB (124726 bytes) Hash821e9a9d62cba517e1ed1295ded1a456 f66da083b2f786bbbdd65e574bcbc6d881934690 79a20cc1acf2778b9550350656f44502a0602749bc1af13a060305b97d1f4c6d
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:48 GMT
date: Tue, 10 Dec 2024 07:42:48 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 5.1 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash0146e108008e1a2843b5cbb57ce709d9 e732a4449a9ec025f6a7f983335219b3f2c47795 7b66f293e6a8219dcc3e9dd2f2c64ee51b81c96db87ffbaf7a1c16d4481b9c0c
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1hQNLBILXw22TBLSqpxZo2IyGG2790fmaRF7JWlmwTP6ZHBSHjOBOwX2xh%2FcnFYMxQ6KKoOgLel69kLrf8YuYX4O1q8ebOlSzWKk%2B2SYgOB54snr%2BnR8RFmqaIEyxqKi7JZM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b28a8bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2742&min_rtt=573&rtt_var=2646&sent=9148&recv=491&lost=45&retrans=57&sent_bytes=10388059&recv_bytes=111794&delivery_rate=3379838&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8633&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7AAR06F6GFDAhD3s7trALQwVOSn7BF9dIjEwmb6vOlhjVlLu3OfKoJUsM5YKhD9Z72Kxd%2FitD6TKyThkqnb8fKuk9lM5GS0QQByllBSqWO46FNeXvjW4HfdkCe2uqKn8RbdI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b37b9ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2272&min_rtt=573&rtt_var=1639&sent=9316&recv=503&lost=45&retrans=57&sent_bytes=10572528&recv_bytes=114496&delivery_rate=1177&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8788&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HxgqQFaVtgxdF2j288wM43M0DfWHNnW03o46Qopi0cwe%2FIh6Sk0M4%2BdsJfY8Gg2KpqBiFuuA%2F4fZzjBq8wRicGvWX8QaXJ8ruIC5X9TjtveviKb24O6CRe8ewdHsrsTUoaN2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b28a97b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2599&min_rtt=573&rtt_var=2269&sent=9152&recv=492&lost=45&retrans=57&sent_bytes=10390997&recv_bytes=111840&delivery_rate=140900&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8638&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0lw2Zd%2BJzPxEzsG0m16YlfHb8cwANyKUA7sc53LADdoHifh%2BofWSlASfZAcJ8KokGdOjq%2BKgfhYtBKo0C60K9x9ga47Rbhgew%2FFbiPPX1heevXpq0W4jCLMx%2BN%2BN2VQNIfUP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b37b9cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2272&min_rtt=573&rtt_var=1639&sent=9321&recv=503&lost=45&retrans=57&sent_bytes=10577978&recv_bytes=114496&delivery_rate=1177&cwnd=168000&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8791&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 63 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 29
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99b2a856b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VpOIRilq0X7xcZfRXEX%2FcJr%2Bjk1J8Aj6wWXSjRy%2B4tTGUCdBDlq20BbDprWd1AYgjTCR0X9sW5%2FC6xVCmMzby1%2BJWhahqI7s1wllx17T7y6gdJz5hMmGgtSGQPA4A4xmxg6M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c81b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6797&min_rtt=573&rtt_var=9352&sent=9485&recv=509&lost=45&retrans=59&sent_bytes=10769678&recv_bytes=118648&delivery_rate=22958&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8889&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4w5w03A5nAIDpQmhlrYOff4jmarKfrLkjlUAiCZTRl6X9szNHNFmOFsvoCkK6IejIV%2F8YZjZcd%2FE0Bm2akRRBXJ5DEfHWi%2Bf%2FNmm3U7BhuUL4dV2t%2BDYBK%2B%2BbJmCKoXVI2YJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c7eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6797&min_rtt=573&rtt_var=9352&sent=9500&recv=509&lost=45&retrans=59&sent_bytes=10787386&recv_bytes=118648&delivery_rate=22958&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8890&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ex8Ny1nmvweezmGbDkCzYOmbZl255jxD0WHUI9cH4OpmxSi0lFb4KrnClrKhdtGHkbuiFC4hLAKPYo74V0r7VHlQiKl5zgjPO%2Bf0mrS2bIr5V1jZth9Or1ssw8u8TqRTD7N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c84b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6797&min_rtt=573&rtt_var=9352&sent=9500&recv=509&lost=45&retrans=59&sent_bytes=10787386&recv_bytes=118648&delivery_rate=22958&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8890&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L5TRoGHmqI%2F0VNvdLsqHLYjdRP5WKM1scyRXSfRrmWzBmoim7sIl2VA8gkNHeb1uGrnKPzohG5R7i3tAiAIYEIQzwiJe93lEzxaiA873ZSvDfers5VJoPTOpsHLcXfp6D2MG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c86b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9692&recv=510&lost=45&retrans=59&sent_bytes=11016586&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8892&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9hsUJez9GcW3ukHIyCsmE1IZMzyKl9YV5OQh5DwYcle8BY4V7tWBGOaWnnYf0jL2hBtAjShuR0zJnZODza0Baw19l1Y2N3klbjjVTyO0nKYVsWGSFO7a3dNiPM1YxtM8KmzV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c87b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9689&recv=510&lost=45&retrans=59&sent_bytes=11013245&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8892&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkl90jznfASlywHCEJvHtYKScz1IfpIwiixdERmjnlPeGh10t07mPDd%2BQg9w1Sz1%2FaaEqRIhZrjjn1E7I1Z6Op8V4uLaWd0XNEtWe1wqEKjoE%2ButswhW95qzsq%2FfJ5CnumiF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c89b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9692&recv=510&lost=45&retrans=59&sent_bytes=11016586&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8893&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b0d2bdR5YSOxNA7T%2FicoQZXCM1zH7p7jawdSfA0m2OVUjhIjTptXAT1h8pKVxFWBeUgE7RSH6l7tXqT03UtRjxugkR93%2F8RbwryRU25Poyry5QgGR7rp5z08X9ZTDDlBUmdJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c8ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6797&min_rtt=573&rtt_var=9352&sent=9687&recv=509&lost=45&retrans=59&sent_bytes=11010878&recv_bytes=118648&delivery_rate=22958&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8892&x=1", cfExtPri, cfHdrFlush;dur=9
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3myYyH8FHkgmTnDrWxlWouirABczXpxXPaVweMOZmoXEXCKvc11RTWXklJtXXuoWApWGqIaugioqIi683m3Igj59kZZnUnzqFTwxozAyUKHmkdyWj85VJOZlO7a9MSdEji7J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c8db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9692&recv=510&lost=45&retrans=59&sent_bytes=11016586&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8893&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=il517SLXOtdWVaHU61a7kWh5ZHek%2FmWzmbaxxpG7w4uQyn8qIwq%2FGdFuiQfBG5HhB3q6D7BJDAb9FtXHG%2FL6a5ehuf2%2FQmFZLCP0DgNQNQXpoYYXe%2FUThzCVueIPWfJ4JLAh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c8eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9692&recv=510&lost=45&retrans=59&sent_bytes=11016586&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8893&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ZYfeBxzC9zeBYvWQSA0mbW34YLGmYH9k27m8BxMjE%2F8Py7XOXgO6bLimUemM6619kbW%2Fusa8Vscg9AHO6jJrmfu%2BW%2BIGNVFO33wkXnOLs0vuJxurX%2BZW%2FGMkgg0KFFnQBXI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c8fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9692&recv=510&lost=45&retrans=59&sent_bytes=11016586&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8893&x=1", cfExtPri, cfHdrFlush;dur=8
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnYVG41AzNZ3y%2F6RPHey1jCh6Yok%2FjsBCGk5%2FCBgXlL6WkR3wakFDl99%2FdrN523Cmx6L%2FQ4FcS8Ej4vZaFc9zHWvd%2BRX%2BJjarF3cg7zTUg1k8oIhEBSxI7qLjH%2FQCnCyjYBH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c93b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6129&min_rtt=573&rtt_var=8350&sent=9692&recv=510&lost=45&retrans=59&sent_bytes=11016586&recv_bytes=118694&delivery_rate=2276248&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8894&x=1", cfExtPri, cfHdrFlush;dur=7
|
|
| cesupufius.com/32561 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashefdaf253941ec82672c121f34b54ab0e 86015f4d899e846c70e1dc044c995140584ea0ac 573072ddd9f98c879baec60fcd943be0d887e223fac1d87750245c6c11b3a2c0
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /32561 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:48 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YeVWuEIlLk7q0eGodTRCSyjcwZEktlhFkc14MW0upGBo7lOF1Bydwjcr%2Bf%2FUjCIYQT8IUpWTbMqkZh%2F%2FVLHJnUMCEXFIIcWg8BcE5zRxPZ0AG14xSnGNoxuGf%2BB7p2VT9rfJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c91b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6206&min_rtt=573&rtt_var=6416&sent=9765&recv=511&lost=45&retrans=59&sent_bytes=11096192&recv_bytes=118740&delivery_rate=93491676&cwnd=242400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8909&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kgZ2DxPM4py13AcX1B5A60AJ4hHCqaQVwfwhVwtYV%2BrRNUVh3lIFLaYtvJbVYlOcANfhGkXp5xeOTjYZja6ZNEE3plBjgPsmQuSd84l6%2BGhUpz7cY95fOwlQWhZYfCyDeXhr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c80b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6797&min_rtt=573&rtt_var=9352&sent=9490&recv=509&lost=45&retrans=59&sent_bytes=10775386&recv_bytes=118648&delivery_rate=22958&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8890&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:48 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y6UJyQrrHYXMpd0LkItQ2OZaRXgXCMP44xr3qITJuIq5Cro7V2KZ%2BbpC2yI224hTBc7aeOMQ7wxdwqsbIQV%2FJp95yk4a4x%2BVK9NHQasdoYO1cy47gczVGmPBypUEL3B2NHxG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b41c83b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6797&min_rtt=573&rtt_var=9352&sent=9687&recv=509&lost=45&retrans=59&sent_bytes=11010878&recv_bytes=118648&delivery_rate=22958&cwnd=241200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8891&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBQcektjY1eroP3PGp5BvufolUnvLcsagQbCUXP2UOatBiBPqX5kKEMXq%2FFu0yDCn8z3t0xPdkrgpj%2BIjguFqSQPUHvzLWMKYHfJwBnuKJU%2FWX%2FZ%2BMK9TOpLzlaED0C3ebI9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b48d2eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7542&min_rtt=573&rtt_var=8490&sent=9780&recv=514&lost=56&retrans=70&sent_bytes=11110734&recv_bytes=119171&delivery_rate=330802&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=8964&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347154
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293545
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337278
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335967
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392207
expires: Sun, 30 Nov 2025 07:42:49 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BItXsywtTjl50Rh9P7%2FPi3HkagbXJCz2mu7%2BOYi0Phs01P2n46Mz%2FLPS2sBSB51WkyCjiq3mmpimlFtHQml%2F%2FFXMJZx2GxXgwfsFRt6Im99rUcjtj5IdjSYnQ%2Fn5nJZWD3sUaFz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99b64eab56b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5150
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:49 GMT
age: 4151521
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5435
x-timer: S1733816569.332162,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 131 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Size131 kB (130925 bytes) Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uesUlg%2BJVSPnYI3htCHaNG9kYRxyp9lBMH22sX31y35t3tFyAS7uvBBCxA8a3KSdVAnEauUIjOQNztctkbuvwEJu%2Bnr6FpKUMZCwUe%2BiusdF0%2Bl7crEaKEa9krKqG60BUKX6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b52e16b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6120&min_rtt=573&rtt_var=7298&sent=9884&recv=517&lost=56&retrans=70&sent_bytes=11232456&recv_bytes=119570&delivery_rate=1208&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9069&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 29 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash250c0f0afb1b145f1f8a00ff8cfdc0f9 5dcc440bfc8f7a8ab0cda34c3afe24f261f47554 528ad28a89c77fa547a335b9b301bc6fb216629a9da03d22555bf89a1ea20a76
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tYIqj5dFVk2s%2B3kQnmM8FyZMomHeNiJD4wsHESl2h2YRO2ElXNS2o9DXuEEJHCp0ilWAq8Y%2FCs59jOLDnRi5Cfbr3q5HhodNAPKH0PyJnTtF2iZdKh2ql9IQZO7jJXVpD2wx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b63f83b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3893&min_rtt=573&rtt_var=4416&sent=9921&recv=525&lost=56&retrans=70&sent_bytes=11266570&recv_bytes=120764&delivery_rate=140438&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9227&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2Bcddv2mqBGDrEv%2BguvBiUxTuVa1kFo%2B8mMuE79kvo8CjhytEUHkrDrBdvs9Hpk2NYv0kbbODNUHMFv6Zih%2B3Vqx0vOGCl9cCLT2LbQ185Y5a5fq9YsxUP3ieyasqps87zuG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b6e841b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3323&min_rtt=573&rtt_var=3481&sent=10077&recv=533&lost=56&retrans=70&sent_bytes=11444296&recv_bytes=122729&delivery_rate=1153&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9339&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dx8JPZx54u%2BJxm5WexTcJOqnwxIAKFAki7InzM2Nq46ERsuttEi9OqX7b4ETBANCQKD1WzJPF39UtNT13KrJH%2Fx5teeLO4NlqypKmcWe1aiFFXyCjkTc7zh%2FFG6Upq3K0J4O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b6e848b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3323&min_rtt=573&rtt_var=3481&sent=10081&recv=533&lost=56&retrans=70&sent_bytes=11448009&recv_bytes=122729&delivery_rate=1153&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9341&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 30
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99b64c1eb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HG7c%2F5BfzmEa37myz5Nb04t2GPptLDekFL4dz%2BUsV6u8fkjlx%2FI4D3nN41qpA68fmvqwB%2Bnn7flHSihguCxb%2FkBUBqb6YeUCZZl8g%2Fk0p2LwG12tJXcxbwra5w4lRKXv5it%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b70870b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2866&min_rtt=573&rtt_var=2783&sent=10089&recv=537&lost=56&retrans=70&sent_bytes=11453543&recv_bytes=123460&delivery_rate=1471987&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9360&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5kX1KbPYpY2wkfp65Mr8NoCZ3jwnlEFS34B7FUCrmrQANKJk8gJqqPsD7m3jMiSY73oPAPxOULWb%2FPwHUe4u2bANTjznasfSpu7G95HSM81C8to2QHlkrGAupKyxZ4L0BzK7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b70873b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2866&min_rtt=573&rtt_var=2783&sent=10159&recv=537&lost=56&retrans=70&sent_bytes=11537543&recv_bytes=123460&delivery_rate=1471987&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9362&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5lPkvGO7eH5AVWPfUD8oExP113yqU7ESifD7k5RzsHgLURHD5CXyYY31Kj1TeX8ATO0MsZr5%2BTsMez85hgOLr6M8aRKeHrdcQ7f6kdFZIUV2O7RXYy4wfWqCHbJbAiQ06rYF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b72899b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3470&min_rtt=573&rtt_var=3295&sent=10249&recv=539&lost=56&retrans=70&sent_bytes=11642786&recv_bytes=124107&delivery_rate=100799&cwnd=242400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9374&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JSBgaqcMZpMfNoX0pCa73VfW2O71chDsPdIq2VRU4sa3ALyx1E6TZZLP8meCoKDIwcdOfJ0OhApK92XXk7Hf0VXPsMoLvAvGv9tcbkhMhTHB%2FVTETv%2BXaVA6oyYWOcdChZ%2FE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7791ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6331&min_rtt=573&rtt_var=6835&sent=10487&recv=544&lost=56&retrans=71&sent_bytes=11923457&recv_bytes=125979&delivery_rate=4595757&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9427&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FTF44w1sl5FgZKBbf1PAo%2FUgLtcz0o5ZwQtqts%2FZnUCT8fDzDWBOGYZKbpR4grwtbVc3ZPiuTKqBILth4ZR5c79xjg1DzrKMZ7bnk%2Fzmr%2BhXOIn4RkmUyNolclGxrm6OYgA1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7791db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6331&min_rtt=573&rtt_var=6835&sent=10493&recv=544&lost=56&retrans=71&sent_bytes=11930252&recv_bytes=125979&delivery_rate=4595757&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9427&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cw%2FzZ0g3iX0U0OS7grqOgUjXUl5i7bxXL%2BXeOyJ8Pg5anYwJrThedm%2FXddqYgoJGH0qqcsyOskbQfBHiGPqLSUv5AUGlHPcCkFiryAQZJCC%2B0ptKB63fZY%2Bb0py7%2BTzbVJuX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b77916b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6331&min_rtt=573&rtt_var=6835&sent=10498&recv=544&lost=56&retrans=71&sent_bytes=11935257&recv_bytes=125979&delivery_rate=4595757&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9431&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BZfKCT2eI%2BYhJImKNN%2BQtIJP07TshbhXGh88l35vKQSvvvY%2FTtlJuHBAwFSk%2FKAy2AjefLYyBxnBAZSg5OMKIXYMqPTqpoZW5SzVYGt%2BOUGLjqHP3CfiXmB%2BUrR9XVNwZp1V"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7791fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6331&min_rtt=573&rtt_var=6835&sent=10503&recv=544&lost=56&retrans=71&sent_bytes=11940970&recv_bytes=125979&delivery_rate=4595757&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9433&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZkHZehZM5UQYRi2K4qHbEWCl2QIyN4n%2B4jp4b%2FLwCJef2G9snx8VCD8dY9lZ0y0jk8aKgLvn2b96fYjYnbHqMxe%2B4vStU8JG8ErKesffIhXDdEFud6B%2FIv7TZzwCLeBFJKX2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b72896b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3470&min_rtt=573&rtt_var=3295&sent=10294&recv=539&lost=56&retrans=70&sent_bytes=11695971&recv_bytes=124107&delivery_rate=100799&cwnd=242400&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9376&x=1", cfExtPri, cfHdrFlush;dur=40
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pfr6WPpfnHgCRlaalhehIr%2Ftj2q8O8zbave0izsPf%2B7bn4Do6QefVgQW8FXr87EoZj7%2Fj2JrCVjzkfq7MUAZhA0EY6bE8XRozvV%2F2OoBsollrxjpjzdFyqMDjHt4H118ny6K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b78928b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5753&min_rtt=573&rtt_var=6283&sent=10524&recv=545&lost=70&retrans=84&sent_bytes=11964914&recv_bytes=126027&delivery_rate=3916955&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9435&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qp4H8A3z6c54PoLz7qqjRODUXXLeM%2Ba9ItELBRb1YByRDVKikO%2BxXhh%2FTNXK9aS3ma6TRlP8PZB1cd70r3bg8iVtAy3vqUW5IexLyNie1Oq5MhFECj5fzXmy%2BxhnuLQSCWpu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b78927b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5753&min_rtt=573&rtt_var=6283&sent=10526&recv=545&lost=70&retrans=84&sent_bytes=11966619&recv_bytes=126027&delivery_rate=3916955&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9438&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VPS3dwptDxFlCNtMmb2bQOvXoNx%2FYG1t8wc2cr7FX%2FL2euTEK0tP8Wj%2FX8woWYRI6SH2IR%2FKBOH2gtFPg4t4C8Rk7RQ8tLZTvCA82IuboFhol3VQKPnqaCp5HUHSf8MjlPGK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7a953b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4813&min_rtt=573&rtt_var=5212&sent=10535&recv=550&lost=70&retrans=84&sent_bytes=11971177&recv_bytes=127339&delivery_rate=295564&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9458&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FO25C3FZLpwKpjvLEHMmehe0437dwWtHHy%2B4MxkZL8hKoJxSG3E%2F3fspXBJl0PB6EYfV2yGwaSA24h%2FsIOi1meNDMrfrT%2FIgdYvwF3ECSrGVBQVCGv%2Bzl%2F66k%2BopznPFhw8c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7a960b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4376&min_rtt=573&rtt_var=4782&sent=10539&recv=551&lost=70&retrans=84&sent_bytes=11973990&recv_bytes=127385&delivery_rate=300436&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9461&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J9P6K51k9G5fkvxBFguAoSSAQ9oV7uVcpYsQv5sgb87sLwKjPdwY36r2z2rSvWwEyiqJzgcdojAG7ZYd0d8uVj90m42dp%2Br9PAwgVbcOfCN8wzTkELo7g0xqlwVsAcEFlXP%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7a95bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4376&min_rtt=573&rtt_var=4782&sent=10544&recv=551&lost=70&retrans=84&sent_bytes=11978926&recv_bytes=127385&delivery_rate=300436&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9463&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPRzHXab7VugFXtsEh%2B4zQwM8tGiWTDTAM5tfRQvXmImHpDSSSG6lPCC8F3im43llhQFFy5NGT9Qde6saQUuhgiGkkZ8NK0Cl%2Bz5RTk41RN5MIgBuLpfLUce3rmGVEosjGrw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7a95db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3700&min_rtt=573&rtt_var=3853&sent=10549&recv=555&lost=70&retrans=84&sent_bytes=11980956&recv_bytes=128107&delivery_rate=820654&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9468&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADmFaAiYMtAudNaFYG0YnV0nZQqs4T0ZxPb5Y223bkfwf9WgGgmfI2M2PPfdiqFhytRT8qsoI9xXcY1Su9eBZMeo1H3zmE4fSkxzYG5lDY9ljio4sj33LGNpwdPzBYD3h3LP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7c983b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3398&min_rtt=573&rtt_var=3494&sent=10553&recv=556&lost=70&retrans=84&sent_bytes=11983544&recv_bytes=128153&delivery_rate=519929&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9475&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ycuzzTnCtmBMLONCfNuJhZa2veneYpIqBn2aLvDLgILryWufKZ7H2UJmYe3XVlpzc80qbqjNbFz0XQsRSsx4KWAacokOyVI8P9wT6ndwP0NvX3SzJQ4SYkzCEfvYo9dXhjG2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b7c989b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3398&min_rtt=573&rtt_var=3494&sent=10555&recv=556&lost=70&retrans=84&sent_bytes=11985559&recv_bytes=128153&delivery_rate=519929&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9476&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NoHLTZGgkpA8R4VzGHp5D6zIL3O1uJ5lyM3WHFQPRtU0cVKk3FT2hNf8BjaOfZY3%2Fd8bZhxw3Hnp%2BQsLtN6ya26NMliRJ5z6sllqCUyV6e9Lp6bUiWJpoM8uV5a%2F2CVODg1o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b85a54b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2953&min_rtt=573&rtt_var=2724&sent=10560&recv=559&lost=70&retrans=84&sent_bytes=11988183&recv_bytes=128578&delivery_rate=1153&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9570&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347154
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293545
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337278
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/29288 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashb851dc783254c39dad076d58db877d84 187ddbbdccf24ead6f710ea95dd9e9b0f8e65b1f 75695b017237efd9dca2276e562a271104d0e02b45325cbb6aabea7868a71d5b
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /29288 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:49 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218543
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 72 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash4785834d822968aa35463af961679eca 05ae0c400cf706d1b2edc21ff048f3f6fb344747 859263959c3dac8388d3b983ddf0cc8caac5446e028735c6177556df547221af
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JPeOM%2BJoPqcot9KTUoA39pz4I52iexUSlriNlX4BY3FmwC6ba1GNKeXsf%2FJcZCOYON%2B6zDDnu2MCT4xAqLka3Xz3pxAEK5Ze9kALl2pOU3BH375etsYoFFehpnKzhn1L8Tly"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99b5bec1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5270&min_rtt=573&rtt_var=5531&sent=9891&recv=520&lost=56&retrans=70&sent_bytes=11237386&recv_bytes=120008&delivery_rate=1079&cwnd=169680&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9178&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290742
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392207
expires: Sun, 30 Nov 2025 07:42:49 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=evRKclmKUT%2Fjslok6LkfXoKJ9pOFKFt4MkN18FP1S97A4x2brpipOzxkN9aphbzPLmhUVp4Oe07Bu6funmbgoRgL%2B98uzMHwb%2BaYxfbC7UQpD2BzkxhdWZq6vQ0%2F6ygNv%2F1%2Fz33q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99ba2b4756b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 34 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 29
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y2y9ikrzgqs2vqx70rFRyscdyZXaImX86DKYQIxXUnZKUUtulOxYPpUoyI1EBHXrk1jQAafB5oDQGEQzwedXk1Sa573n5OPdvHxb5MlGDMExL7aMRHXPrcS7HBx47dwUgzJO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99b8cacdb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3998&min_rtt=573&rtt_var=3533&sent=10664&recv=562&lost=70&retrans=84&sent_bytes=12109901&recv_bytes=128977&delivery_rate=831&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9638&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5150
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 166 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Size166 kB (166111 bytes) Hash02e8f77eacf4788771fb406a581d857c 9022a2da954ae381edc6749e4beb4ad337d5e69f 21d09d1af041beb6c1c637e28694d92c25596e5303643a46203d095fdd765b4c
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wbV8zMA3ipnVWWyFJ5uy3yR4pB4ayaST1EyPp1LKaQaxziYs1mNS54HLie8Brf7fpK95Dgf7Pb2RDnGx6LzumhGYKlH%2FRehPzYHdUdgCjPsvwW7ljofr%2F7aDOZIpnjDKDvAe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99b98bd7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3466&min_rtt=573&rtt_var=2914&sent=10671&recv=565&lost=70&retrans=84&sent_bytes=12114828&recv_bytes=129416&delivery_rate=1154&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9791&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HHvzaNaKz1PyhUuHSh8USNE23JrdMcbdTjFNwofnahy3YtTDIxH%2BSIWho3w0yppTk%2FXn0Oi5qZ%2Ftr5tjQ0j3sfJxdB7rl8lEmN9ufSZgwKhvoOYbn8ZcFnzTLrHFYL7%2FwRoP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bafdcdb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2202&min_rtt=573&rtt_var=1139&sent=10856&recv=580&lost=70&retrans=84&sent_bytes=12319819&recv_bytes=131958&delivery_rate=4044930&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9987&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 41 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 30
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99ba0845b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:49 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 30
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vcqo8Ilb%2Fthdt7o3xRZ3UUyyy3BRpkIynYjSMhj4ea3G9XFGsa%2B5KLRNFR26N3d8ddwIxBODJeXyrQ%2FrGWpuRYxBrmeyZmgISD64sLraYuTWfo0Kt9lhfawGOT0H8Dbs5yg9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ba1c96b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2647&min_rtt=573&rtt_var=2445&sent=10701&recv=570&lost=70&retrans=84&sent_bytes=12144014&recv_bytes=130171&delivery_rate=131202&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=9848&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rwGlDh%2BeK3KXdv%2FyuOaIhAUj6JoQJ8fHzclTcP11K48SP%2BbjcoOVchcv4pJzTYoNJkm%2FBKKbHHhuCQpiG68y7bU9A6DYoUKf0IqdXmRORPo31BqwVzwyXllfdkUmniHOlSbp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e49b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10875&recv=592&lost=70&retrans=85&sent_bytes=12330170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10038&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2Fcby5PisGDYyoauTx3JFKnGf6me3sLMZ1MiAiuRcYphTnxR5umVRZ8a3YsEwDV4FXZAJ5MDtrL24G7CEHjPX9fvU%2BMNyycfvbU%2FkMM%2B1GBSJa7iUW1IOVswv%2F5X43IAz4wv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e44b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=11000&recv=593&lost=70&retrans=85&sent_bytes=12479566&recv_bytes=137223&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10041&x=1", cfExtPri, cfHdrFlush;dur=1
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xiauNtl1X4Eur%2Fka5VQNEuNNnr3bTdlZQpVxfeqLXF7WOYV1XImFEgd6IUs6p3%2FvJMOxB1amPu39pkwfmMLeMyREVVW8L%2F6MegkQQ3ETpWmhUa9Uu%2BMQnmTyS%2FoiVYxv2Lz3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e47b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10875&recv=592&lost=70&retrans=85&sent_bytes=12330170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10038&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SGrsO%2B%2Fc2nvHN%2Bn1avans%2Ba20p7QFqn%2FVM1mEb1NfNWS6%2FK%2Fb9leHlUqKaczUeDH8T9TwIrPIFXoElW%2BBWGvpoGr5KDSRO9caicCPgMIvi2EagLrxIcKodGf2Gk7PEgEVose"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e4bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10885&recv=592&lost=70&retrans=85&sent_bytes=12342170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10039&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DdClJLV09IzZH2qvh4D%2FdbpALfh7PwJbmc4uFm4RQBJcM84EC%2BLkC%2F1sUUfRgEbf2hGBnFQp7Rbq7F%2FSxSbiDp8D%2BLxqIjADjccjHe22%2BPJJXvNkmfyLdagN09o6VA4Gkpkx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e4cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10885&recv=592&lost=70&retrans=85&sent_bytes=12342170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10039&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jPTn35Qg5%2Bk3wHLMi%2BMA2o6BFta1BDL6vN2iI5c8wD8oLhlF69I%2B9zN3w0Fx2XY0cIrkQWUDSkioE0JC3zVPD9ehUBBjebIe7bcZZQkdP1NLZrEeBb0qBX9cnoq62X1XrgXu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e4eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10885&recv=592&lost=70&retrans=85&sent_bytes=12342170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10039&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spA0LNYYVzmul%2BlyI2gL42UO0ecRStZRFr7pfAaUjqXA9UeTHbMd1HxyALjG69SVH1lh%2F86BqZNo8b3Xv%2Frf2XAmEp2azKhevFYfXoYD5UDell4ZbhoX90UNRSUfrdDlo%2FS6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e4fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10875&recv=592&lost=70&retrans=85&sent_bytes=12330170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10038&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMJUsCivWjrZW9lRuWt7U7tPNJ%2FUYkwc%2BcP%2BvtfKn6vbKNAUyOsKRvv2q7hH1j6VihexwPtQwiuqXWcDilVtmg9bqS1mrsMeJW47aJvBI9bchIADw8xB88QuIfsqymSCEu1I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e50b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10885&recv=592&lost=70&retrans=85&sent_bytes=12342170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10039&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GMkN2sh9YWyZoOo2bHJN55gbsAzLr8cCkoptxG6Lk%2FsuMcHNW4SnqXtqU55His2wVlTYCCAE2NUNJFAoFNDKtcH9m55uZsHtF2uQ7sq%2F0OCtnuYHgXCIF%2FRMHlz%2FZkLzLprY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e51b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10875&recv=592&lost=70&retrans=85&sent_bytes=12330170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10038&x=1", cfExtPri, cfHdrFlush;dur=4
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3g2o5Q0T0dto8iC36rzXcRr3IQB1Av9CGG7mZMueZGFx5fdIH8qSj%2FtFSz1eDjpZC%2FbrdPwjqTLRnkeZ9GAlA%2FZ8AzuDL74E4QOLsGzIasebYWzZV5s8k%2F9EGVWmgmNXMUpA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e52b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10885&recv=592&lost=70&retrans=85&sent_bytes=12342170&recv_bytes=136907&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10039&x=1", cfExtPri, cfHdrFlush;dur=21
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rAf8nnqUcsNQk9uyCzeVA3J8KjpnENZTKd9TsW0VEWvsKY0Bxdl1JQUXCt%2BSReog%2FdouCDchWCMeVYVURetWuG0QoVztANzgf63h70ODWTOIaD0wLnnkX1VOsjUwbxvn%2BAu%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e53b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=10975&recv=593&lost=70&retrans=85&sent_bytes=12450170&recv_bytes=137223&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10040&x=1", cfExtPri, cfHdrFlush;dur=20
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tYunoDQoahaYI2MAzgLTSzgi7FjcEMA6z2PEJCeWTnX32fpOpoeWGeIPtrJtntgWsAcszHxR%2F6CucFyBXgya%2FrZFxcgkWvL%2FM5byTab4evdDyUp%2FZ4TabBJoE8izlqtwdIJE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e5cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3397&min_rtt=573&rtt_var=2375&sent=11019&recv=593&lost=70&retrans=85&sent_bytes=12501530&recv_bytes=137223&delivery_rate=41213&cwnd=171360&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10041&x=1", cfExtPri, cfHdrFlush;dur=19
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gsGYVt6YZj4cg2qRaB7NGq9A%2Fz6quZ5fr15Z4xpAq9K2SCIOMcIS1LRs4cPOdQBNS0w76tDMIkYlpqqRREuqK7c2sUO4MK3JxpiF0IoF%2BWJ78b69hLCl9KMcJAwjeTMNsMfO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb4e5fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=573&rtt_var=2237&sent=11101&recv=594&lost=70&retrans=85&sent_bytes=12598970&recv_bytes=137269&delivery_rate=2227139&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10048&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rb1vv4gwhMHnR52hfajfRcYZnxBuWjOoqo9SFgZNA%2BWp9RN7vkye71KEE1X0Ek3XUFeUDPq2uSE2sAp0g3420At4glgUYAavBfmvZib6kFJi7PUfzdoLv7vSqoUjG7sDdjlg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb5e60b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=573&rtt_var=2237&sent=11101&recv=594&lost=70&retrans=85&sent_bytes=12598970&recv_bytes=137269&delivery_rate=2227139&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10048&x=1", cfExtPri, cfHdrFlush;dur=12
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FrEvEnza0DOD3gHVTmm40wh0yZcakQLPyNOA4hSIQm1thyw4NkpQxQCjUdOwDWRfhhhvqZuV1Ia0iAjQHTchmlBAhDSAMWgXoo%2FvCSSVMnLmJB7IFL8%2BXPYAHNQ58fkybvvu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb5e62b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=573&rtt_var=2237&sent=11101&recv=594&lost=70&retrans=85&sent_bytes=12598970&recv_bytes=137269&delivery_rate=2227139&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10044&x=1", cfExtPri, cfHdrFlush;dur=16
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FwnJhGJvdVN0rUf31lKnXmi3pM6Ly7YiT8Tt7q8VFAPI3%2FUFL%2FRrNDNd4HZIZff7AjwtkMvKOQk2k4S5GiWon3LXbjpz%2BE61B5zmoYCXmr7qY4R05BWorhE%2FjJkVCXztdNJz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb5e6bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=573&rtt_var=2237&sent=11101&recv=594&lost=70&retrans=85&sent_bytes=12598970&recv_bytes=137269&delivery_rate=2227139&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10046&x=1", cfExtPri, cfHdrFlush;dur=14
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQ6HYJBbe%2B5jXAzmafJcS8W%2FSKiWtXzlyBmC5aVzu2Mmmw0gGTlbQxLwx1KKwfzujvNrG9cMVgZ501V1GKzHCGt%2FZLc934HftRpVzjr66vZ1vMRp8f%2FcLKknVX9MG%2Bj3q2HZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bb5e75b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3169&min_rtt=573&rtt_var=2237&sent=11101&recv=594&lost=70&retrans=85&sent_bytes=12598970&recv_bytes=137269&delivery_rate=2227139&cwnd=244800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10047&x=1", cfExtPri, cfHdrFlush;dur=13
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8kYlldho4jysw6tm2gPa0ySurB7lv7KPg%2BqaNuzSsG9jnPUVTc7iEAaSgS2FMmp%2FW5YD84aZwfQ%2FrHxHqwEcTu6BbEyJ6F3tXFXMZuT0xeJDbfPss5C3Jq63LntmmmB6HT2g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bc0f6fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8837&min_rtt=573&rtt_var=13380&sent=11322&recv=598&lost=70&retrans=86&sent_bytes=12851429&recv_bytes=137740&delivery_rate=36043&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10161&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347155
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293546
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337279
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218544
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335968
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/16447 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash84b75f99232b10662f2cc1f4213f3635 7b8fb6603f81e46e2f012325f6b6c8ad45a9d905 767e3a7547f0ef1cbf05ca008da0dea6e105f21f0edea2da5b1af24827630cf2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /16447 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:50 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:50 GMT
age: 4151523
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5437
x-timer: S1733816570.493663,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392208
expires: Sun, 30 Nov 2025 07:42:50 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XXgy3jKyLQ%2BaMPnC6jsxNdWiEoLXNga%2F0CgIOBbPntH8wFXJtcWnz1xA1FbERT4cQFFlWdoeEjNaj8ANOSOHvT0D8NUEsNV5GHaCz5umZ6uW6AypSDL6r2kEjET7lU1V0wmv%2Fz5g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99bd9fa556b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5151
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/first-screen.png | 188.114.96.1 | 200 OK | 124 kB |
URL 35.pexeburay.com/assets/images/first-screen.png IP 188.114.96.1:0
File typePNG image data, 876 x 545, 8-bit/color RGBA, non-interlaced Size124 kB (123973 bytes) Hash0c05f7ca76aad0880ffc9ea69bfc2d69 bc913ac6fbf4922aa3c8fcf93324b70820f1a9af 64286c5fe05745673323c33b0249253068742861f7c2ae712f2308b40d83308e
GET /assets/images/first-screen.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 123973
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e445"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k0nP9R4x7uXPE5Wa4OWgsMuYWC%2FtGNy4vhPdnoJ%2FrWTng%2Bu5huQR%2Fvux1Oy%2F5xlYYDoATtyt8nKXKYnW0Th7vbSxwUU2P%2BfRasCMjYngk5euw6%2Fy0s%2BuWAu%2F5yOcgT6E14u9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99be8aa8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4616&min_rtt=573&rtt_var=4931&sent=11503&recv=615&lost=70&retrans=86&sent_bytes=13050265&recv_bytes=140413&delivery_rate=1089&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10556&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b2JxLq2SYVh5JCRXNYh1ZobCUa%2F4mGBlf4a55zqD8dFKNwNn8lS9IQ5rNC2RmAcyKNpWa5tByD5ISD0ZH5Q656N8ehRk19fnYfnmiQqLF47NGf6MvPG%2BAzJpoaEFw9rTx%2BBL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99be8aaeb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4616&min_rtt=573&rtt_var=4931&sent=11610&recv=615&lost=70&retrans=86&sent_bytes=13178128&recv_bytes=140413&delivery_rate=1089&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10560&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 22 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashb2fa7f29a0abffd1ffc40851b16d5709 e30a38c26b815459487ceb4cae6a3cf86fa10e36 57f4cb49e5cffd67307079c029335e15735010930c6aa7f61d50ad449d2f6fbc
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YC54EgmQytha0AZ0QXgcl%2F5DUSrxIp1FPWCYX%2BhpcG%2BI4K7JcRbYnHX6YeLt%2FQib%2F7RKNVJsVazO218s%2BLk8g4jUzwTn3nzY2tlG%2B6be7JhV9eeHtcf7INnzv3kuImY7yPOO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bd7941b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7993&min_rtt=573&rtt_var=10397&sent=11452&recv=605&lost=70&retrans=86&sent_bytes=12999398&recv_bytes=138890&delivery_rate=2236858&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10386&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1HV2PewfV%2BUz2NliT0S4HL8Sslnhgbh2PuL6rfVvYfpYl%2BJ3MUakYljWnD7F9Qwp6OHSOghlYWS7%2FjNA7qtuqnhytx6xpdmU7nPnHmeNz9GgWfvvm2GseoEKl34SE%2FZDhimn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99beaae4b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11623&recv=624&lost=70&retrans=86&sent_bytes=13183954&recv_bytes=144391&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10583&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2FPUx76IDYUefxfLwbD7xVreI2Oc1Mu55TKP5WpLNMrrdvfTToZ9OizrUlx8Qbkg1P2Fg0L4MYcBHH94LUyXASeZLww1tKwyoXb2U2PnjsJCOPSYmr0n71lz%2BBVFKkxB3Jk1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99beaae3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11625&recv=624&lost=70&retrans=86&sent_bytes=13186151&recv_bytes=144391&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10584&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 163 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Size163 kB (162638 bytes) Hashd53a94da78df89365c75947ab9633827 41f1d3deb6a3a3fe4a4155e11af13b86fd6bb7d2 d7ef40b30f083f1706ca3bc4334dd0029dd2694bd06f91e346d08b2df2bdbc26
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNVxdhH31XtYu4gfgT29j3JyaTbqQz6mcHFBrG2xVEMKHcDSRviWq6B2EhNfN0XV2fMSdCXqVr2ChzlMKrc35Qk67q67Ijd14l%2BhMRePAb5ICVxD7sgEsnUo9iw50GP1Kofo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bd7956b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7153&min_rtt=573&rtt_var=9477&sent=11456&recv=606&lost=70&retrans=86&sent_bytes=13002342&recv_bytes=138936&delivery_rate=137248&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10395&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9v6YoVmGoUjrJV2nFLLeXtooGT9cW6NQszheLuNnXj0YMEXzgYFocwGt7Eoe%2FpHg7Y1iuZd8gqLvH5UYpU7CcYLG0HCJnFFWFqtszNLjy3MtAphlMui1N2uFwb3tM23G2xg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99beaae7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11628&recv=625&lost=70&retrans=86&sent_bytes=13189415&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10585&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 215 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size215 kB (215141 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 31
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99bdac1fb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkqPckEI2SgQn8i3nL3NtGpMgDCi9NGEtIRvNDkURs1qti5YOzJFdbjztdwo%2B2Nb2mV%2BB%2FbnWYtkBzFVblnUIP3mo7j3XaP44MN7UszqLeGVEbiDH7tHyc9uFPvTeo%2FgolaJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebaecb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11628&recv=625&lost=70&retrans=86&sent_bytes=13189415&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10585&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BaNwffP83LWSVCnjT0qMJgicTanw87n%2BVNC64tmTn7cxbZyyrh3C6l4JIg2fNMev3CGRBN95brmujlgc5lvuPn4WoYMwF36p1ubu7TkJnS%2FPHLrgz4YN41pp3zUAF7WKdiyd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebaefb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11833&recv=625&lost=70&retrans=86&sent_bytes=13434729&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10588&x=1", cfExtPri, cfHdrFlush;dur=53
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxTkVR8ho%2Ba05x4iJbxS6DPMMGXPGdFsISWq2j9wKubMP7KX%2BA%2FG5SAAcgkYkUVAm6kDlvFXii7gd94tqUbH%2BgJwQbTICfdq9tltOPOoUlEchqe%2FM%2FYTuSA2atxDhubQDDaL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebaf0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11628&recv=625&lost=70&retrans=86&sent_bytes=13189415&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10585&x=1", cfExtPri, cfHdrFlush;dur=56
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nvQgOEKBpMEYxLZiUDNMA4gtvxsqnNVBXIrBWnN2FE%2Bc3TDSXl7CvwxlPrRqMCXkXrKqUz2fkCRLQZG9ZRuzNcOo3CjJN1A68hWkDxsFVhEnCHHRZXdwrcUFFnBclZYhITz2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebaf1b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11833&recv=625&lost=70&retrans=86&sent_bytes=13434729&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10587&x=1", cfExtPri, cfHdrFlush;dur=54
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 36 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashf51f8ef42826392057e406dc8349f87c 14fe121d49ae231a4dd5d885eb05463b37972941 515647f46fd83514493e1611a12bec6fd1a713a4e07befbf7a0e6993c1372275
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:37 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 18
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=giMoDnQxiEOwv8c32Fbjov%2BMyAt%2FmtH1HmeIo9ATmj4EIU5rVR5Wn2tn9oqSSPU29%2Bp4V0jP6WoVLLKTPG0j2WTK3cVCFGAsYiLxuRuQnXYnHmUEvPe7JJANbRfYyt2glptT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb996dcefeb515-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=21375&min_rtt=519&rtt_var=5991&sent=21475&recv=1128&lost=234&retrans=266&sent_bytes=24369707&recv_bytes=260384&delivery_rate=416808&cwnd=223413&unsent_bytes=0&cid=9ad8ca5ea686ca6c&ts=18819&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2QzDJxl%2FG22WDujQgNo6%2Bk5Pn9hwywBROXcGDTvG8IBDceoR%2BlGhYYg8fwgSAlcjj%2BE7un9TrGJ6%2F4Y06QpZid9h7P2UNLGay1%2BDA8EhfgE3SmQDp0xg1DXvE7n6T2rIVkCf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebaffb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11833&recv=625&lost=70&retrans=86&sent_bytes=13434729&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10598&x=1", cfExtPri, cfHdrFlush;dur=43
|
|
| 35.pexeburay.com/ | 188.114.96.1 | 200 OK | 49 kB |
IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashad560d43688159e82f0b205a250efbfa a0e35f6ed2ca0f5812dbb4404bf2507ce9c13187 1dfedd01a82d03f49087c22665e9f85de378e272321017f5d094ce475dd9d0b6
GET / HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: text/html; charset=UTF-8
cache-control: no-transform
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jEIPZhImTNvjNDSPUV7vg3sN3VQdv2Dt8gHxq1T1nPPMRrwq2A4RN29VJiT8l56HgVaaWxj54QXTfXrKc9VaGI1JJyaZJzYz8fnFFPATDyvzs3ZNKG6Z6Vs%2FqEM71DDZKzA5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99bcf897b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=10070&min_rtt=573&rtt_var=12066&sent=11426&recv=601&lost=70&retrans=86&sent_bytes=12973147&recv_bytes=138179&delivery_rate=583&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10334&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XZ%2FmktPhPSHnD%2FXXlCXTIXttsGAIaPSF52XhdfwKB8bYzoHtQ4hxPpfmumlphi9PUeHDOgnIA2FBQ963EyOqQbkN3GORzmVkWG9cg1h2u60mCqkV%2FPWGct5NGvfpzxWnm9IN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebb04b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11833&recv=625&lost=70&retrans=86&sent_bytes=13434729&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10591&x=1", cfExtPri, cfHdrFlush;dur=50
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AIJNqxbOyifFe%2FZCfIuyY6CvpacyhdR90%2FBKSL%2F%2Bf0Y%2FeDN7rUn4SZZk3WADCJgskdvIROhOnj3eNTl4vAM07e77poRC8DFwIjU0buaBDeIjWSPCeWbO38cgWtVmrPyEolX9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bebb08b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3798&min_rtt=573&rtt_var=4182&sent=11833&recv=625&lost=70&retrans=86&sent_bytes=13434729&recv_bytes=144706&delivery_rate=176591&cwnd=250800&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10593&x=1", cfExtPri, cfHdrFlush;dur=48
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n2N22yQM6XQvHWbtWGh7E8rALbzir2rk%2BGr1%2F7XWdxi%2FZW2JrhgW9yWhkV2sLQ%2BsystC1vbMM1Kx1LQXJQTJFH1uiRqJLDeE6TdIcUWSS5QRZC4Sy9Y5HMiBQVMFyK7salIS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bf1bd0b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8347&min_rtt=573&rtt_var=9568&sent=11984&recv=628&lost=89&retrans=106&sent_bytes=13613197&recv_bytes=145947&delivery_rate=3383839&cwnd=177240&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10653&x=1", cfExtPri, cfHdrFlush;dur=24
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w6Tn9DGJ%2FYTZ%2FMRmSz3AL0uFmMwMrkd3tPUj17IMfsXIidkQRcjoxW0ei%2FhqmMOL9jUq1AOVW6UUZHAgMZEwT5bhVKX0i8%2FA5ELGwFbY1b%2FG8zYD60Oz4Q2buzydEBDtm5yQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bf1bd3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8347&min_rtt=573&rtt_var=9568&sent=11984&recv=628&lost=89&retrans=106&sent_bytes=13613197&recv_bytes=145947&delivery_rate=3383839&cwnd=177240&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10654&x=1", cfExtPri, cfHdrFlush;dur=23
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2W21u3Oz3XUBLTIu9PBGaISeICfjJeJJsE7l%2FNFG4Ccu35AUytAilTXzBEVST%2BmBV0tJHU7FnlXYvr%2Fz5pFXPl84ZX4pKJUuEKgBo5Kyg%2B%2Bo%2Fhr5KP2E81M%2FXgEYi0X5jbdG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bf1bd6b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8347&min_rtt=573&rtt_var=9568&sent=11984&recv=628&lost=89&retrans=106&sent_bytes=13613197&recv_bytes=145947&delivery_rate=3383839&cwnd=177240&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10653&x=1", cfExtPri, cfHdrFlush;dur=24
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=etRG%2BoONgx0i6XgDLwbS0uFuwahiDuMVS%2FupfMArx2wJuAMQTnCQURD8l%2B3Jnvh%2FLO4Z5PdyEZd6PnqXdhmwWbxo7Qbs7LvO73wIn9wBwiYTlvHsKWyLpjZYn3zomojSkDV3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99bf1bd8b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8347&min_rtt=573&rtt_var=9568&sent=11984&recv=628&lost=89&retrans=106&sent_bytes=13613197&recv_bytes=145947&delivery_rate=3383839&cwnd=177240&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10655&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:50 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=98rFGLKdni7viAkr%2B%2Brq3xvyEyEEeOldJx76o9mmOk0gTUnAVp%2B70S7mJzKFzPY6U5f0gvjCOWVTB5spalCPcJ3KTu0vlUI4TBcUT9mXNOwUo9MPEKhKmfWJ2TcgWGxSB9TA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c02df9b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=9569&min_rtt=573&rtt_var=6781&sent=12093&recv=638&lost=89&retrans=106&sent_bytes=13731044&recv_bytes=146689&delivery_rate=906&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10821&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347155
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293546
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337279
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218544
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335968
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/46379 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hashb371caa35c0bfd16affc6753aab69a2c 95e24eca811bba9bc48e6dfcdcb455dc759b10fa 2cfb1209d1008a4a5186a3f5e65843c73dcbe0acf3e4d620e37a4b205add0ffd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /46379 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:51 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392209
expires: Sun, 30 Nov 2025 07:42:51 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uGYf1GLR7jhydNCUVTxYNwVbL%2BrbLbgO40bOqPX41or4Hrc9dgFIpOYrRGm6wMjhCetK1kKAQWIsye08RuYtj8REKapfMjwLB%2B%2FO1Kim%2BEhYInpuFSkaiby%2BZILtUdSkmZf4QFIV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99c1ed9056b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5152
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 59 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2F5Hms394iPVZUDsq1%2F5Xla6BNE7IWsi2dEAfHmcLYyUFsh8p9ynnjBQn66be9URvgSTs8uYuVWRFua8Vl4QkSCJKRFISk4YDOaBzpNg5vL%2BC1PUpu6zKmPGv9lX%2Bw7nY0oo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c10f24b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=7879&min_rtt=573&rtt_var=6790&sent=12197&recv=641&lost=89&retrans=106&sent_bytes=13852762&recv_bytes=147088&delivery_rate=1151&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=10962&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 126 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Size126 kB (126122 bytes) Hash5f07872a790904f403e3eecccf0ec48e e9c24f6e6cd3bdf39a49c055a19718d944eeb549 412f8a03c445c4cf5f6a08a83f145841b09589cf59b6940b91e7884def2d9f97
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sg4QnSz6PxDtgpo8WTTIPlikFtKZSUqT25hOfCTOqrxVKsIMrZeXGJQbj53xRFhbl1VYA0SQntvuykmVfjDFxEIWxxzrSeGPL27jKWrCzI8Fzrr9vzH1jLigl5We7Gobi0%2FI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c1c80db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4657&min_rtt=573&rtt_var=5279&sent=12231&recv=649&lost=89&retrans=106&sent_bytes=13883973&recv_bytes=148282&delivery_rate=1104&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11080&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ynsgIJTywXriJL4RVT73tWnY%2F6vald50W1ftdra9i%2Bp5B%2FuyslzIVqpZIPuxuZ3LkitH9JI7NbLCOWSFiX2DjY0WtTr%2Be4rgqG%2FxyP0TjBQiTzQrDL39d7ojtjhajQ4a7OUZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c2e976b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3476&min_rtt=573&rtt_var=3072&sent=12391&recv=660&lost=89&retrans=106&sent_bytes=14062701&recv_bytes=150659&delivery_rate=399795&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11254&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 31 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash03f5226e3acf8c578e9f08517111650b 5d18862f80f788c30d368359cff01c8d6623fb3c 68cedab78421910151738379094d31a326d1428f1a898460a4cd1f9f2a956856
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pwK5WTGGVNqGjkkKbKwSsve3unqROtF3ZaXrfNajwPZ0GMj%2BLbc2jJy0KuZynLVYEgIrkXOg0jZS7mQHCYYE0biAxP%2BzLVlhpTdoy%2FLmAeyersAS8tS1ENxrNrXYc9v1iyyY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c1d81eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4238&min_rtt=573&rtt_var=4797&sent=12235&recv=650&lost=89&retrans=106&sent_bytes=13886906&recv_bytes=148328&delivery_rate=1316247&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11088&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/search.png | 188.114.96.1 | 200 OK | 2.5 kB |
URL 35.pexeburay.com/assets/images/search.png IP 188.114.96.1:0
File typePNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced Hashb6b3c8c375f6ddbc8e017a0920ed8825 f60ec6f03911ac85c7561c602c5f4198822f4d63 96f31184bb317616f6021b01ad5d2c4cc5b210fe8ceae265384a5d3852461524
GET /assets/images/search.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 2493
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-9bd"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bEqZou5byBmSQXeHXR3pxH0oaqUtgEHyJe%2BRzbvR%2Fa48ofs0arFNvrRfzwHXYIwHyHpMw9%2FNsAVJYNQXn4pdKH3ave%2F%2FPbl6OxX4cbDXyJj8UY%2F9APbtY8BAkzMbMujl8Amv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c2e982b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3476&min_rtt=573&rtt_var=3072&sent=12397&recv=660&lost=89&retrans=106&sent_bytes=14068347&recv_bytes=150659&delivery_rate=399795&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11258&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=54tPlO7WeOp4VLoTJwxF2%2FdM9axETGcNZ5up7BXjGSsnWrPrytfG7z45cuGp4HOujsWHATsjylo9WcL5lG7hURHuwXJZwIjQwg8%2FzD%2BfTwJ2Mb27opw%2Fw6Wh2vbcdEyyQoyr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c2e989b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3476&min_rtt=573&rtt_var=3072&sent=12400&recv=660&lost=89&retrans=106&sent_bytes=14071611&recv_bytes=150659&delivery_rate=399795&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11260&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 32
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99c1e8cab51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DS3JWE0mwQwTeenJH4izGfEsWaoGp%2BTGE8an9yeUSufb562hqNDAw5zV1QWcB3I%2FNvpcKCSOnFXge%2BM19eMPBHHPhoCLHLmDYlkjx7oSbHmnbrpP15E6GK5dptl6tF5SU%2BLW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a02b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12522&recv=668&lost=89&retrans=107&sent_bytes=14213963&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11325&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tva5DDjhDaehLEHpfWHdNNDCEIk13x4ZYKiprt01g20S4v7TwdMOyb08GENO3Bsa%2B6o9t2f4VlBOxpjcIAR7EvVTt0nVyQ%2FzMNANpJpCsRh44WHXYwFtfy7BVCWjIlB21wVR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a04b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12654&recv=668&lost=89&retrans=107&sent_bytes=14372284&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11326&x=1", cfExtPri, cfHdrFlush;dur=25
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DNI1MdPW0XZ8wFHYSiuB58a63Lrtl29IvyJ%2BNhEx24vD3njPYngz3UyUujEVhbRLQ4HDPcj5POneBESg9Kk3IpHuZr4QHW7WStuOn%2BUy8MsBGdlxkDrSb1%2Bwn1g3ZPfIpgaB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a05b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12644&recv=668&lost=89&retrans=107&sent_bytes=14360284&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11326&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jhfQ81fRlNz9xtuCdP7mqeKpilmGBfWTkdSfUHOxBxBGf2di6pOEKbOu2g4XoM6by%2BCOgWLCN%2FuvaaH1Y2qKQnG4aqHdjsdqWv%2F8BC%2BuJQy3IY5yjIP%2Fbp%2FYZNdAlPCgn%2Fj9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a06b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12714&recv=668&lost=89&retrans=107&sent_bytes=14444284&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11327&x=1", cfExtPri, cfHdrFlush;dur=24
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 4.9 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Hashea110e768b8a4c1dca5a17821ebe96d5 f5f5d596a6a3e397454d6fdbfaa5452362ae0706 ff6712ab642b62dbc507a5c3e48c5b556f91a3ab149283b8837f6264f1091458
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:51 GMT
date: Tue, 10 Dec 2024 07:42:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYPKPXUOu7SXyIFNAUJtjVJmx0zpDe15NcPw48AJri%2BeG0%2BT2%2By2BcQyFbWNKAko4AqG2PNVlE2tSQq0UA42%2FmB1cBaEkkfWd%2F9BuPAt6BMlvBMRzsT5I8QxmouqkgZab6vq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a0ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12734&recv=668&lost=89&retrans=107&sent_bytes=14467163&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11329&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nBxM74yLfQsteKpT0%2BNKODZXctV7wXlhrE7p83TgQAx3ZaFE5BZrSllkBHPcBpqLwVM%2B38xfZM2GKmmCpWyXXLizRUdqbf9LaQaoFwtC81GJAnuNBsiCuGN8itbl5bxIj5ja"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a0bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12734&recv=668&lost=89&retrans=107&sent_bytes=14467163&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11329&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ktHtM7Nz2slVehyJYkIxtEpkw5uRVdzg0tEUTAUb%2BuTdhVuHRjoGxQ89DQB3fqrUlmtlRebCXrmKmFuk0bkXGcCvcowkQoTsP%2B2SmB9mY4uUEdwHJJCjcZeLxO0E7vtv0FyI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a0cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12734&recv=668&lost=89&retrans=107&sent_bytes=14467163&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11328&x=1", cfExtPri, cfHdrFlush;dur=23
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LCa3buNCBINHxO2VZryk0kWJ6YmaS1caRLF6mohfYkM%2BfusJbZwVmi66HmQdzAsbJB1TTr1EbH4pze5QfjKJlvY1dejAQA9SpF1BpxU81vVKHHrmVCmQJ%2Bx1ogNkIY2b%2B99X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a0db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12734&recv=668&lost=89&retrans=107&sent_bytes=14467163&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11329&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wox5QrgkBj4vw3mMCmRuq6DVEUnZqajoEmgySyh64oGf64Xux3MGvMqYBm9hzQ7l52j5VZNV1p6JUoGzsBre%2Bq3FAGKobhkIn60O2E%2BvjnkJCcwI7rETuts03N7faHs2wJA8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c35a0fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5676&min_rtt=573&rtt_var=5196&sent=12734&recv=668&lost=89&retrans=107&sent_bytes=14467163&recv_bytes=154053&delivery_rate=29531&cwnd=253200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11329&x=1", cfExtPri, cfHdrFlush;dur=22
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yMF%2BP8BkN%2BGnMjT84lRzuQJoTVWTaU0mpGh8KF%2F2665pO%2F4iPC6WYc98YCvoZbQ%2FMk59MvZoBiScIcJhrlIU4b4ez7p7I1uv%2BhFtNgQAYUtsSLhiZ2f6LEECOzqPTEjiYmWb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c38a3eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5639&min_rtt=573&rtt_var=3971&sent=12835&recv=670&lost=89&retrans=107&sent_bytes=14580789&recv_bytes=155247&delivery_rate=8051940&cwnd=255600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11360&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LHYm586o3QV%2F%2FfspbZv5RHnvqk%2BCINkgawkF2ur4HGltcyVWshrIv%2BPGZq6UNgMpVHO1cF82CHX3jtTqw%2F6SGjcS4k8lKEysmSJ54hwzxv5l3VcLwrtNFASgvEXl9eBvUYPb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c38a3fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5639&min_rtt=573&rtt_var=3971&sent=12838&recv=670&lost=89&retrans=107&sent_bytes=14583358&recv_bytes=155247&delivery_rate=8051940&cwnd=255600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11360&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X9u%2F7NJeub09MXHshl2UjmqCOaABY7RAhvVpnu7lr0J4Z%2FbhrU9CoycfYIVfk%2BGe%2BNLDP5VnzNdhVQeVPXE4HPIkn0vsuszHiYnPFYaI6GXflghWzKBdmQGXbQb%2FW8Z7XP3I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c38a41b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5639&min_rtt=573&rtt_var=3971&sent=12843&recv=670&lost=89&retrans=107&sent_bytes=14588294&recv_bytes=155247&delivery_rate=8051940&cwnd=255600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11362&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TNlpHvvbOuwyKcpNOraqut1PD5HAzcqBY3KvhZbUneci7Q4Fwn%2FcYaJzMobnhvfOjNfdtlEIkBIg73aJbx0J%2FO8iTDxkpeNxcKd8Tr0XKBrPMGCIzD%2BS0xryYtiUYkJIxS%2F2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c38a43b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5639&min_rtt=573&rtt_var=3971&sent=12845&recv=670&lost=89&retrans=107&sent_bytes=14590319&recv_bytes=155247&delivery_rate=8051940&cwnd=255600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11363&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 240 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size240 kB (240375 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 32
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99c1c89cb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 32
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6qNWaU0B%2BdYDRvteLalaPstKHZ1pYFpuJFlyDl413NeM1PBC4bGW5mxaWDDcnih2sBy%2BmQGBJviTfC5zuKTFtTPF%2B7pBxGDR2jEYME2sAzA8ZaOXaNaIbzmwsuDl1WKqSdJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c4cbacb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=8269&min_rtt=573&rtt_var=7380&sent=12871&recv=674&lost=110&retrans=128&sent_bytes=14617029&recv_bytes=155718&delivery_rate=769&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11553&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347156
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293547
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337280
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218545
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335969
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290744
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/21419 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hasha8d686cb44431c0be97dab1ab17dcb2f 0e38a16e9cdddca313072cda501bdd65f2810058 0e21885e9ad947035b1397c97716eec3cccbbec726e45cd370516bec2d6074af
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /21419 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:51 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392210
expires: Sun, 30 Nov 2025 07:42:52 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U2Bi7KoHE38%2FKuTy6kCdcHr98DVrSQfvNOQ2lQTw%2BTBvlLgW476IlGkuc0gqYnphciN5hFhaQqWRIJuST%2BVQIRgSoSHzKRDlGXjdgBHBo%2B7xwejiApNtf9MbZXUGZGofwMSpBJvT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99c7dcb256b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:52 GMT
age: 4151524
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5439
x-timer: S1733816572.138061,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| 35.pexeburay.com/favicon.ico | 188.114.96.1 | 200 OK | 59 kB |
URL 35.pexeburay.com/favicon.ico IP 188.114.96.1:0
File typePNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced Hash4cdf3256cd7b8ec3917adb79d6bf457e bc615337e9223183a126c8fb649774866fb53e69 fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0
GET /favicon.ico HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:51 GMT
content-type: image/x-icon
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1007"
cache-control: max-age=14400
cf-cache-status: HIT
age: 31
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KhoFTmS4WIlUwDFW%2FBUprS3it0PI6I65C%2B7nzPfW2qDtCVpwf3Bn%2FMuea40dsTdFUYX%2FfNW1wF12PrXobQJ5xd7Fdd6HUl9eQkIN%2FXvJ0LkbIxvyBTqZwE%2FRqFIIpmy2P3rk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c52cb1b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6901&min_rtt=573&rtt_var=6565&sent=12975&recv=677&lost=110&retrans=128&sent_bytes=14738747&recv_bytes=156117&delivery_rate=1145&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=11624&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 146 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size146 kB (146323 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 33
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99c7bfc3b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Eof4WGtXJEFKT8CE7l97EDVQ85vlkJZbodhsO8uTT7yoox7X0kZO5%2BQkBKm1n%2Bnh7zwlBXzOnA5zvEX1U11VOTG3LW8d7hKCAcHwOCSD0HBBrfJWD8yFsG9%2FKuIZIBFUojbt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c878cbb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4722&min_rtt=573&rtt_var=4565&sent=13062&recv=698&lost=110&retrans=128&sent_bytes=14820840&recv_bytes=160053&delivery_rate=1173&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12148&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/people.png | 188.114.96.1 | 200 OK | 2.9 kB |
URL 35.pexeburay.com/assets/images/people.png IP 188.114.96.1:0
File typePNG image data, 66 x 71, 8-bit/color RGBA, non-interlaced Hashb9be96263c99c3d8c5ab1a4ad7277cf6 6a2e27318ee7f1fd4b75ee1cd70f9bbdcedcb4d5 fb7242f603c00bd4ee3611be7b317c8314ba2f6e4ee9d0e3edd8eafc7e36e274
GET /assets/images/people.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 2921
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-b69"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vaLdwxAtBGjVhenJ2j1zRYtg6s057qsQYrT33x5memwZAjypPh8c5nLWd071DJ2mD1NEfcbZJ1tmo7oPZDyB8NdVqpYlPGLLXzbqoa4%2B8%2FEMCWQ2rfQ77jQtbgmKUPAU0H3U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c878d3b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4722&min_rtt=573&rtt_var=4565&sent=13212&recv=698&lost=110&retrans=128&sent_bytes=14999760&recv_bytes=160053&delivery_rate=1173&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12156&x=1", cfExtPri, cfHdrFlush;dur=3
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 16 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 33
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99c7dfe6b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-desktop.png | 188.114.96.1 | 200 OK | 135 kB |
URL 35.pexeburay.com/assets/images/step1-desktop.png IP 188.114.96.1:0
File typePNG image data, 578 x 318, 8-bit/color RGBA, non-interlaced Size135 kB (134700 bytes) Hash7eff8dfdcf53e466eccefdc9aac9e732 b801c28598a2a14c93fe1c6320c4ef0ed719088c 74f435be425bebb4f4b195c116d6d2607dccca64b047bd7dc45f5e0a64c45fda
GET /assets/images/step1-desktop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 134700
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-20e2c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZE8b9Sli%2BXGGdvTznQu2V3EGXOEOi75gvPpWS5laG%2FWl5X9O0Xyb9%2BuUPDB4HsKnlIkE6lnJ1gQvhpCZWfz%2F3UAigI25SdVItDc8qRMHpUwTyH7wtL3eLt1IBBv7eUgshB2z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c888dfb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4722&min_rtt=573&rtt_var=4565&sent=13171&recv=698&lost=110&retrans=128&sent_bytes=14950625&recv_bytes=160053&delivery_rate=1173&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12155&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= | 188.114.96.1 | 200 OK | 66 kB |
URL 35.pexeburay.com/199f8c6.php?utm_source=&utm_campaign= IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash085d921a14f10b5a100928ee34c5b3c4 6a08039d0ef73dd642bcf73149dc15cdeb61b7b9 7db6685cbb4bd4e2ae83073c1e1bdb902b5c19e7719172dc1389fcbf44c11620
GET /199f8c6.php?utm_source=&utm_campaign= HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
content-encoding: gzip
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FwqDtb0MRlN2p4zqzXx858uBvAg6DM%2FyqtLPAYOGjlqxz7XT5LxOfakq5cJCSaVnOjZ8n2%2B9jYpW6mntnV98JBKIJCv42c4EAwJeaeJwy9M4RZsH6pDCFo2iVgK08EX0klca"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8efb99c7e814b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3957&min_rtt=573&rtt_var=3031&sent=13039&recv=689&lost=110&retrans=128&sent_bytes=14802275&recv_bytes=157744&delivery_rate=1088&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12086&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rBcb0T4SG0WDNd1UJ74RjhpWPtBFB5OMLeE3Nfd2Y1aKZB%2FuEw1abMgUFWmJxW1ejWkzNP6vDn56MaVvi93CINL%2BkiIHEUgIUEpu9ivYH79E%2B9fw876njFtxeX99OTi6mS99"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c7cfe7b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4049&min_rtt=573&rtt_var=4012&sent=13012&recv=686&lost=110&retrans=128&sent_bytes=14772880&recv_bytes=157358&delivery_rate=255172&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12034&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5lBGopjNT2QBIKzNCu3GFn6fedDkJPv549red2JDm7no8U113ywXxkN7NkkrYdyVI5eur3KkYArzFnEkQxtcZ70%2BRzLLssnW70x1yPZucDIY8AXYCe7Bu9HqRIJWYC14oxTL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c898feb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4776&min_rtt=573&rtt_var=2682&sent=13339&recv=701&lost=110&retrans=128&sent_bytes=15149014&recv_bytes=161301&delivery_rate=9199831&cwnd=261600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12170&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CW0YegmAfVf6hv5Vp7%2F%2Fm58eulcG1VjalgUm9ox%2BibP9MBhMYcflbZm6qvJXfdq9WlChhRPo449CBtTXAjUo87ALPVd%2FMdz9fbEtCHlKhroXPt9acJE4OtcI1wwsyUSDHwPv"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c898fab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4776&min_rtt=573&rtt_var=2682&sent=13344&recv=701&lost=110&retrans=128&sent_bytes=15154719&recv_bytes=161301&delivery_rate=9199831&cwnd=261600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12171&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KhMA62wh8qqmLu9lcuuDljXJolVD4GIP3ZBoe%2B9TLpBqbjmb1ENPbmlcfuODuFZTmSdOKgtWcvDXqLsAmAg9w9lWZ7oLn4UjHAEcL347VSSf8ciMOZgVc5iGbZ9xxBHwYXb0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c89900b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4776&min_rtt=573&rtt_var=2682&sent=13433&recv=701&lost=110&retrans=128&sent_bytes=15261388&recv_bytes=161301&delivery_rate=9199831&cwnd=261600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12173&x=1", cfExtPri, cfHdrFlush;dur=92
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ivWDQFAB%2FrJGSIFKqpsdoqucggs1seXMbf%2FjsCpFUwq8Kjqwgzdc%2BLuWhxcbHuvniMC3d5essaTxX61ygtfaOFWlAR9ff372BiQFCke511AExbfnnvAvgPZOL%2BvR66Xi86F8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a3ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13438&min_rtt=573&rtt_var=18043&sent=13586&recv=706&lost=110&retrans=129&sent_bytes=15442124&recv_bytes=164284&delivery_rate=2222474&cwnd=271200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12289&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zfWheTylWUl6yK4V2uG9TDuwNUtFLiJ4whMGolS0GpCd3fSPX%2FZtjsmd1t%2F%2BKnuadfPUAUcBXC4GpOttdFmBAsy1RkMf0wAw0TwFYLU1nVLzADHvNDuBw48fJsq7gxw6P0yi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a37b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13438&min_rtt=573&rtt_var=18043&sent=13590&recv=706&lost=110&retrans=129&sent_bytes=15446548&recv_bytes=164284&delivery_rate=2222474&cwnd=271200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12290&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HIaYJnZmkBTCbIzMsTOv5OwSTg%2FPqNYgYoFCUOlvqoceMQ1p6%2FnYGiT%2BxGciyx94N2wbHrBTlRnWIImBvwHPDFVgTxpv8Ufa0Qqiux1Z7uVKCrRLXfFvFYHFgEF9tHeJxl3q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c898fcb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4776&min_rtt=573&rtt_var=2682&sent=13433&recv=701&lost=110&retrans=128&sent_bytes=15261388&recv_bytes=161301&delivery_rate=9199831&cwnd=261600&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12175&x=1", cfExtPri, cfHdrFlush;dur=90
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=17wYTWKi%2Bi%2BIFW8FIBeQFtbyZSHPzFYxpHNGqY5kzoWX05i99FVg%2FqZbKI%2Fp3C5bBzdWM0DLMkx%2Bsc28VOUiO7hn%2BijAX71N54Ck2yjOznI9we%2FT94TvBFaejrNrrxlNFw8I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a39b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=13438&min_rtt=573&rtt_var=18043&sent=13590&recv=706&lost=110&retrans=129&sent_bytes=15446548&recv_bytes=164284&delivery_rate=2222474&cwnd=271200&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12290&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ht54DcALdjqwpDCIIfdj5auCGGV9vTgjvdYmmyb%2FB%2BVe1rVpKbfa1oSoaqqsMsGcrlv%2FnRE8oTkJdFz8sI08kk2AWkQGLMqg49wevoSKg4NX%2FqpNZaIGi%2BZl9U2KT8ehPFs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a3bb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12490&min_rtt=573&rtt_var=15429&sent=13605&recv=707&lost=143&retrans=162&sent_bytes=15463553&recv_bytes=164332&delivery_rate=1721338&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12291&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash94569d93bc7d5ca5cfdbc04bde57dc0c 680edbd29fefb4bd52f8c8088ac35787e24e9efc accdf466648c38509aa3f11381147a664aa0657d0b5d1b64370af86090e2a318
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dzMfHh9MwJ4OW4eYk87P%2B9FyibfSezwNcEQW5rapADvrnOya8m0G6vH3afu%2Ffh3ob4PLBB%2FYwjbFFljdmKuz6F8XkVHhuSPWn0JEzecwiheZxSsrBqj%2FBT9t7zfonAr4IP%2BW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c7bfddb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4409&min_rtt=573&rtt_var=4390&sent=13008&recv=685&lost=110&retrans=128&sent_bytes=14769941&recv_bytes=157313&delivery_rate=1132&cwnd=178920&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12030&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7aEMFjtkR%2BAr3znfakbo8%2FWIrAZHDdq3tp6SvW7%2F6jUpwufcUIn3%2FzumXa6e1W45fF2sGUoy3Zy8vXeJvoirBhqEhj7pMQZwNgizvxDb9aEZRjcXxsrySJh6C7VdZVptr1Xg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a42b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=12490&min_rtt=573&rtt_var=15429&sent=13595&recv=707&lost=143&retrans=129&sent_bytes=15451553&recv_bytes=164332&delivery_rate=1721338&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12290&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ie0UlA%2FQ1zc0exFLIa3umb71DL58OqiKFznkuy3zRFjBPkOaI%2FHiNamdJ9G%2FGWDhD90BBkABn08MzqHVVIjl1mkRDw5XTZl9F%2BhhMePgkdWiJnJruMMyP7GBgpSJC3ibDFUK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a3fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11087&min_rtt=573&rtt_var=14376&sent=13644&recv=708&lost=143&retrans=162&sent_bytes=15506475&recv_bytes=164377&delivery_rate=2020138&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12293&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MhPVWTOWP%2FOOdDzwz6gGmxuYE%2FpihbDGaav%2F3y6X6%2BZj0cSozG7AhDVAybG%2FJkwUrtkJKGAIGZkzl6w2em2oOcGaSpiQyfnHe2w0R5%2B1aEdZeX4BtgYuiX633mWpzbS6mMwa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a4db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11087&min_rtt=573&rtt_var=14376&sent=13646&recv=708&lost=143&retrans=162&sent_bytes=15508429&recv_bytes=164377&delivery_rate=2020138&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12294&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G4ldpJppdOdghOFa1IgY8X%2BFu38FS3JDxn4kAeMesJ2OuFEIr%2BuDy9YYyRHqde0yCUL%2BQEIBoxkCoGnzznLXXjKET4nhcMa3p6kxazhLGn8dopUxdCTxKDyjhHwAPaW0vwMg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a48b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11087&min_rtt=573&rtt_var=14376&sent=13649&recv=708&lost=143&retrans=162&sent_bytes=15511009&recv_bytes=164377&delivery_rate=2020138&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12295&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OQCHoIVNv0OYkvKjzdt6trGDmBJeicu1kiZScuLilyxKErjYglwtQ8NNyiWrGPqMjqI%2B%2BVEC%2Fv6evD2XkYa7hdn9gfOPAdhQYQR5c3%2B7Na7WmgdY6GV2r3UaMUxU0%2FoROx6o"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99c95a46b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=11087&min_rtt=573&rtt_var=14376&sent=13651&recv=708&lost=143&retrans=162&sent_bytes=15513033&recv_bytes=164377&delivery_rate=2020138&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12297&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 | 142.250.74.106 | 200 OK | 119 kB |
URL fonts.googleapis.com/css?family=Source+Sans+Pro:300,400,900 IP 142.250.74.106:0
File typegzip compressed data, max compression Size119 kB (118687 bytes) Hash4371a11577dcf38712b95576f08928c5 7cce89afd6c2f7856bfd12868dc8dc201a1df98c ab9a947362e73b6d2bae137bce3dd0a2d6c94eaf71a32ba701fed3a53887dfa0
GET /css?family=Source+Sans+Pro:300,400,900 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Dec 2024 07:42:52 GMT
date: Tue, 10 Dec 2024 07:42:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347157
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293548
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337281
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218546
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335970
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290745
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/42993 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash6fef8489c70d7441462f1710e0796167 0622597234105d45424e38a10bfa3ffce2be3054 d938751ae750d8aeecb19069957739ae1b635a5d1ea2a5897947f2c00d7e5fe6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /42993 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:52 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|
| cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js | 104.17.24.14 | 200 OK | 6.5 kB |
URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js IP 104.17.24.14:0
File typeJavaScript source, ASCII text, with very long lines (20322) Hash6b08ddc901000d51fa1f06a35518f302 bafe987c18cbe0587de3e6360e7da40a2885614b 02835066969199e9924f1332f7172a5d7e552f023a20c3d8ba03bb6c51ce5be5
GET /ajax/libs/popper.js/1.14.0/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 6458
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-500f"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1392210
expires: Sun, 30 Nov 2025 07:42:52 GMT
accept-ranges: bytes
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T3Zq9jWV4UvRHepz9dTWhL%2BrVGRvV%2FQSle5%2FK53DNg5OEVBjYTz3yh26kQcuFLuNpnIzUqoq1euAsgyRjei8Pb7hhLfoAmGYXIxfJbFX9e9JSCbiZFJ1U8tEB6YKGcwb0IramjmR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8efb99cbe9f656b5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js | 142.250.74.106 | 200 OK | 30 kB |
URL ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js IP 142.250.74.106:0
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30399
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 10 Dec 2024 06:16:59 GMT
expires: Wed, 10 Dec 2025 06:16:59 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 5153
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| code.jquery.com/jquery-3.1.0.min.js | 151.101.66.137 | 200 OK | 30 kB |
URL code.jquery.com/jquery-3.1.0.min.js IP 151.101.66.137:0
File typeJavaScript source, ASCII text, with very long lines (32014) Hash05e51b1db558320f1939f9789ccf5c8f c72c1735b4d903d90dd51225ebefb8c74ebbc51f 702b9e051e82b32038ffdb33a4f7eb5f7b38f4cf6f514e4182d8898f4eb0b7fb
GET /jquery-3.1.0.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1514f"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 10 Dec 2024 07:42:52 GMT
age: 4151525
x-served-by: cache-lga21948-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 99, 5440
x-timer: S1733816573.800229,VS0,VE0
vary: Accept-Encoding
content-length: 30019
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css | 104.18.10.207 | 200 OK | 164 kB |
URL maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css IP 104.18.10.207:0
File typeASCII text, with very long lines (65371) Size164 kB (163581 bytes) Hashec3bb52a00e176a7181d454dffaea219 6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68 f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c
GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 06/09/2024 14:16:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: c5fc372fc6ee619cc7691921f1663d23
cdn-cache: HIT
cf-cache-status: HIT
age: 33
priority: u=2,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99cbec66b51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/free.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/free.png IP 188.114.96.1:0
File typePNG image data, 64 x 68, 8-bit/color RGBA, non-interlaced Hashffc46d0a260b965b82fe6bae52345b29 7e2ad61e00aff93b3c5fc9e4c0639d9d2d36600c e43ec096f8a53418bac5602c336b02e8ef394586fe059cc2e512b50dd02e94d1
GET /assets/images/free.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1190
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4a6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgEu8kKaI%2B5XzGJm8fb7irzxI5cbLjWCgyXz8P2RDHdGN6V9Ep6ME9V9%2FssNm7q43xmbXzrvOaV7Sv2a7mEUrpkhRPgRLdUiezuqDPBiN5PWrMmbIwLFyClRSCQ%2F%2BYifiqkS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ccf85eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2962&min_rtt=573&rtt_var=3334&sent=13953&recv=732&lost=143&retrans=162&sent_bytes=15849590&recv_bytes=167642&delivery_rate=980&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12865&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/styles/arrow.css?v1 | 188.114.96.1 | 200 OK | 5.8 kB |
URL 35.pexeburay.com/assets/styles/arrow.css?v1 IP 188.114.96.1:0
File typegzip compressed data, from Unix Hash8aa9808e7fcef419b23385367797f0bb 6f41eded6cea8cb68cc1488a0dfc332acb7b5ae7 562cfbd1a884dad1ddbaf30e76018a349c449c3f5c24d23c903a12127dc575cd
GET /assets/styles/arrow.css?v1 HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-1a14"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aOkIFbp1Nvd52A9wOGG4aSnNtWlzseg4%2BSAAQDQPOn%2FzKKEaKYa42SOXiiILyHm7KPrBJfJ7COsVAQz8YIL9IRrlQ1fdmwFCTNTerXeoRX9CMjHCFYaQ1Zr7i0mKvcLstHT9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cbdf14b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4773&min_rtt=573&rtt_var=5028&sent=13796&recv=724&lost=143&retrans=162&sent_bytes=15670954&recv_bytes=166486&delivery_rate=1173&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12694&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/desk.png | 188.114.96.1 | 200 OK | 1.5 kB |
URL 35.pexeburay.com/assets/images/desk.png IP 188.114.96.1:0
File typePNG image data, 72 x 65, 8-bit/color RGBA, non-interlaced Hash82e571ecb48c2816ee6248e3abef0f16 d9b636cf40d9934e0cc8b2ea5ced154c2862b63a f873af87cc1331535044bb1d0b1725e8317476ec1b76198ffc6e193b793e3339
GET /assets/images/desk.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: image/png
content-length: 1459
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-5b3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ykblkmWYXDy%2BgOxfuQdEsCiqFFrO3wd%2BKi4r6mHvoDleUrtNjoPYgTYeYN%2Bjw3tj9VC4s8gz%2FArzEZAjYzesWfeNm6m964ilbC%2BfPR3QKNRnYxymeyHxlA%2BS83hGIqDGVxE8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cd1890b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3150&min_rtt=573&rtt_var=2746&sent=13965&recv=739&lost=143&retrans=162&sent_bytes=15855390&recv_bytes=169044&delivery_rate=3430&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12885&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/css/main.css | 188.114.96.1 | 200 OK | 30 kB |
URL 35.pexeburay.com/assets/css/main.css IP 188.114.96.1:0
File typegzip compressed data, from Unix Hashd03f6401c381d631999459054491b2aa cbccab4f10670290e009a16c5ef8786de6a64e12 e90440115766233b7da220fd86f8ba4418a071dbbc750fed61ebdc5668f5ad8e
GET /assets/css/main.css HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: text/css
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: W/"636262bc-22ddb"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 33
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ruOgaY%2FgiTa3SdjMa7JzK%2B5gc8ovTUWlE5DtWAJcJ5YLDRcjvo0%2FuuZARKZicJk6%2FyuX3gxD1aFcq4HXNGY1dK4V0e2hgatSKHUe3MZc4QihbCIRjukhHfusy5D8lkixm4ae"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cbef1db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4773&min_rtt=573&rtt_var=5028&sent=13799&recv=724&lost=143&retrans=162&sent_bytes=15673864&recv_bytes=166486&delivery_rate=1173&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12696&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js | 104.18.10.207 | 200 OK | 149 kB |
URL stackpath.bootstrapcdn.com/bootstrap/4.1.0/js/bootstrap.min.js IP 104.18.10.207:0
File typeJavaScript source, ASCII text, with very long lines (50395) Size149 kB (149074 bytes) Hashce6e785579ae4cb555c9de311d1b9271 5ef2c15b47d7290698c737676ba9c3056b45f2e8 0bca10549df770ab6790046799e5a9e920c286453ebbb2afb0d3055339245339
GET /bootstrap/4.1.0/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:52 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: "ce6e785579ae4cb555c9de311d1b9271"
last-modified: Mon, 25 Jan 2021 22:04:05 GMT
cdn-cachedat: 11/11/2024 14:11:00
cdn-proxyver: 1.06
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1077
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requesttime: 0
cdn-requestid: 6bece5303391bcde5165d5ee520fa9fc
cdn-cache: HIT
cf-cache-status: HIT
age: 33
priority: u=3,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8efb99cbfc7bb51b-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
|
|
| 35.pexeburay.com/assets/images/step1-phone.png | 188.114.96.1 | 200 OK | 48 kB |
URL 35.pexeburay.com/assets/images/step1-phone.png IP 188.114.96.1:0
File typePNG image data, 171 x 349, 8-bit/color RGBA, non-interlaced Hash4f5069b203403aa659262e75b98675e0 621a5481fb91150b91f4f18fafb8d52a3d546f20 10025632c6f7e8e62b9bfc9b4a32aae3407122d1001786344d3ee312c99f4329
GET /assets/images/step1-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 48399
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-bd0f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g5R3IlHWbMpg6uBv0wc7u1DqpYdRfiQfDXpFUXwEdDR4OyKqwhtkByRwmWohfCW7ho7mNQtFKxwrPzbRsQ225edI2gx4sJoh6Txd8siyZHhoGIcwEkg4q56iTpbCybnATnxR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cd792ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5201&min_rtt=573&rtt_var=6376&sent=14094&recv=746&lost=143&retrans=163&sent_bytes=16001102&recv_bytes=170464&delivery_rate=2993980&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12953&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-phone.png | 188.114.96.1 | 200 OK | 70 kB |
URL 35.pexeburay.com/assets/images/step2-phone.png IP 188.114.96.1:0
File typePNG image data, 184 x 370, 8-bit/color RGBA, non-interlaced Hash0b3b58518b6d767925b13ac025f8b283 20583d7e05f8907a828c9811a31ddae27461646f 0b871122ad03fc90a59cd52f7250404e2ef72518bdf02d927ff5785427b2e9fc
GET /assets/images/step2-phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 70228
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-11254"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LxV%2BdyxaAuzzKScdlwiPIfW%2B7yrThiEFMs8fp%2Br3xfU%2FwT9x%2BJa4BzFR8OM%2Bh4dnEZO3PtYKolLqoVlKQAUjw6y4tvcCDiWW4PZZLXQQ6xI3LS0ZGrPh4YsP5rWTHszicYzK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cd792eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5201&min_rtt=573&rtt_var=6376&sent=14104&recv=746&lost=143&retrans=163&sent_bytes=16013102&recv_bytes=170464&delivery_rate=2993980&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12953&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/step2-desctop.png | 188.114.96.1 | 200 OK | 201 kB |
URL 35.pexeburay.com/assets/images/step2-desctop.png IP 188.114.96.1:0
File typePNG image data, 579 x 360, 8-bit/color RGBA, non-interlaced Size201 kB (200767 bytes) Hash99076f358d9fea4f29adef6c3bb741fa eb50acc9bcf731715101e838c8fea279409d50f5 31fe8af2ec08e0515f66da4a9a949305a0d256af3308f37dd2b9920a2b35e011
GET /assets/images/step2-desctop.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 200767
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3103f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FCPBy0i5FdGghZT9%2FOC0wkN5NmtPHBiflHwwGK2%2FEZChnuGc2MEp1OOG1AVlwGb6wv%2BgzhbbZJFQYSYn6b3DWtNg8oSOrD%2Be2mIPWclNJAd9%2BYW0oezdOh7jKi4V8H20xFac"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cd792db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5201&min_rtt=573&rtt_var=6376&sent=14197&recv=747&lost=143&retrans=163&sent_bytes=16124156&recv_bytes=170780&delivery_rate=2993980&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12957&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/chrome.png | 188.114.96.1 | 200 OK | 4.9 kB |
URL 35.pexeburay.com/assets/images/chrome.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hashca355e6175e56464789197d4d6e32fa6 4754525667211a3ca47f52e1b09ce8b6a03676f5 1a81996384eb45ff3b38d89ce30913b613fed54929e6ff776a5156f3e5b2358c
GET /assets/images/chrome.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 4885
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1315"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qsE9pp%2Bk%2FqsaYz0Xfj%2BXBC%2BO0FLbu6FGhsWcmNM19yKrPLP5d8gYspjh8lSiJC2xqJaqMPrpRtkYhzwDKa8ZSdS%2Bd4SlnUYJ9GhmY04fzyzQLInhpvGho6O3FmDEJkQ4vAuY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cd893db4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5201&min_rtt=573&rtt_var=6376&sent=14253&recv=747&lost=143&retrans=163&sent_bytes=16190917&recv_bytes=170780&delivery_rate=2993980&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12962&x=1", cfExtPri, cfHdrFlush;dur=29
|
|
| 35.pexeburay.com/assets/images/firefox.png | 188.114.96.1 | 200 OK | 5.9 kB |
URL 35.pexeburay.com/assets/images/firefox.png IP 188.114.96.1:0
File typePNG image data, 69 x 65, 8-bit/color RGBA, non-interlaced Hashc42385cdd6e98752cd109fa26362e4ea 053eaf315ab8f47b0f0ff98e5312764d9e27f0f9 4d40899423ad62f85f8fd4af029518e8fa9e92f703755b1a0b613184fea53a90
GET /assets/images/firefox.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 5945
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1739"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnJPaJgD%2F1ObcPdC4%2FlFKcMM2BhXnqxfl90Kt60fEs9q5503CQtyvd7c0%2Br0LPHxm1JFleNOJ3tnlvaD%2FuWWN7727bc4xjrWLeo04t04dw5%2FY4ZlWwD48fVA%2FSe%2Bi6YHSOfD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cd893eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5201&min_rtt=573&rtt_var=6376&sent=14253&recv=747&lost=143&retrans=163&sent_bytes=16190917&recv_bytes=170780&delivery_rate=2993980&cwnd=189840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=12962&x=1", cfExtPri, cfHdrFlush;dur=29
|
|
| 35.pexeburay.com/assets/images/opera.png | 188.114.96.1 | 200 OK | 4.2 kB |
URL 35.pexeburay.com/assets/images/opera.png IP 188.114.96.1:0
File typePNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced Hash7926db789f7f346f97b770f39541e7c7 a619a51570ed52c4cb6159aeddb711a95e6334fe 7ad0e450617da43151367511c6e0736eee209dd8d12c6a2e6dac8c009786bee6
GET /assets/images/opera.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 4181
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1055"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GXGN%2FaLqShQVZrC6SzPp3sEfz5Wy5hfgRXQqmdr%2Bab16Qfkw3pLMK4n0z1i2%2FqrLYbE4YltjfBOYfOV9P0KEm%2F4Tn0TCENO6vvCFH%2Bnzvx9hfTcjHgEdcyDJmtHIwwQuId33"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd98fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14384&recv=753&lost=143&retrans=163&sent_bytes=16343405&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13012&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| GET 35.pexeburay.com/assets/images/by.png | 188.114.96.1 | 200 OK | 2.0 kB |
URL GET HTTP/335.pexeburay.com/assets/images/by.png IP 188.114.96.1:443
Requested byhttps://35.pexeburay.com/
File typePNG image data, 67 x 65, 8-bit/color RGBA, non-interlaced Hash6c077fcda7443f808bfe1a507239cca9 97d2c0ea8ab630d71b57382104b2094872cad53a 09f1e28b4bad9daa8a889eafe60fa64200c0e37f20f1e7e7f0e277fd6dc70d9f
GET /assets/images/by.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 2022
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-7e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ctl3rrnnhe2IFgcZkG9tQ3zhAzbvMRbxlqpQ5akUHa0YUj2qcQ19O2DKgN6zQRp%2BnRqFf7L07T%2FfOWV6GxDxWXs9AAfYRBr9cxtN9lYhGbmIEOVEzX0xCJzc%2F9a3lpJmNsEL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd995b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14389&recv=753&lost=143&retrans=163&sent_bytes=16348415&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13012&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/percent.png | 188.114.96.1 | 200 OK | 3.6 kB |
URL 35.pexeburay.com/assets/images/percent.png IP 188.114.96.1:0
File typePNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced Hash174236fb5aae3e07c5256d0da0140104 0ea872966291bd0355301965576b8f73a311b72e caa6f7055758210d74d99881bae258dcfd724991acf55503979dea8acdea68c1
GET /assets/images/percent.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 3629
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-e2d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hfrVJjtUtopAPC1TiTt6o%2FeDQgjeDkhVscUqBSw2kcS4D%2B5msBjH6sXuGEEZXRVJoukcHl3Ly93d%2Bcd31ArHokagRVzSxkxZdgPkuLCQN9%2BcGNhlM0R2hF6Wm%2BYGcEz5LPB2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd991b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14392&recv=753&lost=143&retrans=163&sent_bytes=16351205&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13013&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/yandex.png | 188.114.96.1 | 200 OK | 7.8 kB |
URL 35.pexeburay.com/assets/images/yandex.png IP 188.114.96.1:0
File typePNG image data, 70 x 70, 8-bit/color RGBA, non-interlaced Hash02c02ca7487dd88f5d3ab2912cbe1417 fd118c3a2ac3279c7b2bac7d0a7f4ccc63702086 f616f538dcfbdcdb559796577d81b729bcdd70631a3135d7dd951c64a464078b
GET /assets/images/yandex.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 7804
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1e7c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NyTqgJL3PJopvKzivNVv7oI%2F1jbW3fpOjLVJpplK4O4XOyZDjIzjo1zs58bWyNa0QEf9wRP9bkJduT%2Feu8YCVRkGIbRnrnTY3RDvy53dyUP80l1c9cRyh0Ab0XYn6hRyCWBV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd990b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14396&recv=753&lost=143&retrans=163&sent_bytes=16355631&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13013&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/blank.png | 188.114.96.1 | 200 OK | 967 B |
URL 35.pexeburay.com/assets/images/blank.png IP 188.114.96.1:0
File typePNG image data, 62 x 62, 8-bit/color RGBA, non-interlaced Hashb47e4636ee4b11800af715b92faf3a87 9d2eb9174f74ac550817f4eb70545e27c156d90e 18a5dec1797dd8dfd98ea838277b27e0fea53d82ce5753d014b73d5a34c5cce4
GET /assets/images/blank.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 967
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-3c7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QXTypoeplul23HP%2FFCnekUB%2BRPx6Q%2FkOURmZVvPnKIUxl06IW7ZiNmHi%2FlSAJtQCMU%2FbNa48vmyDAkWKSinWTa9y8ScX35Xt%2Fs%2BSgMONXrMY%2F0lAacva4Qer8l%2B1B05GrSsZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd993b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14404&recv=753&lost=143&retrans=163&sent_bytes=16364342&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13013&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/factors.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/factors.png IP 188.114.96.1:0
File typePNG image data, 66 x 54, 8-bit/color RGBA, non-interlaced Hash1f4b1b634ea6c1c5d6d11d81d7bda98e 8858bf74f87beab9a34f703851ec6b8b8d670ef3 b47f1918a6a67c7c1fae260f50fe0d5dc0c078948929ca6fdc0576162c58af94
GET /assets/images/factors.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 1808
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-710"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQnk1Bz6YNwbNsnxRy18MGfmAwFLpYqiHDkRd%2FHyc18sNPcpZW%2BRardomvo7VUIVD9XBDTYcEJBMvzAnr6rTknxHa%2BHFHI%2Fw2TgzlU7yNubnVw6D8yBK8V7CH7E7OZoYpM%2BI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd99eb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14406&recv=753&lost=143&retrans=163&sent_bytes=16366058&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13014&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money.png | 188.114.96.1 | 200 OK | 1.8 kB |
URL 35.pexeburay.com/assets/images/money.png IP 188.114.96.1:0
File typePNG image data, 70 x 72, 8-bit/color RGBA, non-interlaced Hash93bb4e0e40b2717a4be6ee0ff6521dd8 3232fc7a2a95a6c74d1822f84f821282f70843be ef0925d7955dd97dd979a6e2c8e1bc91a610b5d7339ab75cb7e784aa11c08ca2
GET /assets/images/money.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 1799
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-707"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hnf8eSuhIwn3DaJWjRkG6%2BHYFf%2FmLOGIOY2W1PPsLAy0W%2Bt6vCKf9u4lkICdz0A2RaOa2buOkyMlrT0aUFRHm2jGOz82QAVIFYXg5YXLLHfDHUEpJD2UU72V5zKMmLG8z73T"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd997b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14409&recv=753&lost=143&retrans=163&sent_bytes=16368637&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13014&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/money2.png | 188.114.96.1 | 200 OK | 4.1 kB |
URL 35.pexeburay.com/assets/images/money2.png IP 188.114.96.1:0
File typePNG image data, 73 x 71, 8-bit/color RGBA, non-interlaced Hasha2011cdc26f3dcdac89e9e4794799b0f c2f07e2304fa8ba1e4f8deeee5cc7aa24bee296c 0c4af66b25e16286fb743ebd4579901ac18c1a3fcbf2558415abeeec8686dd24
GET /assets/images/money2.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 4109
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-100d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cN9UKZooivUf3SGXjVZk3sJpII9tKbygSQr7po8cLJRyv%2FZ2Vn0jJsJ6BqotmjcYpX1UfQJ5prbdWmq5oO%2BCgR1xKmv7K4sk%2F1vOqg%2BslurKP7k%2BdumvH88LtgNdgcDOQY16"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd99ab4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14412&recv=753&lost=143&retrans=163&sent_bytes=16371205&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13015&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/phone.png | 188.114.96.1 | 200 OK | 1.2 kB |
URL 35.pexeburay.com/assets/images/phone.png IP 188.114.96.1:0
File typePNG image data, 49 x 64, 8-bit/color RGBA, non-interlaced Hash1665329216720182fdda09ccdc56f0dd 7a4c75ad95bdc5ae16e075784fc31c0e6e1a5c2a 32b984d5b404eca6b70a91ae64e22dc7d02cca4dd8011236cbf2ad589ff471f0
GET /assets/images/phone.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 1211
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-4bb"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L91EhttF05ewuwdukOpu5tqLclV2PEp8BtSwygkNIPiuWTbPrrBGGGFoisZuMWqhiq0Ge%2B1FCku4bgqNHH0MOApTmB27VrqxcywX1uAYLXRsrgFc7Kv2hgtc5cm3BP2auzUZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd996b4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6324&min_rtt=573&rtt_var=5337&sent=14417&recv=753&lost=143&retrans=163&sent_bytes=16376140&recv_bytes=173814&delivery_rate=2883078&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13016&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/night.png | 188.114.96.1 | 200 OK | 1.3 kB |
URL 35.pexeburay.com/assets/images/night.png IP 188.114.96.1:0
File typePNG image data, 36 x 60, 8-bit/color RGBA, non-interlaced Hash03f3ade42c0222a27a8c39a2160c9128 a72933e2c7b64dca30e510f8e548ccba811dd2e9 fed26b5026b7fd43a5d8e97b6ae0fadb6ce398605a2042bc203d8e1eff8d48a8
GET /assets/images/night.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 1283
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-503"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pp%2FvKmW8Ux7NslLL83sNj4z3mj924QJSDo8qYzKENXe9F1U8%2BJnLItl%2Fqe%2FYuiH9JXi4nXV%2FrrPYhHk8teqrrCwGG%2BF1DKuOsLEWcHJIX0JUAO5s1lION97TVo%2F0vGwC4PXF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99cdd99cb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=5714&min_rtt=573&rtt_var=5223&sent=14420&recv=754&lost=143&retrans=163&sent_bytes=16378112&recv_bytes=173860&delivery_rate=2713435&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13016&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| 35.pexeburay.com/assets/images/home-header-bg.png | 188.114.96.1 | 200 OK | 118 kB |
URL 35.pexeburay.com/assets/images/home-header-bg.png IP 188.114.96.1:0
File typePNG image data, 1920 x 1052, 8-bit/color RGBA, non-interlaced Size118 kB (117934 bytes) Hash192a5c4c38c4668977b4ab6e475d8e2b 9e4b5e9ae9a39ea67bce6aa786d14ddd09d428b4 a3af5ceaeb32f7ccd4d31b8818802a077ecba3a6edd51ce003ce3eaaf168290f
GET /assets/images/home-header-bg.png HTTP/1.1
Host: 35.pexeburay.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://35.pexeburay.com/assets/css/main.css
Cookie: pmvid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 10 Dec 2024 07:42:53 GMT
content-type: image/png
content-length: 117934
last-modified: Wed, 02 Nov 2022 12:29:48 GMT
etag: "636262bc-1ccae"
cache-control: max-age=14400
cf-cache-status: HIT
age: 34
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Z32CzdwDNXy8%2BNgS1%2BvmD5cQ5cR%2BnMnAXhSZ3eFGyOwkHyCoz49EObgpRNzqoEGxrqpFA%2B7jpvoSZOdjMrbqeV5wyb7kfhrUgHuZcP64DNjblBukNtkIH6cVvwuDcedqtM9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8efb99ce4a2fb4ff-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=6381&min_rtt=573&rtt_var=4226&sent=14424&recv=756&lost=143&retrans=163&sent_bytes=16380193&recv_bytes=174247&delivery_rate=968&cwnd=195840&unsent_bytes=0&cid=a4bcd5101b7883b0&ts=13083&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14780, version 1.0 Hash8dae809192c44690275a3624133293e7 969c98c4d7eb00386ebbd61a63288972d138ecb8 c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14780
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 07:16:55 GMT
expires: Sat, 06 Dec 2025 07:16:55 GMT
cache-control: public, max-age=31536000
age: 347158
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 | 142.250.74.131 | 200 OK | 14 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14188, version 1.0 Hasheb0aa55d4737c1ad19e5d9e5d3f0efbf f909e7fff1d5be6f308912d5c407ae618ba53d9c aee584e3d58344a41b190bb7b6e550f98ad3bb8e28fbc7ea6ddca22f0ef97183
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwlxdu.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14188
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:10:24 GMT
expires: Sat, 06 Dec 2025 22:10:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:03 GMT
content-type: font/woff2
age: 293549
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 | 142.250.74.131 | 200 OK | 15 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 14892, version 1.0 Hash9ec6deaf6bada919e20b98f9f7b718b1 501d36403ad8205e4644532600019ecb10f5cb0a 7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14892
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:01:31 GMT
expires: Sat, 06 Dec 2025 10:01:31 GMT
cache-control: public, max-age=31536000
age: 337282
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 | 142.250.74.131 | 200 OK | 8.0 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7972, version 1.0 Hash305b1ef8bbeccc8358118e470dea8bf7 696b6944e29938cdd6e977f3a25c045a0b5b880b c73c9d2639ee4ecc555040bb05de136847ae936b885925b56972549ccfe16a97
GET /s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7972
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 07 Dec 2024 19:00:26 GMT
expires: Sun, 07 Dec 2025 19:00:26 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
age: 218547
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.9 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7912, version 1.0 Hash0867eb328596d70181b676a6416a36ad 3252e70b533ccf7b70448cee1bc0e36ae6c26185 d670592315205835c6c155eaa76a7bc61e48ef962d390b537be52ae1f7b62dde
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7912
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 10:23:22 GMT
expires: Sat, 06 Dec 2025 10:23:22 GMT
cache-control: public, max-age=31536000
age: 335971
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 | 142.250.74.131 | 200 OK | 7.6 kB |
URL fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 IP 142.250.74.131:0
File typeWeb Open Font Format (Version 2), TrueType, length 7620, version 1.0 Hashf05a8e0c459f903d8d20bdc6bcda72b6 b74f0efee700194ca582b5faac31790d9d52a9b8 87dbebc8f6f6e97190ff9ca7c2273ea6371d3b28234f266c538e0e3e67894a89
GET /s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3iu4nwkxduz8A.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Dec 2024 22:57:07 GMT
expires: Sat, 06 Dec 2025 22:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Jun 2023 22:53:02 GMT
content-type: font/woff2
age: 290746
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| cesupufius.com/19863 | 88.208.46.23 | 200 OK | 3.1 kB |
IP 88.208.46.23:0
ASN#39572 DataWeb Global Group B.V.
Hash37c09a35460b1709f3fe60f143752ebf 55a9540c491e09200db7bb388849a556217ecb5d 26854bd6e0d7063b5d7afd4efb2c323d097f8b05e04613c0f52e40158122a6dc
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
POST /19863 HTTP/1.1
Host: cesupufius.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://35.pexeburay.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 215
Origin: https://35.pexeburay.com
DNT: 1
Connection: keep-alive
Cookie: userid=e7cc5e2e-0bd0-4fb6-9daf-0d956a35dde4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 07:42:53 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: https://35.pexeburay.com
Access-Control-Allow-Credentials: true
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Accept-CH: Sec-CH-UA, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
|
|