urlquery - report: bguf58.com/

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
firefox.settings.services.mozilla.com (2)	867	2020-05-27 20:08:30 UTC	2022-10-05 14:02:21 UTC	54.230.111.7
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-10-05 06:03:19 UTC	54.230.111.7
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-10-05 05:01:05 UTC	34.117.237.239
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-10-05 16:07:29 UTC	93.184.220.29
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-10-05 09:14:56 UTC	54.69.181.45
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-10-05 12:33:02 UTC	34.120.237.76
bguf58.com (14)	0	2022-09-22 06:51:14 UTC	2022-10-05 14:05:33 UTC	67.198.248.139	Unknown ranking
r3.o.lencr.org (7)	344	2020-12-02 08:52:13 UTC	2022-10-05 07:13:38 UTC	23.36.77.32

Scan Date	Severity	Indicator	Comment
2022-10-05	2	bguf58.com/	Phishing
2022-10-05	2	bguf58.com/	Phishing
2022-10-05	2	bguf58.com/static_new/js/common.js	Phishing
2022-10-05	2	bguf58.com/static_new/js/jquery.min.js	Phishing

Date	UQ / IDS / BL	URL	IP
2022-10-05 22:00:24 +0000	0 - 0 - 4	bguf58.com/	67.198.248.139
2022-10-04 14:01:11 +0000	0 - 0 - 5	kffg45.com/	67.198.248.139
2022-10-04 13:47:27 +0000	0 - 0 - 6	bguf58.com/	67.198.248.139
2022-10-04 04:50:26 +0000	0 - 0 - 4	uuem72.com/	67.198.248.139

Date	UQ / IDS / BL	URL	IP
2023-03-21 12:05:15 +0000	0 - 1 - 1	assure.ameli.fr.magicreator.com/site/68d3a0a0 (...)	74.119.238.38
2023-03-21 11:26:36 +0000	0 - 1 - 1	assure.ameli.fr.magicreator.com/site/b42d58f0 (...)	74.119.238.38
2023-03-21 07:55:48 +0000	0 - 2 - 3	qmsled.com/stamped.scr	162.215.255.41
2023-03-21 04:21:53 +0000	0 - 2 - 3	qmsled.com/stamped.scr	162.215.255.41
2023-03-21 00:47:40 +0000	0 - 2 - 3	qmsled.com/stamped.scr	162.215.255.41

Date	UQ / IDS / BL	URL	IP
2022-10-05 22:00:24 +0000	0 - 0 - 4	bguf58.com/	67.198.248.139
2022-10-04 13:47:27 +0000	0 - 0 - 6	bguf58.com/	67.198.248.139

Date	UQ / IDS / BL	URL	IP
2022-10-04 14:01:11 +0000	0 - 0 - 5	kffg45.com/	67.198.248.139
2022-10-04 13:47:27 +0000	0 - 0 - 6	bguf58.com/	67.198.248.139
2022-10-04 04:50:26 +0000	0 - 0 - 4	uuem72.com/	67.198.248.139
2022-10-16 03:43:16 +0000	0 - 0 - 6	3636yfxu.com/	45.34.16.123

Request	Response
GET / HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: bguf58.com/ FQDN: bguf58.com IP: 67.198.248.139 HASH: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a 67.198.248.139 HTTP/1.1 301 Moved Permanently Content-Type: text/html Server: nginx Date: Wed, 05 Oct 2022 22:00:14 GMT Content-Length: 162 Connection: keep-alive Location: https://bguf58.com/ Strict-Transport-Security: max-age=31536000 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 162 Md5: 4f8e702cc244ec5d4de32740c0ecbd97 Sha1: 3adb1f02d5b6054de0046e367c1d687b6cdf7aff Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a Alerts: Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: 6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4" Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2392 Expires: Wed, 05 Oct 2022 22:40:06 GMT Date: Wed, 05 Oct 2022 22:00:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 282f6e1328452c1cb41f6a6272fff757 Sha1: 20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262 Sha256: 6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 54.230.111.7 HASH: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551 54.230.111.7 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert Cache-Control: max-age=259200 Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Wed, 05 Oct 2022 15:47:18 GMT X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: _KTw1zD8Ku6SVepNclf_HLOv4njkrDb2lrnZIpHOzwWkvIQuAMNNIg== Age: 22376 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 2d12f67fe57a87e7366b662d153a5582 Sha1: d7b02d81cc74f24a251d9363e0f4b0a149264ec1 Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 54.230.111.7 HASH: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78 54.230.111.7 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 last-modified: Fri, 30 Sep 2022 18:50:55 GMT content-disposition: attachment accept-ranges: bytes server: AmazonS3 date: Wed, 05 Oct 2022 04:02:33 GMT etag: "67d5a988edcda47bc3b3b3f65d32b4b6" x-cache: Hit from cloudfront via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: OQaa80YAWpcuD8BhT7IQs0-sRvODxFfslVleKsnShC_msaNajvDAZw== age: 64662 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 67d5a988edcda47bc3b3b3f65d32b4b6 Sha1: d4f0e0da8b3690cc7da925026d3414b68c7d954f Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Wed, 05 Oct 2022 22:00:14 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: e0ae31a3b19092ddc655c948e02798e6991c2b0ab44f5440d671df2896d18f88 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "E0AE31A3B19092DDC655C948E02798E6991C2B0AB44F5440D671DF2896D18F88" Last-Modified: Wed, 05 Oct 2022 11:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=21600 Expires: Thu, 06 Oct 2022 04:00:14 GMT Date: Wed, 05 Oct 2022 22:00:14 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 317ede50a4b277666723a5e6138f8c09 Sha1: cb1cfda25d3492b873a5a1dbbb41ff3dee4b5c0e Sha256: e0ae31a3b19092ddc655c948e02798e6991c2b0ab44f5440d671df2896d18f88
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 54.230.111.7 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 54.230.111.7 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Pragma, Content-Length, Backoff, Last-Modified, Cache-Control, Content-Type, Retry-After, ETag, Expires, Alert Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT X-Content-Type-Options: nosniff Date: Wed, 05 Oct 2022 21:55:50 GMT Cache-Control: max-age=3600, max-age=3600 Expires: Wed, 05 Oct 2022 21:49:19 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-P1 X-Amz-Cf-Id: -U-JZvcPdn8nf5Zm-MS6UC0Un7wgS1ZMpFANsFu_yZz0laE1Nv2FTA== Age: 1841 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2692 Cache-Control: 'max-age=158059' Date: Wed, 05 Oct 2022 22:00:15 GMT Last-Modified: Wed, 05 Oct 2022 21:15:23 GMT Server: ECS (ska/F705) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: 1561c6be7c89d1357a80d12de47b6e74 Sha1: 9a705277922ecca583c867af58b3efce099f83bd Sha256: e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: buUjx7FaeYi0uePqvcsp7g== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 54.69.181.45 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 54.69.181.45 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: rt+NzZVQcQDr3e62HlM/Uwe6Ww0= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static_new6/img/xxlogo.png HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/img/xxlogo.png FQDN: bguf58.com IP: 67.198.248.139 HASH: 63bdbb512b2c2a13ad979c99a92cb90b872464549c937699c4f252952efead89 67.198.248.139 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT content-length: 24228 last-modified: Thu, 24 Feb 2022 06:43:16 GMT etag: "62172904-5ea4" expires: Fri, 04 Nov 2022 22:00:15 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 216 x 216, 8-bit/color RGBA, non-interlaced\012- data Size: 24228 Md5: 0ce6f757c006f5cd09e2da802faa0dbf Sha1: 3a953aee4d015bcc6557e6fcaddfb500e689ad80 Sha256: 63bdbb512b2c2a13ad979c99a92cb90b872464549c937699c4f252952efead89
GET /static_new6/img/name.png HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/img/name.png FQDN: bguf58.com IP: 67.198.248.139 HASH: 9dee66a01a8baf2fffd3e2b51d386487e440c9540f3724e68bfc03fdf0d6112f 67.198.248.139 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT content-length: 1047 last-modified: Thu, 24 Feb 2022 06:55:22 GMT etag: "62172bda-417" expires: Fri, 04 Nov 2022 22:00:15 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 34 x 40, 8-bit/color RGBA, non-interlaced\012- data Size: 1047 Md5: f5d6c8bf792470a6bfbd3bdcb28c82e4 Sha1: 4946457941e594d48da2622f1e071b72124b7cf3 Sha256: 9dee66a01a8baf2fffd3e2b51d386487e440c9540f3724e68bfc03fdf0d6112f
GET /static_new6/img/passwd.png HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/img/passwd.png FQDN: bguf58.com IP: 67.198.248.139 HASH: bbd10cc686f61d0a2a1718a55e4b1b2bb95fd9c89efddfd93d876788c70862dc 67.198.248.139 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT content-length: 1134 last-modified: Thu, 24 Feb 2022 06:55:23 GMT etag: "62172bdb-46e" expires: Fri, 04 Nov 2022 22:00:15 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 34 x 38, 8-bit/color RGBA, non-interlaced\012- data Size: 1134 Md5: 2909181c0575526c5c36df92a8b11b6c Sha1: 495155faa16899fbc261a69835a7332e16970452 Sha256: bbd10cc686f61d0a2a1718a55e4b1b2bb95fd9c89efddfd93d876788c70862dc
GET /static_new6/img/loadingIcon.a880485e.png HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/img/loadingIcon.a880485e.png FQDN: bguf58.com IP: 67.198.248.139 HASH: 7434b16e08a2dbe7fab69a7ebbc2344705e67ee982ebfea3920c2ac488b06b95 67.198.248.139 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT content-length: 5447 last-modified: Thu, 08 Apr 2021 11:11:32 GMT etag: "606ee4e4-1547" expires: Fri, 04 Nov 2022 22:00:15 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced\012- data Size: 5447 Md5: a880485e723ead6db8703d10914f9545 Sha1: 9f0cfc4bef07164e47963509d12f9159cd466bd1 Sha256: 7434b16e08a2dbe7fab69a7ebbc2344705e67ee982ebfea3920c2ac488b06b95
GET /static_new6/img/successIcon.4375564d.png HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/img/successIcon.4375564d.png FQDN: bguf58.com IP: 67.198.248.139 HASH: a9743e4d870d471fac99e117ee8e2691952e9634656aea871b138766f4ce9317 67.198.248.139 HTTP/2 200 OK content-type: image/png server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT content-length: 7074 last-modified: Thu, 08 Apr 2021 10:54:32 GMT etag: "606ee0e8-1ba2" expires: Fri, 04 Nov 2022 22:00:15 GMT cache-control: max-age=2592000 strict-transport-security: max-age=31536000 accept-ranges: bytes X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced\012- data Size: 7074 Md5: 4375564d11a4dc1b4756e57d55140056 Sha1: 16715802c4b6ca8031b5075b48811e315e846618 Sha256: a9743e4d870d471fac99e117ee8e2691952e9634656aea871b138766f4ce9317
GET /static_new6/css/app.cae3284d.css HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/css/app.cae3284d.css FQDN: bguf58.com IP: 67.198.248.139 HASH: 070253e56db779c76c22ce787a1ae8a989a5f522bf57fe73902d5eb9f768c27b 67.198.248.139 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Thu, 22 Sep 2022 08:31:55 GMT vary: Accept-Encoding etag: W/"632c1d7b-3848" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 25999 Md5: e5d5b324936eddc39788b6cc4a26edb4 Sha1: 78f2dfb3170772431be4649bf4c0c14f77a51e57 Sha256: 070253e56db779c76c22ce787a1ae8a989a5f522bf57fe73902d5eb9f768c27b
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7964 Expires: Thu, 06 Oct 2022 00:13:00 GMT Date: Wed, 05 Oct 2022 22:00:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55331c1dc7e7ebbf456220986278469d Sha1: d69a62ee47b03fde68db666512417dda2ae5ad13 Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7964 Expires: Thu, 06 Oct 2022 00:13:00 GMT Date: Wed, 05 Oct 2022 22:00:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55331c1dc7e7ebbf456220986278469d Sha1: d69a62ee47b03fde68db666512417dda2ae5ad13 Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7964 Expires: Thu, 06 Oct 2022 00:13:00 GMT Date: Wed, 05 Oct 2022 22:00:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55331c1dc7e7ebbf456220986278469d Sha1: d69a62ee47b03fde68db666512417dda2ae5ad13 Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7964 Expires: Thu, 06 Oct 2022 00:13:00 GMT Date: Wed, 05 Oct 2022 22:00:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55331c1dc7e7ebbf456220986278469d Sha1: d69a62ee47b03fde68db666512417dda2ae5ad13 Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.77.32 HASH: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5 23.36.77.32 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7964 Expires: Thu, 06 Oct 2022 00:13:00 GMT Date: Wed, 05 Oct 2022 22:00:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 55331c1dc7e7ebbf456220986278469d Sha1: d69a62ee47b03fde68db666512417dda2ae5ad13 Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5
GET /static_new6/css/app.4e7da7f7.css HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/css/app.4e7da7f7.css FQDN: bguf58.com IP: 67.198.248.139 HASH: 15198890dcdb75757737b0e0973f6a92a4509df02b8edffcc8d740d8b6204c85 67.198.248.139 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Thu, 22 Sep 2022 08:43:14 GMT vary: Accept-Encoding etag: W/"632c2022-376d" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 9114 Md5: 1ce80323f8733c59b9a8cdf6852c9b43 Sha1: 6245338d18338f2354fcd44cea7b19d49d265260 Sha256: 15198890dcdb75757737b0e0973f6a92a4509df02b8edffcc8d740d8b6204c85
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5832 x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Zf8s1FuUoAMFhBA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0 x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: WWClzLGprno--c75q63i1TFi8oBEdAYW-J4lCk9V8IELQXe6q0A05A== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google date: Wed, 05 Oct 2022 21:42:38 GMT age: 1058 etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5832 Md5: 3257b782efae9b64e6e18a547866ec50 Sha1: 4daf0c001e86af8477fb097e8ca932edb8e5f981 Sha256: 899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ca20164-9b52-49c5-9e63-1fc0ae719f45.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 10158 x-amzn-requestid: def1fc7e-8008-466f-9271-20fa1ab0fa5a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZaqZCH7doAMFcPQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633a8aa0-7fd2fb1249366f2277d719d6;Sampled=0 x-amzn-remapped-date: Mon, 03 Oct 2022 07:09:20 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: szhtD9f4RuQaDKXe7LElSR0yOKo9cYa1i2YMeG3eSpBXP8ePcdzQig== via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google date: Wed, 05 Oct 2022 07:29:32 GMT age: 52244 etag: "bbe71936b78a8c34d03ab87948dc840b35c6948f" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 10158 Md5: 4fc2ddd86450d64d3fb659ab4e78be58 Sha1: bbe71936b78a8c34d03ab87948dc840b35c6948f Sha256: 84a760397a5912bd05f61bc8a953c13a88a677e2d17fbbf74bdf7d7ff4d3942f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8926 x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Zf8s1GSbIAMFTiw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0 x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google date: Wed, 05 Oct 2022 21:42:38 GMT age: 1058 etag: "70e8d1589f3daf71378965dd197934e220fb6aa4" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8926 Md5: 1de7c17a0ba9295135e7f8b490b6a8d3 Sha1: 70e8d1589f3daf71378965dd197934e220fb6aa4 Sha256: ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8857940-5ca2-44ba-8a66-f396a605d5b4.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7021 x-amzn-requestid: 2e30bdac-360e-4d0a-8bb7-c3144e074abe x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: Zf8ucHb1oAMFjYw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633ca7f5-18ba6bc50cb32b1e14c882bd;Sampled=0 x-amzn-remapped-date: Tue, 04 Oct 2022 21:39:01 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: Sd2_YDHr3j7ym7wfFyQh9kg8FP-Et2nJUOo1v_TNbI3PvpzEY5KJ2Q== via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google date: Tue, 04 Oct 2022 22:07:19 GMT age: 85977 etag: "6b5db8fbfb56f083d54b13e7660d0e4bc866aa00" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7021 Md5: 229c99cfb655a8c9f1a22de69fdff73c Sha1: 6b5db8fbfb56f083d54b13e7660d0e4bc866aa00 Sha256: f4099e9153c3dc481add95b0f24dbb8f6d65cc74ad5631d9cb6c6f2a0351843d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 3585 x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZaHFlEcFoAMFS3g= x-content-type-options: nosniff x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0 x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT x-amz-cf-pop: SEA73-P1 x-cache: Miss from cloudfront x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg== via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google date: Wed, 05 Oct 2022 04:05:29 GMT age: 64487 etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 3585 Md5: 5d7d7df8d4c440f9db445c3d99e818d6 Sha1: 612b6dbd4ba895c167964ff7e6d9263013b52b0a Sha256: bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78bf691d-76e8-4176-884d-dbc06604dded.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8816 x-amzn-requestid: b9f3ec8a-f478-4405-b275-e21f2d7d89d4 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ZKK7gFPJIAMF-7Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6333f1e3-250348e6140f3c74762263ea;Sampled=0 x-amzn-remapped-date: Wed, 28 Sep 2022 07:04:03 GMT x-amz-cf-pop: SEA73-P1 x-cache: Hit from cloudfront x-amz-cf-id: F1ZWwxLKhRC6oSh6gnUxEm5AnYcY-mezJw9mNJ8GmNWnATAKx1JxSg== via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google date: Tue, 04 Oct 2022 22:42:26 GMT age: 83870 etag: "5261a6c2ee6d6cc87e91ee82e32d8be234db393e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8816 Md5: 100559d746bedd7c3802661c875c35ee Sha1: 5261a6c2ee6d6cc87e91ee82e32d8be234db393e Sha256: ff06f31267ddcc9a0d84ddc68932872bfed29d072783c3a1dd3790d41c280aec
GET / HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: bguf58.com/ FQDN: bguf58.com IP: 67.198.248.139 67.198.248.139 HTTP/2 301 Moved Permanently content-type: text/html; charset=utf-8 server: nginx date: Wed, 05 Oct 2022 22:00:14 GMT set-cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6; path=/; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache cache-control: no-cache,must-revalidate location: /index/user/login.html strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing
GET /static_new6/css/chunk-vendors.6442bc31.css HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/css/chunk-vendors.6442bc31.css FQDN: bguf58.com IP: 67.198.248.139 67.198.248.139 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Thu, 22 Sep 2022 08:10:50 GMT vary: Accept-Encoding etag: W/"632c188a-15675" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /static_new6/css/public.css HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/css/public.css FQDN: bguf58.com IP: 67.198.248.139 67.198.248.139 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Thu, 22 Sep 2022 08:31:55 GMT vary: Accept-Encoding etag: W/"632c1d7b-2fa8" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /static_new/js/common.js HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new/js/common.js FQDN: bguf58.com IP: 67.198.248.139 67.198.248.139 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Sun, 29 Mar 2020 15:03:22 GMT vary: Accept-Encoding etag: W/"5e80b8ba-84e" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing
GET /static_new6/css/app.7b22fa66c2af28f12bf32977d4b82694.css HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new6/css/app.7b22fa66c2af28f12bf32977 (...) FQDN: bguf58.com IP: 67.198.248.139 67.198.248.139 HTTP/2 200 OK content-type: text/css server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Thu, 22 Sep 2022 09:01:19 GMT vary: Accept-Encoding etag: W/"632c245f-b24de" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info ---
GET /static_new/js/jquery.min.js HTTP/1.1 Host: bguf58.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://bguf58.com/index/user/login.html Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: bguf58.com/static_new/js/jquery.min.js FQDN: bguf58.com IP: 67.198.248.139 67.198.248.139 HTTP/2 200 OK content-type: application/javascript server: nginx date: Wed, 05 Oct 2022 22:00:15 GMT last-modified: Sat, 15 Feb 2020 12:13:14 GMT vary: Accept-Encoding etag: W/"5e47e05a-15851" expires: Thu, 06 Oct 2022 10:00:15 GMT cache-control: max-age=43200 strict-transport-security: max-age=31536000 content-encoding: gzip X-Firefox-Spdy: h2 --- Additional Info --- Alerts: Blocklists: - fortinet: Phishing

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4" 

                                        
                                            
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2392 

                                        
                                            
Expires: Wed, 05 Oct 2022 22:40:06 GMT 

                                        
                                            
Date: Wed, 05 Oct 2022 22:00:14 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    282f6e1328452c1cb41f6a6272fff757

                                                Sha1:   20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262

                                                Sha256: 6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 

                                        
                                            
Host: content-signature-2.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         54.230.111.7

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: binary/octet-stream

                                        

                                        
                                            
content-length: 5348 

                                        
                                            
last-modified: Fri, 30 Sep 2022 18:50:55 GMT 

                                        
                                            
content-disposition: attachment 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
server: AmazonS3 

                                        
                                            
date: Wed, 05 Oct 2022 04:02:33 GMT 

                                        
                                            
etag: "67d5a988edcda47bc3b3b3f65d32b4b6" 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront) 

                                        
                                            
x-amz-cf-pop: OSL50-P1 

                                        
                                            
x-amz-cf-id: OQaa80YAWpcuD8BhT7IQs0-sRvODxFfslVleKsnShC_msaNajvDAZw== 

                                        
                                            
age: 64662 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PEM certificate\012- , ASCII text

                                                Size:   5348

                                                Md5:    67d5a988edcda47bc3b3b3f65d32b4b6

                                                Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f

                                                Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "E0AE31A3B19092DDC655C948E02798E6991C2B0AB44F5440D671DF2896D18F88" 

                                        
                                            
Last-Modified: Wed, 05 Oct 2022 11:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=21600 

                                        
                                            
Expires: Thu, 06 Oct 2022 04:00:14 GMT 

                                        
                                            
Date: Wed, 05 Oct 2022 22:00:14 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    317ede50a4b277666723a5e6138f8c09

                                                Sha1:   cb1cfda25d3492b873a5a1dbbb41ff3dee4b5c0e

                                                Sha256: e0ae31a3b19092ddc655c948e02798e6991c2b0ab44f5440d671df2896d18f88

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: ocsp.digicert.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         93.184.220.29

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Age: 2692 

                                        
                                            
Cache-Control: 'max-age=158059' 

                                        
                                            
Date: Wed, 05 Oct 2022 22:00:15 GMT 

                                        
                                            
Last-Modified: Wed, 05 Oct 2022 21:15:23 GMT 

                                        
                                            
Server: ECS (ska/F705) 

                                        
                                            
X-Cache: HIT 

                                        
                                            
Content-Length: 471 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    1561c6be7c89d1357a80d12de47b6e74

                                                Sha1:   9a705277922ecca583c867af58b3efce099f83bd

                                                Sha256: e33dc034dbf4b3b627cd3c1af2d942e2ca5704ec9a4aad5c46ad39eb070e82ab

                                        
                                            GET /static_new6/img/xxlogo.png HTTP/1.1 

                                        
                                            
Host: bguf58.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://bguf58.com/index/user/login.html 

                                        
                                            
Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         67.198.248.139

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 05 Oct 2022 22:00:15 GMT 

                                        
                                            
content-length: 24228 

                                        
                                            
last-modified: Thu, 24 Feb 2022 06:43:16 GMT 

                                        
                                            
etag: "62172904-5ea4" 

                                        
                                            
expires: Fri, 04 Nov 2022 22:00:15 GMT 

                                        
                                            
cache-control: max-age=2592000 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 216 x 216, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   24228

                                                Md5:    0ce6f757c006f5cd09e2da802faa0dbf

                                                Sha1:   3a953aee4d015bcc6557e6fcaddfb500e689ad80

                                                Sha256: 63bdbb512b2c2a13ad979c99a92cb90b872464549c937699c4f252952efead89

                                        
                                            GET /static_new6/img/passwd.png HTTP/1.1 

                                        
                                            
Host: bguf58.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://bguf58.com/index/user/login.html 

                                        
                                            
Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         67.198.248.139

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 05 Oct 2022 22:00:15 GMT 

                                        
                                            
content-length: 1134 

                                        
                                            
last-modified: Thu, 24 Feb 2022 06:55:23 GMT 

                                        
                                            
etag: "62172bdb-46e" 

                                        
                                            
expires: Fri, 04 Nov 2022 22:00:15 GMT 

                                        
                                            
cache-control: max-age=2592000 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 34 x 38, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   1134

                                                Md5:    2909181c0575526c5c36df92a8b11b6c

                                                Sha1:   495155faa16899fbc261a69835a7332e16970452

                                                Sha256: bbd10cc686f61d0a2a1718a55e4b1b2bb95fd9c89efddfd93d876788c70862dc

                                        
                                            GET /static_new6/img/successIcon.4375564d.png HTTP/1.1 

                                        
                                            
Host: bguf58.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://bguf58.com/index/user/login.html 

                                        
                                            
Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         67.198.248.139

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/png

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 05 Oct 2022 22:00:15 GMT 

                                        
                                            
content-length: 7074 

                                        
                                            
last-modified: Thu, 08 Apr 2021 10:54:32 GMT 

                                        
                                            
etag: "606ee0e8-1ba2" 

                                        
                                            
expires: Fri, 04 Nov 2022 22:00:15 GMT 

                                        
                                            
cache-control: max-age=2592000 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced\012- data

                                                Size:   7074

                                                Md5:    4375564d11a4dc1b4756e57d55140056

                                                Sha1:   16715802c4b6ca8031b5075b48811e315e846618

                                                Sha256: a9743e4d870d471fac99e117ee8e2691952e9634656aea871b138766f4ce9317

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" 

                                        
                                            
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7964 

                                        
                                            
Expires: Thu, 06 Oct 2022 00:13:00 GMT 

                                        
                                            
Date: Wed, 05 Oct 2022 22:00:16 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    55331c1dc7e7ebbf456220986278469d

                                                Sha1:   d69a62ee47b03fde68db666512417dda2ae5ad13

                                                Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" 

                                        
                                            
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7964 

                                        
                                            
Expires: Thu, 06 Oct 2022 00:13:00 GMT 

                                        
                                            
Date: Wed, 05 Oct 2022 22:00:16 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    55331c1dc7e7ebbf456220986278469d

                                                Sha1:   d69a62ee47b03fde68db666512417dda2ae5ad13

                                                Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.77.32

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A09C835AA140C7B4220194E940F54DE09CA3B7EA470FEB7C4C5BE574643086D5" 

                                        
                                            
Last-Modified: Tue, 04 Oct 2022 00:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=7964 

                                        
                                            
Expires: Thu, 06 Oct 2022 00:13:00 GMT 

                                        
                                            
Date: Wed, 05 Oct 2022 22:00:16 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    55331c1dc7e7ebbf456220986278469d

                                                Sha1:   d69a62ee47b03fde68db666512417dda2ae5ad13

                                                Sha256: a09c835aa140c7b4220194e940f54de09ca3b7ea470feb7c4c5be574643086d5

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F23595c4d-609a-48f3-a52f-e88e478d7653.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5832 

                                        
                                            
x-amzn-requestid: c4427edd-3d71-47d0-a2d3-b3bfed089535 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Zf8s1FuUoAMFhBA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-633ca7eb-46ddff150da4141d23fc0d8a;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: WWClzLGprno--c75q63i1TFi8oBEdAYW-J4lCk9V8IELQXe6q0A05A== 

                                        
                                            
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 05 Oct 2022 21:42:38 GMT 

                                        
                                            
age: 1058 

                                        
                                            
etag: "4daf0c001e86af8477fb097e8ca932edb8e5f981" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5832

                                                Md5:    3257b782efae9b64e6e18a547866ec50

                                                Sha1:   4daf0c001e86af8477fb097e8ca932edb8e5f981

                                                Sha256: 899f9692e86405aa288d88dd285a6fe26bedab1a2ca4693212476063890b01a5

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5704624d-eb81-4a5b-bcb7-08db5681c677.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8926 

                                        
                                            
x-amzn-requestid: 27fc8976-af8d-40a3-b701-0642fa135ec4 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: Zf8s1GSbIAMFTiw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-633ca7eb-4d4c7837576e0fdb5828fe3b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Tue, 04 Oct 2022 21:38:51 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: YzVofPSJC-YVU1Q1V9AnjNeQTa1BQEh6ZiH2HjSeeX5RygysFP7oAA== 

                                        
                                            
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 05 Oct 2022 21:42:38 GMT 

                                        
                                            
age: 1058 

                                        
                                            
etag: "70e8d1589f3daf71378965dd197934e220fb6aa4" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8926

                                                Md5:    1de7c17a0ba9295135e7f8b490b6a8d3

                                                Sha1:   70e8d1589f3daf71378965dd197934e220fb6aa4

                                                Sha256: ee559ce3166479e2b930be7d18525f5c2d164aed8ca005302ddaf3bfe37eec24

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb178720-854c-4c9e-85c1-58cb5419ca69.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 3585 

                                        
                                            
x-amzn-requestid: ccb6f0c8-4d9b-48b8-aaf6-16781dc4c86b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ZaHFlEcFoAMFS3g= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-633a5223-5c9276c873efee993ba54667;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Mon, 03 Oct 2022 03:08:19 GMT 

                                        
                                            
x-amz-cf-pop: SEA73-P1 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: T8m1q2L45TWDVRBa-R2W70yq9BauBK3G4IX54AGIxdRhG736T974kg== 

                                        
                                            
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 32d624dbeb2a8b7f24dbe49007e37c90.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Wed, 05 Oct 2022 04:05:29 GMT 

                                        
                                            
age: 64487 

                                        
                                            
etag: "612b6dbd4ba895c167964ff7e6d9263013b52b0a" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   3585

                                                Md5:    5d7d7df8d4c440f9db445c3d99e818d6

                                                Sha1:   612b6dbd4ba895c167964ff7e6d9263013b52b0a

                                                Sha256: bf527a814c78f9e010cce4ba593c9146d54a2137d1f147f7a6250fbad81956ac

                                        
                                            GET /static_new6/css/public.css HTTP/1.1 

                                        
                                            
Host: bguf58.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://bguf58.com/index/user/login.html 

                                        
                                            
Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         67.198.248.139

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 05 Oct 2022 22:00:15 GMT 

                                        
                                            
last-modified: Thu, 22 Sep 2022 08:31:55 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
etag: W/"632c1d7b-2fa8" 

                                        
                                            
expires: Thu, 06 Oct 2022 10:00:15 GMT 

                                        
                                            
cache-control: max-age=43200 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                        
                                            GET /static_new6/css/app.7b22fa66c2af28f12bf32977d4b82694.css HTTP/1.1 

                                        
                                            
Host: bguf58.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://bguf58.com/index/user/login.html 

                                        
                                            
Cookie: s18ed89c1=hb3cjmvoooafsrdcj721am9ch6 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         67.198.248.139

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Wed, 05 Oct 2022 22:00:15 GMT 

                                        
                                            
last-modified: Thu, 22 Sep 2022 09:01:19 GMT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
etag: W/"632c245f-b24de" 

                                        
                                            
expires: Thu, 06 Oct 2022 10:00:15 GMT 

                                        
                                            
cache-control: max-age=43200 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
content-encoding: gzip 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

URL	bguf58.com/
IP	67.198.248.139 (United States)
ASN	#35908 VPLSNET
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-10-05 22:00:24 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	4
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (8)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 67.198.248.139

Last 5 reports on ASN: VPLSNET

Last 2 reports on domain: bguf58.com

Last 4 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (33)

Overview

Domain Summary (8)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 4 reports on IP: 67.198.248.139

Last 5 reports on ASN: VPLSNET

Last 2 reports on domain: bguf58.com

Last 4 reports with similar screenshot

JavaScript

Executed Scripts (5)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (33)

Network Intrusion Detection Systems