POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "32E00ABD54407308B80A14E2916A119D95D90B1E7842F8CF0E87DF306287869C"
Last-Modified: Thu, 20 Jun 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7463
Expires: Sat, 22 Jun 2024 13:54:46 GMT
Date: Sat, 22 Jun 2024 11:50:23 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "CA44D6619DEB0E020993A84C6BFBF1993BF096B13863B706DC8A826499348276"
Last-Modified: Wed, 19 Jun 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17158
Expires: Sat, 22 Jun 2024 16:36:21 GMT
Date: Sat, 22 Jun 2024 11:50:23 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3C107C0A5DD06BC96FF917C92843AB276923FD751ECD5E48EEFAFC661B914AE2"
Last-Modified: Sat, 22 Jun 2024 04:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11968
Expires: Sat, 22 Jun 2024 15:09:52 GMT
Date: Sat, 22 Jun 2024 11:50:24 GMT
Connection: keep-alive

GET /images/portrait-mature-smiling-authoress-sitting-desk.jpg HTTP/1.1
Host: skh731.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skh731.com/Grand_Theft_Auto_Vice_City.zip?c=AF66dmYjXQUA51sCAEFSFwASAAAAAACV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 22 Jun 2024 11:50:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
cache-control: max-age=14400
cf-cache-status: HIT
age: 6113
last-modified: Sat, 22 Jun 2024 10:08:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4S3%2FH1jOq9wgi1pHxMlvC5o4Qy5jm0SU5Qga7I6ppQmXO8jT%2BvHyE0Eax31Mwg2fC5MkZvgs1DoFwb7uHjUW%2F1A6ndCWEqHwOKHyiRgNXUF%2FzbLUsiMF8opJCll"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897c0542ead0712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /images/education-online-books.png HTTP/1.1
Host: skh731.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skh731.com/Grand_Theft_Auto_Vice_City.zip?c=AF66dmYjXQUA51sCAEFSFwASAAAAAACV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 22 Jun 2024 11:50:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
cache-control: max-age=14400
cf-cache-status: HIT
age: 6113
last-modified: Sat, 22 Jun 2024 10:08:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NalHQrgo0C0LD5ENJEiXwfDToJojns8RItsCIyW%2BDH23W9nJp%2F2uam5qLUN7UPN%2BAk4%2BTrmZ7RPhFNW6g9qXTLp%2FwZZVFgAWq5Tn7xZVxEE4TO6v1v7iKuRDzKoi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897c0542ea9b712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 22 Jun 2024 11:50:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET /filer/search?q=Grand_Theft_Auto_Vice_City.zip&acid=AIG6dmYzWAUA0nACAE5PFgAMAAAAAABl&a_tb=https%3A%2F%2Ftransgressentomolitehemicranic.com%2Fb%3Ftoken%3D18daaa07e4f1f4cb8de7b708aca2b06c00435294%26c%3DAIG6dmYzWAUA0nACAE5PFgAMAAAAAABl HTTP/1.1
Host: adstructor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://skh731.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 22 Jun 2024 11:50:26 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: PHPSESSID=AIG6dmYzWAUA0nACAE5PFgAMAAAAAABl; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Encoding: gzip

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20844
Expires: Sat, 22 Jun 2024 17:37:50 GMT
Date: Sat, 22 Jun 2024 11:50:26 GMT
Connection: keep-alive

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "67DD6FFE107C77C5F8BEA4A3D6771B6026EFC51BD4A9B26C66C8791C1EF48965"
Last-Modified: Thu, 20 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20844
Expires: Sat, 22 Jun 2024 17:37:50 GMT
Date: Sat, 22 Jun 2024 11:50:26 GMT
Connection: keep-alive

GET /favicon.ico HTTP/1.1
Host: adstructor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adstructor.com/filer/search?q=Grand_Theft_Auto_Vice_City.zip&acid=AIG6dmYzWAUA0nACAE5PFgAMAAAAAABl&a_tb=https%3A%2F%2Ftransgressentomolitehemicranic.com%2Fb%3Ftoken%3D18daaa07e4f1f4cb8de7b708aca2b06c00435294%26c%3DAIG6dmYzWAUA0nACAE5PFgAMAAAAAABl
Cookie: PHPSESSID=AIG6dmYzWAUA0nACAE5PFgAMAAAAAABl
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 22 Jun 2024 11:50:26 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive

GET /ps?token=15985ff85f2cb3936026c1955508845671360f32 HTTP/1.1
Host: startodomainswt1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://adstructor.com/
Origin: https://adstructor.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 22 Jun 2024 11:50:26 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 130
Connection: keep-alive
Accept-Ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Origin: https://adstructor.com

GET /favicon.ico HTTP/1.1
Host: skh731.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skh731.com/Grand_Theft_Auto_Vice_City.zip?c=AF66dmYjXQUA51sCAEFSFwASAAAAAACV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 22 Jun 2024 11:50:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
cache-control: max-age=14400
cf-cache-status: HIT
age: 6971
last-modified: Sat, 22 Jun 2024 09:54:13 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UgN5fU3BFooH1Uy9%2FfJKhBbEUAeym9bggXTFN6Pi4dFP4gRs9U4Edq6lqiyT9ADYi%2FaPnyrX%2FL8nYfKfPAHOIumsQ77HRf4gx%2Bn%2Fe7KTcMV0CXvPKvUUg3AXCU3M"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897c05455d85712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /js/bootstrap.bundle.min.js HTTP/1.1
Host: skh731.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skh731.com/Grand_Theft_Auto_Vice_City.zip?c=AF66dmYjXQUA51sCAEFSFwASAAAAAACV
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sat, 22 Jun 2024 11:50:24 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.12
cache-control: max-age=14400
cf-cache-status: HIT
age: 6113
last-modified: Sat, 22 Jun 2024 10:08:31 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRg86zGVPj%2BWWulKBJfZUFe2OTFeXVFymy1ZWH0E2jpIHeU%2B4FYh8Cd%2FZNHrPufa2bfuBl54E%2BcEd8LlnBbsKEakc5e9v7fE2%2B58wl5rWJxbkGYHT9LCAVf7MoTF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897c0542fadc712a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/202402/aus.content-signature.mozilla.org-2024-07-24-18-25-25.chain; p384ecdsa=7AXczPT7Aj9c367SFzee4ag9SjGHWbrk18XmJSZyMWUAT_1ZQIh85sau42quFAlgq0ELL0wAVWjenLpaDB2fpxo_OPXjfcmYeFFCXJ-bxCfLpcSpsQmJBQLnQ_7oMtZv
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Sat, 22 Jun 2024 11:49:52 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 50
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

GET /pu_script.js?t=171776535112 HTTP/1.1
Host: mediapalmtree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://adstructor.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 22 Jun 2024 11:50:26 GMT
content-type: application/javascript
last-modified: Fri, 21 Jun 2024 10:43:31 GMT
etag: W/"66755953-6696"
access-control-allow-origin: *
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2403
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8yCJ89KCOmL2974WgaoKamTOxM%2F4tNcbpLB1mxbgamIGwSf6TNERjJOgcMRLpL7MwnWS297VUGwvkuuqhXPPjGpiSMZ9nnPIFwi2vnKfRnXoJNZYOVo4MU4cFmWoIrVqBjSk%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897c054eba04b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /cEraX2cf314d14ce2b1bf95b0d6c11a618f5bacf4d878?q=Grand_Theft_Auto_Vice_City.zip HTTP/1.1
Host: gharriesbyzantinesalmonidae.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://skh731.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Sat, 22 Jun 2024 11:50:25 GMT
content-type: text/html; charset=utf-8
location: https://adstructor.com/filer/search?q=Grand_Theft_Auto_Vice_City.zip&acid=AIG6dmYzWAUA0nACAE5PFgAMAAAAAABl&a_tb=https%3A%2F%2Ftransgressentomolitehemicranic.com%2Fb%3Ftoken%3D18daaa07e4f1f4cb8de7b708aca2b06c00435294%26c%3DAIG6dmYzWAUA0nACAE5PFgAMAAAAAABl
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Mobile, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DO9I2lRPKuyuxXByZeBewXD6oqKjxe1CTj9sTHaQiV13NX5HF6VKcQZ5tPK9hi%2BbJTLziOcIZ5bxvE9FoWE4OfOkoTTeS4SJayxuWSALw7U8%2BgUqxCWykgUt%2BMnaK4vwyhwxvZbP%2B1PaQwzMbSNFG28p"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 897c054a6967b518-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2