GET /favicon.ico HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/index.php?host=dramms.2kool4u.net
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:41:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.18

GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://suspended-website.com
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:41:59 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"5869c96cc8f19086aee625d670d741f9"
last-modified: Mon, 25 Jan 2021 22:04:00 GMT
cdn-cachedat: 03/13/2024 15:19:43
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1053
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 632ceccbdf636b11a57754734f23cf5b
cdn-cache: HIT
cf-cache-status: HIT
age: 26805122
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 932ee1f0daebb511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.18

GET /index.php?host=dramms.2kool4u.net HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dramms.2kool4u.net/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET /gtm.js?id=GTM-M2K2KL9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 19:41:56 GMT
expires: Sat, 19 Apr 2025 19:41:56 GMT
cache-control: private, max-age=900
last-modified: Sat, 19 Apr 2025 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1297:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1297:0
report-to: {"group":"ascgcycc:1297:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1297:0"}],}
server: Google Tag Manager
content-length: 87398
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://suspended-website.com
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:41:59 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: gzip
etag: W/"ec3bb52a00e176a7181d454dffaea219"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 10/31/2023 18:51:53
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 852
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: cfd802fce195bdeaedd94c5d20c699c5
cdn-cache: HIT
cf-cache-status: HIT
age: 713763
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 932ee1f0eb0eb511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /poweredByWorldPay.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 3862
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-f16"
Accept-Ranges: bytes

GET /diners.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 2504
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-9c8"
Accept-Ranges: bytes

GET /alipay-small-whitebg.png HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/png
Content-Length: 7198
Last-Modified: Fri, 22 May 2020 08:34:54 GMT
Connection: keep-alive
ETag: "5ec78eae-1c1e"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

GET /2co11.jpg HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/jpeg
Content-Length: 8363
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-20ab"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

GET /gtm.js?id=GTM-M2K2KL9 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 19:42:00 GMT
expires: Sat, 19 Apr 2025 19:42:00 GMT
cache-control: private, max-age=900
last-modified: Sat, 19 Apr 2025 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1297:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1297:0
report-to: {"group":"ascgcycc:1297:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1297:0"}],}
server: Google Tag Manager
content-length: 87375
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /k/ HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://suspended-website.com/index.php?host=dramms.2kool4u.net
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET /k/ HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://suspended-website.com/index.php?host=dramms.2kool4u.net
DNT: 1
Connection: keep-alive
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:41:58 GMT
Content-Type: text/html
Content-Length: 4883
Last-Modified: Wed, 06 Mar 2024 08:34:24 GMT
Connection: keep-alive
ETag: "65e82a90-1313"
Accept-Ranges: bytes

GET /ajax/libs/jquery/1.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 27266
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 18 Apr 2025 02:28:02 GMT
Expires: Sat, 18 Apr 2026 02:28:02 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 148437

GET /maestro.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:41:59 GMT
Content-Type: image/gif
Content-Length: 1259
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-4eb"
Accept-Ranges: bytes

GET /JCB.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 1672
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-688"
Accept-Ranges: bytes

GET /index.php?host=dramms.2kool4u.net HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dramms.2kool4u.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:41:55 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.3.18

GET /visa_electron.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 3031
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-bd7"
Accept-Ranges: bytes

GET /AMEX.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:41:59 GMT
Content-Type: image/gif
Content-Length: 558
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-22e"
Accept-Ranges: bytes

GET /ELV.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 682
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-2aa"
Accept-Ranges: bytes

GET /mastercard.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 709
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-2c5"
Accept-Ranges: bytes

GET /gtag/js?id=G-TPL3V6D1KQ&l=dataLayer&cx=c&gtm=45He54g3h1v838183051za200&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 19 Apr 2025 19:42:01 GMT
expires: Sat, 19 Apr 2025 19:42:01 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1055:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1055:0
report-to: {"group":"ascgcycc:1055:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1055:0"}],}
server: Google Tag Manager
content-length: 121228
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /aes.js HTTP/1.1
Host: dramms.2kool4u.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://dramms.2kool4u.net/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 19 Apr 2025 19:41:53 GMT
Content-Type: application/javascript
Content-Length: 13733
Last-Modified: Sun, 15 Oct 2023 16:54:07 GMT
Connection: keep-alive
ETag: "652c192f-35a5"
Accept-Ranges: bytes

GET /?i=1 HTTP/1.1
Host: dramms.2kool4u.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://dramms.2kool4u.net/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: __test=55ea4dc3e94d7f227d50537b7d2d4ef4
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET /?i=1 HTTP/1.1
Host: dramms.2kool4u.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://dramms.2kool4u.net/
DNT: 1
Connection: keep-alive
Cookie: __test=55ea4dc3e94d7f227d50537b7d2d4ef4
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: openresty
Date: Sat, 19 Apr 2025 19:41:54 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 246
Connection: keep-alive
Location: http://suspended-website.com/index.php?host=dramms.2kool4u.net
Cache-Control: max-age=0
Expires: Sat, 19 Apr 2025 19:41:54 GMT

GET /bootstrap/3.3.7/css/bootstrap-theme.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://suspended-website.com
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 19 Apr 2025 19:41:59 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"ab6b02efeaf178e0247b9504051472fb"
last-modified: Mon, 25 Jan 2021 22:03:59 GMT
cdn-cachedat: 03/18/2024 12:13:26
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 1417ce81a3fc14458aae98a0e1eef00f
cdn-cache: HIT
cf-cache-status: HIT
age: 24883365
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 932ee1f11b5ab511-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /visa_debit.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 2442
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-98a"
Accept-Ranges: bytes

GET /laser.gif HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/k/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.25.0
Date: Sat, 19 Apr 2025 19:42:00 GMT
Content-Type: image/gif
Content-Length: 1105
Last-Modified: Thu, 21 Nov 2019 14:36:21 GMT
Connection: keep-alive
ETag: "5dd6a0e5-451"
Accept-Ranges: bytes

GET / HTTP/1.1
Host: dramms.2kool4u.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET / HTTP/1.1
Host: dramms.2kool4u.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Sat, 19 Apr 2025 19:41:52 GMT
Content-Type: text/html
Content-Length: 844
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache

GET /g/images/g.jpg HTTP/1.1
Host: suspended-website.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://suspended-website.com/
Cookie: _ga_TPL3V6D1KQ=GS1.1.1745091718.1.0.1745091718.0.0.0; _ga=GA1.1.916840318.1745091718
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache