GET shick.ozonhend.eu.org/
200 OK 5.1 kB IP
Certificate IssuerLet's Encrypt
Subjectshick.ozonhend.eu.org
FingerprintED:B3:CA:B4:95:8B:E4:27:FA:04:D7:61:15:50:7A:53:C8:83:94:8B
ValiditySun, 23 Mar 2025 20:15:54 GMT - Sat, 21 Jun 2025 20:15:53 GMT
File type HTML document, ASCII text, with very long lines (5382), with no line terminators
Hash 74ffbf720d77ee158018753fd7b6160b
8fbe7d7c90bf1758a0010dfa26354a0d8a71a641
d861ecd4fe3a7264e07aee010f44edc4dc830569c10247a99a8428d98646a7ec
GET / HTTP/1.1
Host: shick.ozonhend.eu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: PHPSESSID=eacicbl4lo1p275kqouvek1o15; ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Wed, 26 Mar 2025 11:10:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.24
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=31536000;
GET shick.ozonhend.eu.org/apple-touch-icon.png
200 OK 63 kB URL GET shick.ozonhend.eu.org/apple-touch-icon.png
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerLet's Encrypt
Subjectshick.ozonhend.eu.org
FingerprintED:B3:CA:B4:95:8B:E4:27:FA:04:D7:61:15:50:7A:53:C8:83:94:8B
ValiditySun, 23 Mar 2025 20:15:54 GMT - Sat, 21 Jun 2025 20:15:53 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
Hash a54b65aea8ccb8ef4321f03d7c312292
8a5bb59a2726742bdb22f5a60e1b0f6e724ba8df
314c3715880357674ebeede35afade68c9a1bd8355ccc530b390223f7ad5c960
GET /apple-touch-icon.png HTTP/1.1
Host: shick.ozonhend.eu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shick.ozonhend.eu.org/
Cookie: PHPSESSID=eacicbl4lo1p275kqouvek1o15; ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Wed, 26 Mar 2025 11:10:02 GMT
Content-Type: image/png
Content-Length: 62551
Last-Modified: Sun, 23 Mar 2025 21:18:53 GMT
Connection: keep-alive
ETag: "67e07abd-f457"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
GET shick.ozonhend.eu.org/favicon-16x16.png
200 OK 814 B URL GET shick.ozonhend.eu.org/favicon-16x16.png
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerLet's Encrypt
Subjectshick.ozonhend.eu.org
FingerprintED:B3:CA:B4:95:8B:E4:27:FA:04:D7:61:15:50:7A:53:C8:83:94:8B
ValiditySun, 23 Mar 2025 20:15:54 GMT - Sat, 21 Jun 2025 20:15:53 GMT
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Hash 3a3477aad51ebe2dc53f02667ecac336
c7beb428cd20c120895a118eb17a2486acc4739b
b954f01876331f1e24acf0a3726f692ae1423d40ed7b92f3bcc9d9e18e24d1c9
GET /favicon-16x16.png HTTP/1.1
Host: shick.ozonhend.eu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shick.ozonhend.eu.org/
Cookie: PHPSESSID=eacicbl4lo1p275kqouvek1o15; ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Wed, 26 Mar 2025 11:10:02 GMT
Content-Type: image/png
Content-Length: 814
Last-Modified: Sun, 23 Mar 2025 21:18:53 GMT
Connection: keep-alive
ETag: "67e07abd-32e"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
302 Found 81 kB IP
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
FingerprintEE:A5:D6:A7:7C:19:95:69:19:BA:C1:C3:58:8B:D0:60:33:9E:21:A8
ValidityMon, 10 Mar 2025 08:36:41 GMT - Mon, 02 Jun 2025 08:36:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: ygrbfe.blogspot.pe
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://ygrbfe.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 26 Mar 2025 11:09:59 GMT
expires: Wed, 26 Mar 2025 11:09:59 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 196
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
200 OK 81 kB IP
Certificate IssuerGoogle Trust Services
Subjectmisc-sni.blogspot.com
FingerprintEE:A5:D6:A7:7C:19:95:69:19:BA:C1:C3:58:8B:D0:60:33:9E:21:A8
ValidityMon, 10 Mar 2025 08:36:41 GMT - Mon, 02 Jun 2025 08:36:40 GMT
File type HTML document, ASCII text, with very long lines (16914)
Hash 33868b9000d237afe6bb3ff598e6c40d
af9266af8605d5fcff1c6127a99b664ca012c1a6
2df983e0fadd7ac9bbc5cc429c2cc4a90ef41ff2b732baf839556f4b0cd6e4fb
GET / HTTP/1.1
Host: ygrbfe.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 26 Mar 2025 11:10:00 GMT
date: Wed, 26 Mar 2025 11:10:00 GMT
cache-control: private, max-age=0
last-modified: Wed, 19 Mar 2025 01:43:30 GMT
etag: W/"f6d3b6fefbbaf22c4fe3d82ad0f2ec435fc13c3b627c9e73ea516554c6e46465"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 16146
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
301 Moved Permanently 1.0 kB IP
ASN #42624 Global-Data System IT Corporation
Certificate IssuerLet's Encrypt
Subjectget188.info
Fingerprint21:DE:EA:4E:85:68:3C:76:A6:B6:BA:A8:D3:CB:8D:58:7A:61:A9:91
ValidityMon, 24 Feb 2025 16:00:45 GMT - Sun, 25 May 2025 16:00:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2/rr HTTP/1.1
Host: get188.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ygrbfe.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 795
date: Wed, 26 Mar 2025 11:10:01 GMT
server: LiteSpeed
location: https://get188.info/new.html
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
GET www.google.com/
0 B IP
Requested by https://get188.info/new.html
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://get188.info/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET rolastopas.cc/go/539433/33f4
302 Found 5.1 kB URL User Request GET rolastopas.cc/go/539433/33f4
IP
ASN #207566 Chang Way Technologies Co. Limited
Certificate IssuerLet's Encrypt
Subjectrolastopas.cc
Fingerprint24:EE:21:F5:48:6D:BB:82:12:1F:37:9B:5F:5B:C5:F5:01:43:32:02
ValidityTue, 25 Mar 2025 05:34:48 GMT - Mon, 23 Jun 2025 05:34:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /go/539433/33f4 HTTP/1.1
Host: rolastopas.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get188.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 26 Mar 2025 11:10:01 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Pragma: no-cache
Set-Cookie: PHPSESSID=9a9c357438fe3af331dd1898c70fc101; expires=Wed, 25-May-2044 11:10:01 GMT; Max-Age=604800000; path=/; domain=rolastopas.cc
ofr_69=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D; expires=Sat, 26-Apr-2025 11:10:01 GMT; Max-Age=2678400; path=/; domain=rolastopas.cc
Location: https://shick.ozonhend.eu.org?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODM5O3M6NDoibm9wZCI7czoxMzoicm9sYXN0b3Bhcy5jYyI7czoxOiJvIjtpOjY5O30=
GET shick.ozonhend.eu.org/static/css/main.fb627ea7.css
200 OK 48 kB URL GET shick.ozonhend.eu.org/static/css/main.fb627ea7.css
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerLet's Encrypt
Subjectshick.ozonhend.eu.org
FingerprintED:B3:CA:B4:95:8B:E4:27:FA:04:D7:61:15:50:7A:53:C8:83:94:8B
ValiditySun, 23 Mar 2025 20:15:54 GMT - Sat, 21 Jun 2025 20:15:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/css/main.fb627ea7.css HTTP/1.1
Host: shick.ozonhend.eu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shick.ozonhend.eu.org/
Cookie: PHPSESSID=eacicbl4lo1p275kqouvek1o15; ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Wed, 26 Mar 2025 11:10:02 GMT
Content-Type: text/css
Content-Length: 47583
Last-Modified: Sun, 23 Mar 2025 21:18:53 GMT
Connection: keep-alive
ETag: "67e07abd-b9df"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
GET fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Inter:wght@100;200;300;400;500;600;700;800;900&family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
200 OK 157 kB URL GET fonts.googleapis.com/css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Inter:wght@100;200;300;400;500;600;700;800;900&family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint69:99:38:F9:7C:82:8E:AC:7D:DA:EA:3E:1C:E4:7F:52:1B:36:41:AA
ValidityMon, 10 Mar 2025 08:37:02 GMT - Mon, 02 Jun 2025 08:37:01 GMT
Size 157 kB (157298 bytes)
Hash 9255dcf37ded598702083d15a389e754
4d9edb48abf2903392e59092516b9c37c4644c31
301542634fd15329baf99b3aa5f971f85ff6d975c728d14c17210fd687b4e0f7
GET /css2?family=Fira+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Inter:wght@100;200;300;400;500;600;700;800;900&family=Noto+Sans+Display:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shick.ozonhend.eu.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 26 Mar 2025 11:10:02 GMT
date: Wed, 26 Mar 2025 11:10:02 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2
200 OK 150 kB URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File type Web Open Font Format (Version 2), TrueType, length 150124, version 772.256
Size 150 kB (150124 bytes)
Hash c64278386c2bbb5e293e11b94ca2f6d1
6b99aa650bd12a36caa14e0127435d8f4cd3ba73
7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880
GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shick.ozonhend.eu.org
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 26 Mar 2025 11:10:06 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 150124
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "6421d693-24a6c"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 36259
expires: Mon, 16 Mar 2026 11:10:06 GMT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VhdaI1BxHyG%2FjhTqFrGdfomnlnofz6g3SMZOqm6WH79JUOZNwH%2Bg9rqvzrCTHtiWAHsxS5azRj8hok8d8X%2FQAw1l6EUZLdear7%2FpoCARtamtJm%2BFmxW%2BCBTtPFj2SRIXo6alYW1N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 92663318cacbb4eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
200 OK 1.0 kB IP
ASN #42624 Global-Data System IT Corporation
Certificate IssuerLet's Encrypt
Subjectget188.info
Fingerprint21:DE:EA:4E:85:68:3C:76:A6:B6:BA:A8:D3:CB:8D:58:7A:61:A9:91
ValidityMon, 24 Feb 2025 16:00:45 GMT - Sun, 25 May 2025 16:00:44 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1083), with no line terminators
Hash 969d491d68dd0d0914d62df0e4270076
9722e28a06f6d1146e89ff19d2f390b1efbef946
df04f29e6cf10e5a791d5bf3b6fc9da87633e6138a11143c0f238e9d3587381f
GET /new.html HTTP/1.1
Host: get188.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ygrbfe.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
last-modified: Fri, 21 Mar 2025 12:28:35 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 419
date: Wed, 26 Mar 2025 11:10:01 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
GET get188.info/favicon.ico
301 Moved Permanently 0 B IP
ASN #42624 Global-Data System IT Corporation
Requested by https://get188.info/new.html
Certificate IssuerLet's Encrypt
Subjectget188.info
Fingerprint21:DE:EA:4E:85:68:3C:76:A6:B6:BA:A8:D3:CB:8D:58:7A:61:A9:91
ValidityMon, 24 Feb 2025 16:00:45 GMT - Sun, 25 May 2025 16:00:44 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: get188.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://get188.info/new.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html
content-length: 795
date: Wed, 26 Mar 2025 11:10:01 GMT
server: LiteSpeed
location: https://www.google.com
X-Firefox-Spdy: h2
GET sharkboss.top/share/get_redir.php
200 OK 21 B URL GET sharkboss.top/share/get_redir.php
IP
Requested by https://get188.info/new.html
Certificate IssuerGoogle Trust Services
Subjectsharkboss.top
FingerprintF2:F5:33:FF:B0:0D:62:5B:A7:B5:ED:62:D4:F1:91:84:57:D1:58:00
ValiditySat, 22 Feb 2025 05:54:45 GMT - Fri, 23 May 2025 06:52:25 GMT
File type ASCII text, with no line terminators
Hash 6d3199a7443dc9a4800e96166396866d
7f759b7d3da3ef46b7cc257c9ca5c3c6c0c8d75c
d3b30b2a6e81c31874e8320487689f906689882566deda9fdf856b959aab2a5a
GET /share/get_redir.php HTTP/1.1
Host: sharkboss.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://get188.info/
Origin: https://get188.info
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 26 Mar 2025 11:10:01 GMT
content-type: text/html; charset=UTF-8
set-cookie: PHPSESSID=e23992ce0972ac0fb93b23c678f8e6cf; expires=Wed, 25-May-2044 11:10:01 GMT; Max-Age=604800000; path=/; domain=sharkboss.top
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: *
cf-cache-status: DYNAMIC
vary: accept-encoding
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V6RF%2FnqWC9oLT5qz0zeiZuac8Je5NMGwPz5GbDUHx8xqItmWRD8ynJouAb9jp2OUSgsEUhnAZ7KPu7Guae6OIQJE2UG%2BWt8sYHXdBkxa5BdEJMudbqNY1B%2FYh%2FQ5ROOG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 926632fa582056ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5979&min_rtt=483&rtt_var=11012&sent=8&recv=11&lost=0&retrans=0&sent_bytes=3275&recv_bytes=1214&delivery_rate=7743315&cwnd=254&unsent_bytes=0&cid=7d92a201bc80edea&ts=181&x=0"
X-Firefox-Spdy: h2
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
200 OK 102 kB URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT
File type ASCII text, with very long lines (52276)
Size 102 kB (102025 bytes)
Hash ded1c367363e8b20bdc6a19b8350a737
8c06d82739d14b094ff6d9036021a252bd1d985d
1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf
GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shick.ozonhend.eu.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 26 Mar 2025 11:10:02 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 37968
expires: Mon, 16 Mar 2026 11:10:02 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwJqsYKbTS4HOBo1wMb0uHV5khZZLb8O%2Frh5wfLVrgnSc67D3dxpOmgdyd2DTg7jlCfZ68pQjH41s%2BxpS1OSep2ImW6%2FaAq4cFlNr5JVx%2F2OBksej23SaEkPnIPKgNj4m5vFFAh4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 926632fffaca5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET shick.ozonhend.eu.org/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODM5O3M6NDoibm9wZCI7czoxMzoicm9sYXN0b3Bhcy5jYyI7czoxOiJvIjtpOjY5O30=
302 Found 5.1 kB URL User Request GET shick.ozonhend.eu.org/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODM5O3M6NDoibm9wZCI7czoxMzoicm9sYXN0b3Bhcy5jYyI7czoxOiJvIjtpOjY5O30=
IP
Certificate IssuerLet's Encrypt
Subjectshick.ozonhend.eu.org
FingerprintED:B3:CA:B4:95:8B:E4:27:FA:04:D7:61:15:50:7A:53:C8:83:94:8B
ValiditySun, 23 Mar 2025 20:15:54 GMT - Sat, 21 Jun 2025 20:15:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6ODM5O3M6NDoibm9wZCI7czoxMzoicm9sYXN0b3Bhcy5jYyI7czoxOiJvIjtpOjY5O30= HTTP/1.1
Host: shick.ozonhend.eu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://get188.info/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.26.1
Date: Wed, 26 Mar 2025 11:10:01 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.24
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=eacicbl4lo1p275kqouvek1o15; path=/
ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D; expires=Thu, 27-Mar-2025 11:10:01 GMT; Max-Age=86400; path=/; domain=shick.ozonhend.eu.org
Location: http://shick.ozonhend.eu.org/
Strict-Transport-Security: max-age=31536000;
GET shick.ozonhend.eu.org/static/js/jquery-3.2.1.min.js
200 OK 1.0 MB URL GET shick.ozonhend.eu.org/static/js/jquery-3.2.1.min.js
IP
Requested by https://shick.ozonhend.eu.org/
Certificate IssuerLet's Encrypt
Subjectshick.ozonhend.eu.org
FingerprintED:B3:CA:B4:95:8B:E4:27:FA:04:D7:61:15:50:7A:53:C8:83:94:8B
ValiditySun, 23 Mar 2025 20:15:54 GMT - Sat, 21 Jun 2025 20:15:53 GMT
Size 1.0 MB (1007713 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /static/js/jquery-3.2.1.min.js HTTP/1.1
Host: shick.ozonhend.eu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shick.ozonhend.eu.org/
Cookie: PHPSESSID=eacicbl4lo1p275kqouvek1o15; ofr=a%3A4%3A%7Bs%3A5%3A%22label%22%3Bs%3A0%3A%22%22%3Bs%3A3%3A%22usr%22%3Bi%3A839%3Bs%3A4%3A%22nopd%22%3Bs%3A13%3A%22rolastopas.cc%22%3Bs%3A1%3A%22o%22%3Bi%3A69%3B%7D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.26.1
Date: Wed, 26 Mar 2025 11:10:02 GMT
Content-Type: application/javascript
Content-Length: 1007713
Last-Modified: Sun, 23 Mar 2025 21:18:53 GMT
Connection: keep-alive
ETag: "67e07abd-f6061"
Strict-Transport-Security: max-age=31536000;
Accept-Ranges: bytes
142.250.178.97
104.21.2.198
92.255.57.4
212.22.80.43
185.208.156.66