(cache) hxxp://archive[.]today

Analysis

user interaction
yes
max time kernel
57s
max time network
58s
platform
windows10-2004_x64
resource
win10v2004-20251231-en
resource tags

arch:x64arch:x86image:win10v2004-20251231-enlocale:en-usos:windows10-2004-x64system
submitted
16/01/2026, 03:31 UTC

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target http://archive.today

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4912	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134130079316228290"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2177663406-413462311-1670868024-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2177663406-413462311-1670868024-1000\{DD498F3F-560C-4ABA-9FCE-62EBFA9FD4DF}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 1624 wrote to memory of 3712	1624	msedge.exe	83
PID 1624 wrote to memory of 4912	1624	msedge.exe	84
PID 1624 wrote to memory of 5972	1624	msedge.exe	85
PID 1624 wrote to memory of 5972	1624	msedge.exe	85
PID 1624 wrote to memory of 2804	1624	msedge.exe	86
PID 1624 wrote to memory of 2804	1624	msedge.exe	86
PID 1624 wrote to memory of 2804	1624	msedge.exe	86
PID 1624 wrote to memory of 6112	1624	msedge.exe	87
PID 1624 wrote to memory of 1548	1624	msedge.exe	88
PID 1624 wrote to memory of 6112	1624	msedge.exe	87
PID 1624 wrote to memory of 6112	1624	msedge.exe	87
PID 1624 wrote to memory of 1548	1624	msedge.exe	88
PID 1624 wrote to memory of 1548	1624	msedge.exe	88
PID 1624 wrote to memory of 4108	1624	msedge.exe	99
PID 1624 wrote to memory of 4108	1624	msedge.exe	99
PID 1624 wrote to memory of 3780	1624	msedge.exe	100
PID 1624 wrote to memory of 3780	1624	msedge.exe	100
PID 1624 wrote to memory of 320	1624	msedge.exe	102
PID 1624 wrote to memory of 3856	1624	msedge.exe	114
PID 1624 wrote to memory of 3856	1624	msedge.exe	114
PID 1624 wrote to memory of 3856	1624	msedge.exe	114
PID 1624 wrote to memory of 1852	1624	msedge.exe	115
PID 1624 wrote to memory of 1852	1624	msedge.exe	115
PID 1624 wrote to memory of 1852	1624	msedge.exe	115
PID 1624 wrote to memory of 3912	1624	msedge.exe	116
PID 1624 wrote to memory of 3912	1624	msedge.exe	116
PID 1624 wrote to memory of 5712	1624	msedge.exe	119
PID 1624 wrote to memory of 4680	1624	msedge.exe	120
PID 1624 wrote to memory of 3772	1624	msedge.exe	121
PID 1624 wrote to memory of 1444	1624	msedge.exe	122
PID 1624 wrote to memory of 1444	1624	msedge.exe	122
PID 1624 wrote to memory of 1444	1624	msedge.exe	122
PID 1624 wrote to memory of 1428	1624	msedge.exe	123
PID 1624 wrote to memory of 1428	1624	msedge.exe	123
PID 1624 wrote to memory of 1428	1624	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://archive.today
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffda4b1c188,0x7ffda4b1c194,0x7ffda4b1c1a0
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,9896854744150618515,1240952131815892828,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,6297839825152605406,5362291343300938887,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,11793085416316711234,8804672132333578669,262144 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3384,i,4833528353437729517,2727259580188002439,2097152 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3388,i,18053307594484120657,17134073577968618321,2097152 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,3740343410407004401,4107684169888505372,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5016,i,3342784107673513412,13510728405271879479,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,9115132990065575326,8085615801165232798,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,9115132990065575326,8085615801165232798,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5728,i,5559756014609166432,3741005497384122506,2097152 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4884,i,9001632419165621534,847787904738506767,2097152 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,510502871525518772,15641920117507280108,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,810832243846156449,17359127131142695243,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:8
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,14382603679090513510,15410923664505012237,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,16552337937268185660,7495685437021807754,524288 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5872,i,17223132889138560478,7547438600731078622,2097152 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6508,i,11824733823966663889,4349042767443055577,2097152 --field-trial-handle=2324,i,10505654622844957611,5379461652598959274,262144 --variations-seed-version --mojo-platform-channel-handle=6500 /prefetch:1
  2⤵
  PID:1428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1508

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2028

Network

DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.28.11

ax-0002.ax-msedge.net

IN A

150.171.27.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN HTTPS

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net
DNS

archive.today

msedge.exe

Remote address:

8.8.8.8:53

Request

archive.today

IN A

Response

archive.today

IN A

103.15.90.192
DNS

archive.today

msedge.exe

Remote address:

8.8.8.8:53

Request

archive.today

IN HTTPS

Response
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.27.11

ax-0002.ax-msedge.net

IN A

150.171.28.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN HTTPS

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net
DNS

archive.today

msedge.exe

Remote address:

8.8.8.8:53

Request

archive.today

IN A

Response

archive.today

IN A

103.15.90.192
DNS

archive.today

msedge.exe

Remote address:

8.8.8.8:53

Request

archive.today

IN HTTPS

Response
DNS

copilot.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

copilot.microsoft.com

IN A

Response

copilot.microsoft.com

IN CNAME

copilot-copilot-msft-com.trafficmanager.net

copilot-copilot-msft-com.trafficmanager.net

IN CNAME

copilot.microsoft.com.cdn.cloudflare.net

copilot.microsoft.com.cdn.cloudflare.net

IN A

104.18.22.222

copilot.microsoft.com.cdn.cloudflare.net

IN A

104.18.23.222
DNS

copilot.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

copilot.microsoft.com

IN HTTPS

Response

copilot.microsoft.com

IN CNAME

copilot-copilot-msft-com.trafficmanager.net

copilot-copilot-msft-com.trafficmanager.net

IN CNAME

copilot.microsoft.com.cdn.cloudflare.net

copilot.microsoft.com.cdn.cloudflare.net

IN HTTPS

prio=1; alpn=h3,h2; ipv4hint=104.18.22.222,104.18.23.222; ipv6hint=2606:4700::6812:16de,2606:4700::6812:17de
GET

http://edge.microsoft.com/browsernetworktime/time/1/current?cup2key=2:YDakiXWcDGQPgK95hd4P_LGk-MFmMpWl-YX1q14rzl8&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

msedge.exe

Remote address:

150.171.28.11:80

Request

GET /browsernetworktime/time/1/current?cup2key=2:YDakiXWcDGQPgK95hd4P_LGk-MFmMpWl-YX1q14rzl8&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1
Host: edge.microsoft.com
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
Sec-Mesh-Client-Edge-Version: 139.0.3405.125
Sec-Mesh-Client-Edge-Channel: stable
Sec-Mesh-Client-OS: Windows
Sec-Mesh-Client-OS-Version: 10.0.19041
Sec-Mesh-Client-Arch: x86_64
Sec-Mesh-Client-WebView: 0
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK

Cache-Control: no-store, must-revalidate, no-cache, max-age=0
Pragma: no-cache
Content-Length: 101
Content-Type: application/json
Content-Encoding: gzip
Expires: Mon, 01 Jan 1990 00:00:00 GMT
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
x-cup-server-proof: 3045022100E6B95FE43F25915D8EBA5032AB4E2DFD64F304909BB92692BDBBAF8A36BBADAE0220551F65F6762D6D13CEB5CCD55A8C6B260992F03DFB07C9D00100257260EA33C0:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Content-Disposition: attachment; filename='json.txt'
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 84E009F57EAE4A7DAAAD791DDDE32CBC Ref B: FRA261071508034 Ref C: 2026-01-16T03:32:06Z
Date: Fri, 16 Jan 2026 03:32:06 GMT
GET

https://archive.today/

msedge.exe

Remote address:

103.15.90.192:443

Request

GET / HTTP/2.0
host: archive.today
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i

Response

HTTP/2.0 301

server: nginx
date: Fri, 16 Jan 2026 03:32:08 GMT
content-length: 0
onion-location: http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
cache-control: private, no-cache, no-store, must-revalidate, maxage=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
location: https://archive.ph/
access-control-allow-origin: *
set-cookie: qki=16877040221919578542; Max-Age=3600; Domain=.archive.today; Path=/
GET

https://copilot.microsoft.com/c/api/user/eligibility

msedge.exe

Remote address:

104.18.22.222:443

Request

GET /c/api/user/eligibility HTTP/2.0
host: copilot.microsoft.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: MUID=0D93FBCD6F6065410ED2ED1E6EE964D4
priority: u=4, i

Response

HTTP/2.0 200

date: Fri, 16 Jan 2026 03:32:07 GMT
content-type: application/json; charset=utf-8
cf-ray: 9bea8b3b4ae8e98c-FRA
content-encoding: gzip
vary: Accept-Encoding
x-trace-id: 6a5aa87bb4b56ebc3d8d385ad3da485d
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=JQB2CCzg5gQCJ6.3.GTz.K6aopJ54_tNy8YpFDQY7rY-1768534327-1.0.1.1-CPCcbVTAF9czaEU5KHsCGwAkkMRD3vSqAjo6xGJEhIxT_O5UpJQvjHOswl1i80H9q9QW1PTVs4zvJ6iTtfVFFHMVIA9SEDtPuwqH10qSIOU; path=/; expires=Fri, 16-Jan-26 04:02:07 GMT; domain=.copilot.microsoft.com; HttpOnly; Secure; SameSite=None
x-cdn-traceid: 9bea8b3b4ae8e98c-FRA
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.01,"failure_fraction":1.0,"include_subdomains":true}
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingserp"}]}
server: cloudflare
alt-svc: h3=":443"; ma=86400
GET

https://edge.microsoft.com/serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1767216018&clientversion=139.0.3405.125&experimentationmode=2&scpguard=0&scpfull=0&scpver=0

msedge.exe

Remote address:

150.171.27.11:443

Request

GET /serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1767216018&clientversion=139.0.3405.125&experimentationmode=2&scpguard=0&scpfull=0&scpver=0 HTTP/2.0
host: edge.microsoft.com
pragma: no-cache
cache-control: no-cache
sec-mesh-client-edge-version: 139.0.3405.125
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: eyIxIjoiMCIsIjIiOiIwIiwiMyI6IjAiLCI0IjoiNDE5OTU4NzgzMDEzOTc1MjA2OCIsIjYiOiJzdGFibGUiLCI5IjoiZGVza3RvcCJ9
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: max-age=0, no-cache, no-store, must-revalidate
content-length: 446
content-type: application/json; charset=utf-8
content-security-policy: base-uri 'self';block-all-mixed-content;default-src 'self';img-src 'self';object-src 'none';script-src 'none';style-src 'self';upgrade-insecure-requests;
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: DF5A9D3332694DADAB92E9CCE4082B6E Ref B: FRA261071509034 Ref C: 2026-01-16T03:32:07Z
date: Fri, 16 Jan 2026 03:32:07 GMT
DNS

archive.ph

msedge.exe

Remote address:

8.8.8.8:53

Request

archive.ph

IN A

Response

archive.ph

IN A

103.15.90.192
DNS

archive.ph

msedge.exe

Remote address:

8.8.8.8:53

Request

archive.ph

IN HTTPS

Response
GET

http://archive.today/

msedge.exe

Remote address:

103.15.90.192:80

Request

GET / HTTP/1.1
Host: archive.today
Connection: keep-alive
DNT: 1
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: qki=16877040221919578542

Response

HTTP/1.1 302 Moved

Date: Fri, 16 Jan 2026 03:32:20 GMT
Set-Cookie: qki=18403256173422398244; Max-Age=3600; Domain=.archive.today; Path=/
Location: https://archive.today/
Cache-Control: private, no-cache, no-store, must-revalidate, maxage=0
Pragma: no-cache
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Access-Control-Allow-Origin: *
Server: nginx/1.9.2
Content-Length: 0
Connection: keep-alive
GET

https://www.bing.com/th?id=OADD2.10239338869416_1XRO25625EPP8REW1&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90

Remote address:

80.239.150.48:443

Request

GET /th?id=OADD2.10239338869416_1XRO25625EPP8REW1&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90 HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
Host: www.bing.com
Connection: Keep-Alive

Response

HTTP/1.1 200 OK

Cache-Control: public, max-age=2592000
Content-Length: 787
Content-Type: image/jpeg
HttpCacheability: 4
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Timing-Allow-Origin: *
Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=nadatio"}]}
NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
Date: Fri, 16 Jan 2026 03:32:11 GMT
Connection: keep-alive
Alt-Svc: h3=":443"; ma=93600
X-CDN-TraceID: 0.1796ef50.1768534331.79eb7ff9
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.27.11

ax-0002.ax-msedge.net

IN A

150.171.28.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN HTTPS

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net
GET

https://www.bing.com/api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.cashbackEUMarkets,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s

msedge.exe

Remote address:

80.239.150.74:443

Request

GET /api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.cashbackEUMarkets,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s HTTP/1.1
Host: www.bing.com
Connection: keep-alive
Cookie: ANON=; MUID=;_RwBf=;
Sec-Fetch-Site: none
Sec-Fetch-Mode: no-cors
Sec-Fetch-Dest: empty
Sec-Fetch-Storage-Access: active
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
Accept-Encoding: gzip, deflate, br, zsdch, zstd
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Content-Type: application/json; charset=utf-8
Content-Encoding: br
Vary: Accept-Encoding
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
X-MSEdge-Ref: Ref A: 192724B3F7D84F0284637E061C38A129 Ref B: STOEDGE1612 Ref C: 2026-01-16T03:32:12Z
Date: Fri, 16 Jan 2026 03:32:12 GMT
Content-Length: 425
Connection: keep-alive
Set-Cookie: _EDGE_S=F=1&SID=2BEF5AE21E2E68882F8F4C011F7969C0; path=/; httponly; domain=bing.com
Set-Cookie: _EDGE_V=1; path=/; httponly; expires=Wed, 10-Feb-2027 03:32:12 GMT; domain=bing.com
Set-Cookie: MUID=39FEF4B97EF667C61197E25A7FA166AE; samesite=none; path=/; secure; expires=Wed, 10-Feb-2027 03:32:12 GMT; domain=bing.com
Set-Cookie: MUIDB=39FEF4B97EF667C61197E25A7FA166AE; path=/; httponly; expires=Wed, 10-Feb-2027 03:32:12 GMT
Alt-Svc: h3=":443"; ma=93600
X-CDN-TraceID: 0.1f96ef50.1768534332.22e40be
GET

https://edge.microsoft.com/abusiveadblocking/api/v1/blocklist

msedge.exe

Remote address:

150.171.27.11:443

Request

GET /abusiveadblocking/api/v1/blocklist HTTP/2.0
host: edge.microsoft.com
if-none-match: "5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B"
sec-mesh-client-edge-version: 139.0.3405.125
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 304

cache-control: public, max-age=43200
content-type: application/json; charset=utf-8
content-encoding: gzip
etag: "5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B"
vary: Accept-Encoding
x-cache: TCP_HIT
x-mesh-client-ttl: 72
strict-transport-security: max-age=0
x-msedge-ref: Ref A: 1BE6A136DE214B668D1D863691D8153C Ref B: STOEDGE1217 Ref C: 2026-01-16T03:32:12Z
date: Fri, 16 Jan 2026 03:32:12 GMT
GET

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

msedge.exe

Remote address:

150.171.27.11:443

Request

GET /entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362 HTTP/2.0
host: edge.microsoft.com
edge-asset-group: EntityExtractionDomainsConfig
sec-mesh-client-edge-version: 139.0.3405.125
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: public, max-age=3600
content-length: 267
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-frame-options: sameorigin
x-msedge-ref: Ref A: FE602152A078465FAE8A6C09D07937C9 Ref B: STOEDGE1107 Ref C: 2026-01-16T03:32:12Z
date: Fri, 16 Jan 2026 03:32:11 GMT
DNS

edgeassetservice.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edgeassetservice.azureedge.net

IN A

Response

edgeassetservice.azureedge.net

IN CNAME

edgeassetservice.afd.azureedge.net

edgeassetservice.afd.azureedge.net

IN CNAME

mr-afd-azuredge.tm-azurefd.net

mr-afd-azuredge.tm-azurefd.net

IN CNAME

shed.dual-low.part-0036.t-0009.t-msedge.net

shed.dual-low.part-0036.t-0009.t-msedge.net

IN CNAME

part-0036.t-0009.t-msedge.net

part-0036.t-0009.t-msedge.net

IN A

13.107.213.64

part-0036.t-0009.t-msedge.net

IN A

13.107.246.64
DNS

edgeassetservice.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edgeassetservice.azureedge.net

IN HTTPS

Response

edgeassetservice.azureedge.net

IN CNAME

edgeassetservice.afd.azureedge.net

edgeassetservice.afd.azureedge.net

IN CNAME

mr-afd-azuredge.tm-azurefd.net

mr-afd-azuredge.tm-azurefd.net

IN CNAME

shed.dual-low.part-0036.t-0009.t-msedge.net

shed.dual-low.part-0036.t-0009.t-msedge.net

IN CNAME

part-0036.t-0009.t-msedge.net
GET

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=arbitration_priority_list&version=31.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

msedge.exe

Remote address:

150.171.27.11:443

Request

GET /entityextractiontemplates/api/v1/assets/find-assets?name=arbitration_priority_list&version=31.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362 HTTP/2.0
host: edge.microsoft.com
edge-asset-group: ArbitrationService
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: public, max-age=3600
content-length: 266
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-frame-options: sameorigin
x-msedge-ref: Ref A: CCDA8443A9DB44D39FEB0223C0046EA4 Ref B: STOEDGE1616 Ref C: 2026-01-16T03:32:13Z
date: Fri, 16 Jan 2026 03:32:12 GMT
GET

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=edge_hub_apps_manifest_gz&version=4.11.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

msedge.exe

Remote address:

150.171.27.11:443

Request

GET /entityextractiontemplates/api/v1/assets/find-assets?name=edge_hub_apps_manifest_gz&version=4.11.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362 HTTP/2.0
host: edge.microsoft.com
edge-asset-group: Shoreline
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: public, max-age=3600
content-length: 271
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-frame-options: sameorigin
x-msedge-ref: Ref A: 4ADF535C4A0F4B41B968A92B00CCDC93 Ref B: STOEDGE1616 Ref C: 2026-01-16T03:32:13Z
date: Fri, 16 Jan 2026 03:32:12 GMT
POST

https://edge.microsoft.com/extensionwebstorebase/v1/crx

msedge.exe

Remote address:

150.171.27.11:443

Request

POST /extensionwebstorebase/v1/crx HTTP/2.0
host: edge.microsoft.com
content-length: 968
ms-cv: TNaTV47mOIVLaHWfvqVXTo
x-microsoft-update-appid: jmjflgjpcpepeafmmgdpfkogkghcpiha
x-microsoft-update-interactivity: bg
x-microsoft-update-service-cohort: 626
x-microsoft-update-updater: msedgecrx-139.0.3405.125
content-type: application/json
sec-mesh-client-edge-version: 139.0.3405.125
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
x-client-data: COr7ygE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: no-store, must-revalidate, no-cache, max-age=0
pragma: no-cache
content-length: 162
content-type: application/json
content-encoding: gzip
expires: Mon, 01 Jan 1990 00:00:00 GMT
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: D3FB7E0B17CB4694B8E733A24F26300A Ref B: STOEDGE1616 Ref C: 2026-01-16T03:32:36Z
date: Fri, 16 Jan 2026 03:32:35 GMT
GET

https://edgeassetservice.azureedge.net/assets/domains_config_gz/3.0.12/asset?assetgroup=EntityExtractionDomainsConfig

msedge.exe

Remote address:

13.107.213.64:443

Request

GET /assets/domains_config_gz/3.0.12/asset?assetgroup=EntityExtractionDomainsConfig HTTP/2.0
host: edgeassetservice.azureedge.net
edge-asset-group: EntityExtractionDomainsConfig
sec-mesh-client-edge-version: 139.0.3405.125
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

date: Fri, 16 Jan 2026 03:32:13 GMT
content-type: application/octet-stream
content-length: 22849
content-encoding: gzip
last-modified: Tue, 06 Jan 2026 22:14:37 GMT
etag: 0x8DE4D70FB004322
x-ms-request-id: 46dfba67-101e-0022-2fdc-850fde000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
x-azure-ref: 20260116T033213Z-r195fb7db67x9cxvhC1STO74zs000000044g000000003b8z
cache-control: public, max-age=604800
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
GET

https://archive.today/

msedge.exe

Remote address:

103.15.90.192:443

Request

GET / HTTP/2.0
host: archive.today
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: qki=18403256173422398244
priority: u=0, i

Response

HTTP/2.0 301

server: nginx
date: Fri, 16 Jan 2026 03:32:21 GMT
content-length: 0
onion-location: http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/
cache-control: private, no-cache, no-store, must-revalidate, maxage=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
location: https://archive.ph/
access-control-allow-origin: *
set-cookie: qki=13108197459197394873; Max-Age=3600; Domain=.archive.today; Path=/
GET

https://archive.ph/

msedge.exe

Remote address:

103.15.90.192:443

Request

GET / HTTP/2.0
host: archive.ph
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i

Response

HTTP/2.0 429

server: nginx
date: Fri, 16 Jan 2026 03:32:22 GMT
content-type: text/html
content-length: 55757
set-cookie: qki=16996008404618968909; Max-Age=3600; Domain=.archive.ph; Path=/
referrer-policy: no-referrer
access-control-allow-origin: *
GET

https://archive.ph/favicon.ico

msedge.exe

Remote address:

103.15.90.192:443

Request

GET /favicon.ico HTTP/2.0
host: archive.ph
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: qki=16996008404618968909
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:27 GMT
content-type: image/x-icon
content-length: 5430
onion-location: http://archiveiya74codqgiixo33q62qlrqtkgmcitqx5u2oeqnmn5bpcbiyd.onion/favicon.ico
last-modified: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: maxage=600
expires: Fri, 16 Jan 2026 03:42:27 GMT
set-cookie: qki=4017072772047088924; Max-Age=3600; Domain=.archive.ph; Path=/
accept-ranges: bytes
DNS

www.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

172.217.76.99

www.google.com

IN A

172.217.76.105

www.google.com

IN A

172.217.76.147

www.google.com

IN A

172.217.76.106

www.google.com

IN A

172.217.76.104

www.google.com

IN A

172.217.76.103
DNS

www.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN HTTPS

Response

www.google.com

IN HTTPS

prio=1; alpn=h2,h3
GET

https://www.google.com/recaptcha/api.js?hl=en&onload=onloadCallback&render=explicit

msedge.exe

Remote address:

172.217.76.99:443

Request

GET /recaptcha/api.js?hl=en&onload=onloadCallback&render=explicit HTTP/2.0
host: www.google.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
sec-fetch-storage-access: active
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9

Response

HTTP/2.0
DNS

gyrovague.com

msedge.exe

Remote address:

8.8.8.8:53

Request

gyrovague.com

IN A

Response

gyrovague.com

IN A

192.0.78.25

gyrovague.com

IN A

192.0.78.24
DNS

gyrovague.com

msedge.exe

Remote address:

8.8.8.8:53

Request

gyrovague.com

IN HTTPS

Response
GET

https://gyrovague.com/?s=2ef4

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=2ef4 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:24 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=4.0
GET

https://gyrovague.com/?s=jpw

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=jpw HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:24 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=251.0
GET

https://gyrovague.com/?s=8q779r

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=8q779r HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:24 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=215.0
GET

https://gyrovague.com/?s=9mjupqd

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=9mjupqd HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:24 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=305.0
GET

https://gyrovague.com/?s=o9710b8

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=o9710b8 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:24 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=209.0
GET

https://gyrovague.com/?s=2ioj3kv

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=2ioj3kv HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:25 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=284.0
GET

https://gyrovague.com/?s=twuuh

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=twuuh HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:25 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=217.0
GET

https://gyrovague.com/?s=i5ji2iuo

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=i5ji2iuo HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:25 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=245.0
GET

https://gyrovague.com/?s=yznplaen

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=yznplaen HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:26 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=226.0
GET

https://gyrovague.com/?s=94kz

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=94kz HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:26 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=234.0
GET

https://gyrovague.com/?s=9lh80i5d

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=9lh80i5d HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:26 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=226.0
GET

https://gyrovague.com/?s=po4b7uf

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=po4b7uf HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:27 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=257.0
GET

https://gyrovague.com/?s=if4ycleu

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=if4ycleu HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:27 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=259.0
GET

https://gyrovague.com/?s=0hdp2ya

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=0hdp2ya HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:27 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=215.0
GET

https://gyrovague.com/?s=6

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=6 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:27 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=1.0
GET

https://gyrovague.com/?s=c63x1z8j

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=c63x1z8j HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:28 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=216.0
GET

https://gyrovague.com/?s=p9cy

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=p9cy HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:28 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=7xaj

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=7xaj HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:28 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=213.0
GET

https://gyrovague.com/?s=1ez

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=1ez HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:28 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=kh0jor6

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=kh0jor6 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:29 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=218.0
GET

https://gyrovague.com/?s=lr7n01

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=lr7n01 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:29 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=209.0
GET

https://gyrovague.com/?s=z9

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=z9 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:29 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=1.0
GET

https://gyrovague.com/?s=lq

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=lq HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:30 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=1.0
GET

https://gyrovague.com/?s=y

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=y HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:30 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=4.0
GET

https://gyrovague.com/?s=xv

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=xv HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:30 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=rs

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=rs HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:31 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=3.0
GET

https://gyrovague.com/?s=62zn22x

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=62zn22x HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:31 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=223.0
GET

https://gyrovague.com/?s=jy26

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=jy26 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:31 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=269.0
GET

https://gyrovague.com/?s=9zyq3

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=9zyq3 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:32 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=273.0
GET

https://gyrovague.com/?s=i33zf158

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=i33zf158 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:32 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=216.0
GET

https://gyrovague.com/?s=0c8ere

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=0c8ere HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:32 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=256.0
GET

https://gyrovague.com/?s=76q23p10

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=76q23p10 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:33 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=212.0
GET

https://gyrovague.com/?s=k3ggy

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=k3ggy HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:33 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=217.0
GET

https://gyrovague.com/?s=seg2wgs4

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=seg2wgs4 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:33 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=216.0
GET

https://gyrovague.com/?s=koqty87t

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=koqty87t HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:34 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=264.0
GET

https://gyrovague.com/?s=vhyn2q7

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=vhyn2q7 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:34 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=497.0
GET

https://gyrovague.com/?s=m34gy

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=m34gy HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:34 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=215.0
GET

https://gyrovague.com/?s=r9u

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=r9u HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:34 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=2.0
GET

https://gyrovague.com/?s=2

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=2 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:34 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=1.0
GET

https://gyrovague.com/?s=gc

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=gc HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:35 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=1.0
GET

https://gyrovague.com/?s=0i

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=0i HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:35 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=1.0
GET

https://gyrovague.com/?s=6fqd5

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=6fqd5 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:36 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=228.0
GET

https://gyrovague.com/?s=mm

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=mm HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:36 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=uaz

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=uaz HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:36 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=70yeonk

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=70yeonk HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:36 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=218.0
GET

https://gyrovague.com/?s=eythpkq

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=eythpkq HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:37 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=209.0
GET

https://gyrovague.com/?s=r0k93zom

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=r0k93zom HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:38 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=210.0
GET

https://gyrovague.com/?s=g74omu22

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=g74omu22 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:39 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=251.0
GET

https://gyrovague.com/?s=19

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=19 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:40 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=2.0
GET

https://gyrovague.com/?s=1cae8al

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=1cae8al HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:41 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=244.0
GET

https://gyrovague.com/?s=8vsd8dw4

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=8vsd8dw4 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:42 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=222.0
GET

https://gyrovague.com/?s=h

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=h HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:43 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca HIT
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=HIT;dur=3.0
GET

https://gyrovague.com/?s=e6q

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=e6q HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:44 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=9bnvx

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=9bnvx HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:45 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=224.0
GET

https://gyrovague.com/?s=svd

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=svd HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:46 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=2.0
GET

https://gyrovague.com/?s=6pjgeg

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=6pjgeg HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:47 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=226.0
GET

https://gyrovague.com/?s=so7ev

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=so7ev HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:48 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=211.0
GET

https://gyrovague.com/?s=66t1ry0

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=66t1ry0 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:49 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=207.0
GET

https://gyrovague.com/?s=95duzxi0

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=95duzxi0 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:50 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=231.0
GET

https://gyrovague.com/?s=ha0

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=ha0 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:51 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=2.0
GET

https://gyrovague.com/?s=zz20

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=zz20 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:52 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=222.0
GET

https://gyrovague.com/?s=8wb

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=8wb HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:53 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=281.0
GET

https://gyrovague.com/?s=s35

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=s35 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:54 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=ro

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=ro HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:55 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=1.0
GET

https://gyrovague.com/?s=d314252u

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=d314252u HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:56 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=207.0
GET

https://gyrovague.com/?s=e6qx

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=e6qx HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:57 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=274.0
GET

https://gyrovague.com/?s=vx40sta

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=vx40sta HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:58 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=210.0
GET

https://gyrovague.com/?s=nz8s

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=nz8s HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:32:59 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=231.0
GET

https://gyrovague.com/?s=cm3twft4

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=cm3twft4 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:33:00 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=256.0
GET

https://gyrovague.com/?s=ms5

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=ms5 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:33:01 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca STALE
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=STALE;dur=2.0
GET

https://gyrovague.com/?s=s2muwd

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=s2muwd HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0 200

server: nginx
date: Fri, 16 Jan 2026 03:33:02 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=86400
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
link: <https://public-api.wordpress.com/wp-json/?rest_route=/sites/gyrovaguedotcom.wordpress.com>; rel="https://api.w.org/"
vary: accept, content-type
content-encoding: br
x-ac: 2.ams _dca MISS
alt-svc: h3=":443"; ma=86400
server-timing: a8c-cdn, dc;desc=ams, cache;desc=MISS;dur=218.0
GET

https://gyrovague.com/?s=b1

msedge.exe

Remote address:

192.0.78.25:443

Request

GET /?s=b1 HTTP/2.0
host: gyrovague.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i
DNS

www.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN A

Response

www.google.com

IN A

172.217.76.104

www.google.com

IN A

172.217.76.103

www.google.com

IN A

172.217.76.147

www.google.com

IN A

172.217.76.99

www.google.com

IN A

172.217.76.106

www.google.com

IN A

172.217.76.105
DNS

www.google.com

msedge.exe

Remote address:

8.8.8.8:53

Request

www.google.com

IN HTTPS

Response

www.google.com

IN HTTPS

prio=1; alpn=h2,h3
GET

https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&co=aHR0cHM6Ly9hcmNoaXZlLnBoOjQ0Mw..&hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&size=normal&anchor-ms=20000&execute-ms=30000&cb=uolnsb5ag7ha

msedge.exe

Remote address:

172.217.76.104:443

Request

GET /recaptcha/api2/anchor?ar=1&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&co=aHR0cHM6Ly9hcmNoaXZlLnBoOjQ0Mw..&hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&size=normal&anchor-ms=20000&execute-ms=30000&cb=uolnsb5ag7ha HTTP/2.0
host: www.google.com
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-fetch-storage-access: active
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i

Response

HTTP/2.0
GET

https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ

msedge.exe

Remote address:

172.217.76.104:443

Request

GET /recaptcha/api2/webworker.js?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ HTTP/2.0
host: www.google.com
accept: */*
dnt: 1
sec-fetch-site: same-origin
sec-fetch-mode: same-origin
sec-fetch-dest: worker
sec-fetch-storage-access: active
referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&co=aHR0cHM6Ly9hcmNoaXZlLnBoOjQ0Mw..&hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&size=normal&anchor-ms=20000&execute-ms=30000&cb=uolnsb5ag7ha
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0
GET

https://www.google.com/recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg

msedge.exe

Remote address:

172.217.76.104:443

Request

GET /recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg HTTP/2.0
host: www.google.com
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-dest: iframe
sec-fetch-storage-access: active
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=0, i

Response

HTTP/2.0
POST

https://www.google.com/recaptcha/api2/reload?k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ

msedge.exe

Remote address:

172.217.76.104:443

Request

POST /recaptcha/api2/reload?k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ HTTP/2.0
host: www.google.com
content-length: 7953
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
content-type: application/x-protobuffer
sec-ch-ua-mobile: ?0
accept: */*
origin: https://www.google.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=1, i

Response

HTTP/2.0
GET

https://www.google.com/recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ

msedge.exe

Remote address:

172.217.76.104:443

Request

GET /recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ HTTP/2.0
host: www.google.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
sec-fetch-storage-access: active
referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: _GRECAPTCHA=09AKhCRwiPrQywbfLQjKRa-JfpFEJlqEoFHEd7tIL3FtQ4wCwZrQLeIfGRwtn3zvxyzhUgx8uEdtCayaKKFKzeAzw
priority: i

Response

HTTP/2.0
POST

https://www.google.com/recaptcha/api2/replaceimage?k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ

msedge.exe

Remote address:

172.217.76.104:443

Request

POST /recaptcha/api2/replaceimage?k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ HTTP/2.0
host: www.google.com
content-length: 4020
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
content-type: application/x-www-form-urlencoded;charset=UTF-8
sec-ch-ua-mobile: ?0
accept: */*
origin: https://www.google.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: _GRECAPTCHA=09AKhCRwiPrQywbfLQjKRa-JfpFEJlqEoFHEd7tIL3FtQ4wCwZrQLeIfGRwtn3zvxyzhUgx8uEdtCayaKKFKzeAzw
priority: u=1, i

Response

HTTP/2.0
GET

https://www.google.com/recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&id=2

msedge.exe

Remote address:

172.217.76.104:443

Request

GET /recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&id=2 HTTP/2.0
host: www.google.com
sec-ch-ua-platform: "Windows"
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
sec-ch-ua: "Not;A=Brand";v="99", "Microsoft Edge";v="139", "Chromium";v="139"
dnt: 1
sec-ch-ua-mobile: ?0
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
sec-fetch-storage-access: active
referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: _GRECAPTCHA=09AKhCRwiPrQywbfLQjKRa-JfpFEJlqEoFHEd7tIL3FtQ4wCwZrQLeIfGRwtn3zvxyzhUgx8uEdtCayaKKFKzeAzw
priority: i

Response

HTTP/2.0
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN A

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net

edge-microsoft-com.ax-0002.ax-msedge.net

IN CNAME

ax-0002.ax-msedge.net

ax-0002.ax-msedge.net

IN A

150.171.28.11

ax-0002.ax-msedge.net

IN A

150.171.27.11
DNS

edge.microsoft.com

msedge.exe

Remote address:

8.8.8.8:53

Request

edge.microsoft.com

IN HTTPS

Response

edge.microsoft.com

IN CNAME

edge-microsoft-com.ax-0002.ax-msedge.net
GET

https://edge.microsoft.com/autofillservice/core/page/2340191478727402794/2836092787148526681?GroupingThreshold=80&PasswordFieldThreshold=60&CIdAlgoVersion=2

msedge.exe

Remote address:

150.171.28.11:443

Request

GET /autofillservice/core/page/2340191478727402794/2836092787148526681?GroupingThreshold=80&PasswordFieldThreshold=60&CIdAlgoVersion=2 HTTP/2.0
host: edge.microsoft.com
x-client-data: COr7ygE=
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0 200

cache-control: max-age=691200
content-length: 3328
content-type: application/json; charset=utf-8
x-cache: TCP_HIT
x-msedge-ref: Ref A: 8F14A5BD85784DFC89124C5BEF9BD964 Ref B: AMS231032609051 Ref C: 2026-01-16T03:32:25Z
date: Fri, 16 Jan 2026 03:32:24 GMT
DNS

edge-consumer-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-consumer-static.azureedge.net

IN A

Response

edge-consumer-static.azureedge.net

IN CNAME

edge-consumer-static.afd.azureedge.net

edge-consumer-static.afd.azureedge.net

IN CNAME

mr-afd-azuredge.tm-azurefd.net

mr-afd-azuredge.tm-azurefd.net

IN CNAME

shed.dual-low.part-0036.t-0009.t-msedge.net

shed.dual-low.part-0036.t-0009.t-msedge.net

IN CNAME

part-0036.t-0009.t-msedge.net

part-0036.t-0009.t-msedge.net

IN A

13.107.246.64

part-0036.t-0009.t-msedge.net

IN A

13.107.213.64
DNS

edge-consumer-static.azureedge.net

msedge.exe

Remote address:

8.8.8.8:53

Request

edge-consumer-static.azureedge.net

IN HTTPS

Response

edge-consumer-static.azureedge.net

IN CNAME

edge-consumer-static.afd.azureedge.net

edge-consumer-static.afd.azureedge.net

IN CNAME

mr-afd-azuredge.tm-azurefd.net

mr-afd-azuredge.tm-azurefd.net

IN CNAME

shed.dual-low.part-0036.t-0009.t-msedge.net

shed.dual-low.part-0036.t-0009.t-msedge.net

IN CNAME

part-0036.t-0009.t-msedge.net
GET

https://edge-consumer-static.azureedge.net/mouse-gesture/config.json

msedge.exe

Remote address:

13.107.246.64:443

Request

GET /mouse-gesture/config.json HTTP/2.0
host: edge-consumer-static.azureedge.net
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
sec-fetch-storage-access: active
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
priority: u=4, i

Response

HTTP/2.0 200

date: Fri, 16 Jan 2026 03:32:36 GMT
content-type: application/json
content-length: 101
last-modified: Tue, 24 Oct 2023 08:27:00 GMT
etag: 0x8DBD46AFE482320
x-ms-request-id: 5e4e1e2a-101e-0011-01d3-8528c3000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20260116T033236Z-155869f5c8bt4k7chC1AMS3kvc00000018dg000000000n1m
x-fd-int-roxy-purgeid: 0
x-cache: TCP_HIT
accept-ranges: bytes
DNS

update.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

update.googleapis.com

IN A

Response

update.googleapis.com

IN A

172.217.76.94
DNS

update.googleapis.com

msedge.exe

Remote address:

8.8.8.8:53

Request

update.googleapis.com

IN HTTPS

Response
POST

https://update.googleapis.com/service/update2/json?cup2key=15:tbTG02ulO5bAXmGUE8sS_pvXXgiKIZKoNXK3yFFbRKk&cup2hreq=de706f7a71e9f94d417cd5b74b2cbf22b7b504414a259c4c5ea8e44e191a5e12

msedge.exe

Remote address:

172.217.76.94:443

Request

POST /service/update2/json?cup2key=15:tbTG02ulO5bAXmGUE8sS_pvXXgiKIZKoNXK3yFFbRKk&cup2hreq=de706f7a71e9f94d417cd5b74b2cbf22b7b504414a259c4c5ea8e44e191a5e12 HTTP/2.0
host: update.googleapis.com
content-length: 914
x-goog-update-appid: ghbmnnjooekpmoecnnnilnnbdlolhkhi
x-goog-update-interactivity: bg
x-goog-update-updater: chromiumcrx-139.0.3405.125
content-type: application/json
sec-mesh-client-edge-version: 139.0.3405.125
sec-mesh-client-edge-channel: stable
sec-mesh-client-os: Windows
sec-mesh-client-os-version: 10.0.19041
sec-mesh-client-arch: x86_64
sec-mesh-client-webview: 0
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
priority: u=4, i

Response

HTTP/2.0
DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

ax-0001.ax-msedge.net

ax-0001.ax-msedge.net

IN A

150.171.28.10

ax-0001.ax-msedge.net

IN A

150.171.27.10
GET

https://tse1.mm.bing.net/th?id=OADD2.1353498866334133_1CZOZBWMWI3HX22&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.28.10:443

Request

GET /th?id=OADD2.1353498866334133_1CZOZBWMWI3HX22&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 703279
content-type: image/jpeg
x-cache: TCP_HIT
httpcacheability: 4
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=nadatio"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
x-powered-by: ASP.NET
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 32AAFB849FC842D49F1E4ED1EAE141BA Ref B: AMS231020512033 Ref C: 2026-01-16T03:32:45Z
date: Fri, 16 Jan 2026 03:32:45 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.1360095926962747_1GZUUMPSJVYMUHN&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

Remote address:

150.171.28.10:443

Request

GET /th?id=OADD2.1360095926962747_1GZUUMPSJVYMUHN&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 552399
content-type: image/jpeg
x-cache: TCP_HIT
httpcacheability: 4
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=nadatio"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
x-powered-by: ASP.NET
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0604E02D25D84F4A9C8E23760662CE10 Ref B: AMS231020512033 Ref C: 2026-01-16T03:32:45Z
date: Fri, 16 Jan 2026 03:32:45 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.1357896912993369_1UA0VE63S988KAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.28.10:443

Request

GET /th?id=OADD2.1357896912993369_1UA0VE63S988KAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 700026
content-type: image/jpeg
x-cache: TCP_HIT
httpcacheability: 4
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=nadatio"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
x-powered-by: ASP.NET
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BB123F9B2B654888ADB4319DF40D76BF Ref B: AMS231020512033 Ref C: 2026-01-16T03:32:45Z
date: Fri, 16 Jan 2026 03:32:45 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.1356797392114312_1M3KCBFME6NPDAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

Remote address:

150.171.28.10:443

Request

GET /th?id=OADD2.1356797392114312_1M3KCBFME6NPDAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 479168
content-type: image/jpeg
x-cache: TCP_HIT
httpcacheability: 4
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=nadatio"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
x-powered-by: ASP.NET
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 8C2F69E7F53542DB97831EE0DA68EEF5 Ref B: AMS231020512033 Ref C: 2026-01-16T03:32:45Z
date: Fri, 16 Jan 2026 03:32:45 GMT

150.171.28.11:80

http://edge.microsoft.com/browsernetworktime/time/1/current?cup2key=2:YDakiXWcDGQPgK95hd4P_LGk-MFmMpWl-YX1q14rzl8&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

http

msedge.exe

838 B
1.0kB
4
4

HTTP Request

GET http://edge.microsoft.com/browsernetworktime/time/1/current?cup2key=2:YDakiXWcDGQPgK95hd4P_LGk-MFmMpWl-YX1q14rzl8&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Response

200
150.171.27.11:443

edge.microsoft.com

tls

msedge.exe

2.0kB
172 B
5
4
104.18.22.222:443

copilot.microsoft.com

tls

msedge.exe

2.0kB
172 B
5
4
103.15.90.192:443

archive.today

tls

msedge.exe

2.0kB
212 B
5
5
103.15.90.192:80

archive.today

msedge.exe

144 B
132 B
3
3
103.15.90.192:80

archive.today

msedge.exe

144 B
132 B
3
3
103.15.90.192:443

archive.today

tls

msedge.exe

2.0kB
212 B
5
5
104.18.22.222:443

copilot.microsoft.com

tls

msedge.exe

2.0kB
172 B
5
4
150.171.27.11:443

edge.microsoft.com

tls

msedge.exe

2.0kB
172 B
5
4
103.15.90.192:443

https://archive.today/

tls, http2

msedge.exe

3.0kB
3.3kB
12
13

HTTP Request

GET https://archive.today/

HTTP Response

301
104.18.22.222:443

https://copilot.microsoft.com/c/api/user/eligibility

tls, http2

msedge.exe

2.9kB
8.7kB
13
17

HTTP Request

GET https://copilot.microsoft.com/c/api/user/eligibility

HTTP Response

200
150.171.27.11:443

https://edge.microsoft.com/serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1767216018&clientversion=139.0.3405.125&experimentationmode=2&scpguard=0&scpfull=0&scpver=0

tls, http2

msedge.exe

3.2kB
7.9kB
12
15

HTTP Request

GET https://edge.microsoft.com/serviceexperimentation/v3/?osname=win&channel=stable&osver=10.0.19041&devicefamily=desktop&installdate=1767216018&clientversion=139.0.3405.125&experimentationmode=2&scpguard=0&scpfull=0&scpver=0

HTTP Response

200
103.15.90.192:443

archive.ph

tls

msedge.exe

2.1kB
252 B
6
6
103.15.90.192:443

archive.ph

tls

msedge.exe

2.0kB
252 B
6
6
103.15.90.192:80

http://archive.today/

http

msedge.exe

668 B
573 B
4
4

HTTP Request

GET http://archive.today/

HTTP Response

302
80.239.150.48:443

https://www.bing.com/th?id=OADD2.10239338869416_1XRO25625EPP8REW1&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90

tls, http

1.3kB
6.1kB
13
11

HTTP Request

GET https://www.bing.com/th?id=OADD2.10239338869416_1XRO25625EPP8REW1&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=24&h=24&dynsize=1&qlt=90

HTTP Response

200
80.239.150.74:443

www.bing.com

tls

msedge.exe

2.0kB
172 B
5
4
150.171.27.11:443

edge.microsoft.com

tls

msedge.exe

2.0kB
172 B
5
4
150.171.27.11:443

edge.microsoft.com

tls

msedge.exe

2.0kB
212 B
5
5
80.239.150.74:443

www.bing.com

tls

msedge.exe

1.9kB
212 B
5
5
80.239.150.74:443

https://www.bing.com/api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.cashbackEUMarkets,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s

tls, http

msedge.exe

3.0kB
6.8kB
12
14

HTTP Request

GET https://www.bing.com/api/shopping/v1/user/shoppingsettings?EnabledServiceFeaturesv2=edgeServerUX.shopping.cashbackEUMarkets,edgeServerUX.shopping.msEdgeShoppingCashbackDismissTimeout2s

HTTP Response

200
150.171.27.11:443

https://edge.microsoft.com/abusiveadblocking/api/v1/blocklist

tls, http2

msedge.exe

3.0kB
7.4kB
12
16

HTTP Request

GET https://edge.microsoft.com/abusiveadblocking/api/v1/blocklist

HTTP Response

304
150.171.27.11:443

https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

tls, http2

msedge.exe

3.5kB
7.6kB
13
16

HTTP Request

GET https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=domains_config_gz&version=3.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

HTTP Response

200
150.171.27.11:443

https://edge.microsoft.com/extensionwebstorebase/v1/crx

tls, http2

msedge.exe

5.3kB
8.9kB
19
24

HTTP Request

GET https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=arbitration_priority_list&version=31.*.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

HTTP Request

GET https://edge.microsoft.com/entityextractiontemplates/api/v1/assets/find-assets?name=edge_hub_apps_manifest_gz&version=4.11.*&channel=stable&key=d414dd4f9db345fa8003e32adc81b362

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://edge.microsoft.com/extensionwebstorebase/v1/crx

HTTP Response

200
13.107.213.64:443

https://edgeassetservice.azureedge.net/assets/domains_config_gz/3.0.12/asset?assetgroup=EntityExtractionDomainsConfig

tls, http2

msedge.exe

4.3kB
30.1kB
25
38

HTTP Request

GET https://edgeassetservice.azureedge.net/assets/domains_config_gz/3.0.12/asset?assetgroup=EntityExtractionDomainsConfig

HTTP Response

200
103.15.90.192:443

https://archive.today/

tls, http2

msedge.exe

3.1kB
3.4kB
13
14

HTTP Request

GET https://archive.today/

HTTP Response

301
103.15.90.192:443

https://archive.ph/favicon.ico

tls, http2

msedge.exe

4.5kB
67.6kB
40
66

HTTP Request

GET https://archive.ph/

HTTP Response

429

HTTP Request

GET https://archive.ph/favicon.ico

HTTP Response

200
172.217.76.99:443

https://www.google.com/recaptcha/api.js?hl=en&onload=onloadCallback&render=explicit

tls, http2

msedge.exe

3.0kB
8.7kB
14
18

HTTP Request

GET https://www.google.com/recaptcha/api.js?hl=en&onload=onloadCallback&render=explicit

HTTP Response
192.0.78.25:443

https://gyrovague.com/?s=b1

tls, http2

msedge.exe

41.1kB
1.5MB
718
1280

HTTP Request

GET https://gyrovague.com/?s=2ef4

HTTP Request

GET https://gyrovague.com/?s=jpw

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=8q779r

HTTP Request

GET https://gyrovague.com/?s=9mjupqd

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=o9710b8

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=2ioj3kv

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=twuuh

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=i5ji2iuo

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=yznplaen

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=94kz

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=9lh80i5d

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=po4b7uf

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=if4ycleu

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=0hdp2ya

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=6

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=c63x1z8j

HTTP Request

GET https://gyrovague.com/?s=p9cy

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=7xaj

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=1ez

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=kh0jor6

HTTP Request

GET https://gyrovague.com/?s=lr7n01

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=z9

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=lq

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=y

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=xv

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=rs

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=62zn22x

HTTP Request

GET https://gyrovague.com/?s=jy26

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=9zyq3

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=i33zf158

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=0c8ere

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=76q23p10

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=k3ggy

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=seg2wgs4

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=koqty87t

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=vhyn2q7

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=m34gy

HTTP Request

GET https://gyrovague.com/?s=r9u

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=2

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=gc

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=0i

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=6fqd5

HTTP Request

GET https://gyrovague.com/?s=mm

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=uaz

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=70yeonk

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=eythpkq

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=r0k93zom

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=g74omu22

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=19

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=1cae8al

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=8vsd8dw4

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=h

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=e6q

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=9bnvx

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=svd

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=6pjgeg

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=so7ev

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=66t1ry0

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=95duzxi0

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=ha0

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=zz20

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=8wb

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=s35

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=ro

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=d314252u

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=e6qx

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=vx40sta

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=nz8s

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=cm3twft4

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=ms5

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=s2muwd

HTTP Response

200

HTTP Request

GET https://gyrovague.com/?s=b1
192.0.78.25:443

gyrovague.com

tls

msedge.exe

2.0kB
172 B
5
4
172.217.76.104:443

https://www.google.com/recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&id=2

tls, http2

msedge.exe

21.0kB
185.1kB
97
163

HTTP Request

GET https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&co=aHR0cHM6Ly9hcmNoaXZlLnBoOjQ0Mw..&hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&size=normal&anchor-ms=20000&execute-ms=30000&cb=uolnsb5ag7ha

HTTP Response

HTTP Request

GET https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ

HTTP Response

HTTP Request

GET https://www.google.com/recaptcha/api2/bframe?hl=en&v=PoyoqOPhxBO7pBk68S4YbpHZ&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&bft=0dAFcWeA4uXjgbRF49mGidpbMyFMFizvNAN8ZonwJNHEEQIXsy0oqQRbNyTIRNJfTaQdW9YBQIcjNm6glanAiNgGb0EwNB4rQ8Tg

HTTP Response

HTTP Request

POST https://www.google.com/recaptcha/api2/reload?k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ

HTTP Response

HTTP Request

GET https://www.google.com/recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ

HTTP Response

HTTP Request

POST https://www.google.com/recaptcha/api2/replaceimage?k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ

HTTP Request

GET https://www.google.com/recaptcha/api2/payload?p=06AFcWeA48efA59VAboNUp1DjVuzIWOufUU3ur-6CP7Tm6KBGq4UQcS2S1fU4dyl1_Jj8RVrby_TeTcOcfCmB4BFTW4PlAEiesMhWJa6Q9acsLSOhnRpTgFR4GhafPBP9qjwfupEcyF8OoVQc02h5X3aoxn27VTUazS6FZnqj7ZsMs41fNMtK3jH0uF0136DR84wjUJ9J9Lj8q2_PLHqTKhWInvbYGdro6-Q&k=6LeQbtsSAAAAAHevV56qhVr_0JhQI7N-zTPoOoWJ&id=2

HTTP Response

HTTP Response
150.171.28.11:443

https://edge.microsoft.com/autofillservice/core/page/2340191478727402794/2836092787148526681?GroupingThreshold=80&PasswordFieldThreshold=60&CIdAlgoVersion=2

tls, http2

msedge.exe

3.1kB
10.7kB
15
18

HTTP Request

GET https://edge.microsoft.com/autofillservice/core/page/2340191478727402794/2836092787148526681?GroupingThreshold=80&PasswordFieldThreshold=60&CIdAlgoVersion=2

HTTP Response

200
13.107.246.64:443

https://edge-consumer-static.azureedge.net/mouse-gesture/config.json

tls, http2

msedge.exe

3.4kB
6.5kB
13
16

HTTP Request

GET https://edge-consumer-static.azureedge.net/mouse-gesture/config.json

HTTP Response

200
172.217.76.94:443

https://update.googleapis.com/service/update2/json?cup2key=15:tbTG02ulO5bAXmGUE8sS_pvXXgiKIZKoNXK3yFFbRKk&cup2hreq=de706f7a71e9f94d417cd5b74b2cbf22b7b504414a259c4c5ea8e44e191a5e12

tls, http2

msedge.exe

4.2kB
8.7kB
14
18

HTTP Request

POST https://update.googleapis.com/service/update2/json?cup2key=15:tbTG02ulO5bAXmGUE8sS_pvXXgiKIZKoNXK3yFFbRKk&cup2hreq=de706f7a71e9f94d417cd5b74b2cbf22b7b504414a259c4c5ea8e44e191a5e12

HTTP Response
150.171.28.10:443

tse1.mm.bing.net

tls, http2

1.1kB
6.9kB
13
11
150.171.28.10:443

tse1.mm.bing.net

tls, http2

1.1kB
6.9kB
14
12
150.171.28.10:443

https://tse1.mm.bing.net/th?id=OADD2.1356797392114312_1M3KCBFME6NPDAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

tls, http2

83.7kB
2.5MB
1794
1789

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.1353498866334133_1CZOZBWMWI3HX22&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.1360095926962747_1GZUUMPSJVYMUHN&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.1357896912993369_1UA0VE63S988KAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.1356797392114312_1M3KCBFME6NPDAE&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
150.171.28.10:443

tse1.mm.bing.net

tls, http2

1.1kB
6.9kB
13
11

8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
164 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.28.11

150.171.27.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
165 B
1
1

DNS Request

edge.microsoft.com
8.8.8.8:53

archive.today

dns

msedge.exe

59 B
75 B
1
1

DNS Request

archive.today

DNS Response

103.15.90.192
8.8.8.8:53

archive.today

dns

msedge.exe

59 B
116 B
1
1

DNS Request

archive.today
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
164 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.27.11

150.171.28.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
179 B
1
1

DNS Request

edge.microsoft.com
8.8.8.8:53

archive.today

dns

msedge.exe

59 B
75 B
1
1

DNS Request

archive.today

DNS Response

103.15.90.192
8.8.8.8:53

archive.today

dns

msedge.exe

59 B
116 B
1
1

DNS Request

archive.today
8.8.8.8:53

copilot.microsoft.com

dns

msedge.exe

67 B
207 B
1
1

DNS Request

copilot.microsoft.com

DNS Response

104.18.22.222

104.18.23.222
8.8.8.8:53

copilot.microsoft.com

dns

msedge.exe

67 B
248 B
1
1

DNS Request

copilot.microsoft.com
104.18.22.222:443

copilot.microsoft.com

quic

msedge.exe

7.7kB
6
8.8.8.8:53

archive.ph

dns

msedge.exe

56 B
72 B
1
1

DNS Request

archive.ph

DNS Response

103.15.90.192
8.8.8.8:53

archive.ph

dns

msedge.exe

56 B
103 B
1
1

DNS Request

archive.ph
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
164 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.27.11

150.171.28.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
165 B
1
1

DNS Request

edge.microsoft.com
224.0.0.251:5353

msedge.exe

204 B
3
8.8.8.8:53

edgeassetservice.azureedge.net

dns

msedge.exe

76 B
252 B
1
1

DNS Request

edgeassetservice.azureedge.net

DNS Response

13.107.213.64

13.107.246.64
8.8.8.8:53

edgeassetservice.azureedge.net

dns

msedge.exe

76 B
280 B
1
1

DNS Request

edgeassetservice.azureedge.net
8.8.8.8:53

www.google.com

dns

msedge.exe

60 B
156 B
1
1

DNS Request

www.google.com

DNS Response

172.217.76.99

172.217.76.105

172.217.76.147

172.217.76.106

172.217.76.104

172.217.76.103
8.8.8.8:53

www.google.com

dns

msedge.exe

60 B
85 B
1
1

DNS Request

www.google.com
172.217.76.99:443

www.google.com

quic

msedge.exe

7.7kB
6
8.8.8.8:53

gyrovague.com

dns

msedge.exe

59 B
91 B
1
1

DNS Request

gyrovague.com

DNS Response

192.0.78.25

192.0.78.24
8.8.8.8:53

gyrovague.com

dns

msedge.exe

59 B
120 B
1
1

DNS Request

gyrovague.com
192.0.78.25:443

gyrovague.com

quic

msedge.exe

7.7kB
6
8.8.8.8:53

www.google.com

dns

msedge.exe

60 B
156 B
1
1

DNS Request

www.google.com

DNS Response

172.217.76.104

172.217.76.103

172.217.76.147

172.217.76.99

172.217.76.106

172.217.76.105
8.8.8.8:53

www.google.com

dns

msedge.exe

60 B
85 B
1
1

DNS Request

www.google.com
172.217.76.104:443

www.google.com

quic

msedge.exe

7.7kB
6
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
164 B
1
1

DNS Request

edge.microsoft.com

DNS Response

150.171.28.11

150.171.27.11
8.8.8.8:53

edge.microsoft.com

dns

msedge.exe

64 B
165 B
1
1

DNS Request

edge.microsoft.com
172.217.76.104:443

www.google.com

quic

msedge.exe

7.7kB
6
8.8.8.8:53

edge-consumer-static.azureedge.net

dns

msedge.exe

80 B
260 B
1
1

DNS Request

edge-consumer-static.azureedge.net

DNS Response

13.107.246.64

13.107.213.64
8.8.8.8:53

edge-consumer-static.azureedge.net

dns

msedge.exe

80 B
288 B
1
1

DNS Request

edge-consumer-static.azureedge.net
8.8.8.8:53

update.googleapis.com

dns

msedge.exe

67 B
83 B
1
1

DNS Request

update.googleapis.com

DNS Response

172.217.76.94
8.8.8.8:53

update.googleapis.com

dns

msedge.exe

67 B
124 B
1
1

DNS Request

update.googleapis.com
8.8.8.8:53

tse1.mm.bing.net

dns

62 B
170 B
1
1

DNS Request

tse1.mm.bing.net

DNS Response

150.171.28.10

150.171.27.10

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
27bbcb6da1e60afcacf415693c0fa9ba

SHA1
138746a1e420eaf2bc91df7bf3d81f8059ecf492

SHA256
80afdd9e9ca30356a7d4014d9a9192d9e2d5d610434334ed62573d20c1ac0570

SHA512
89d7c031c215a0ff1bec5af4f007abba67225b887753eab20141772bd96a4727d0d720d0b06b9b2ec120f9d560948774178117116466afb4fe8eb8947d99498a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
2a45f4fbb143ce089ee4c6f1a0c00a93

SHA1
d83cb466891b27c92610db46fc4e78063cb7860c

SHA256
75a010b31787b9df7ff5a3520fde8550780d2d163d883665dc95653afe04307b

SHA512
835afa6be58f507215a772904ac9172f9e6dbcd59bed9602f51c2c591c8f78d591f40b8f5bb662516c7fd76dbb2aa04b32d1838aadd83cefbc6adba7c73966d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering

Filesize
6B

MD5
377d072e137022223a370760763420bb

SHA1
534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7

SHA256
4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00

SHA512
d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
b7b84636974acd8ab6b6d15b83a264b6

SHA1
6094e5d7ce9f59c46e0033e64891d16bd4bbc0ce

SHA256
1b7e3952a2164d7cf2a95d4baecb268bb407ea239507c9b8c96739f565e76ead

SHA512
7fd998ec5dfbb4fce53a8b81cfac36306db031670535c7e1029c38f7c15fa42a96fb7478cd7148665fcd8078208fddca19ae31a78c9b150475eeaaaa27817dd8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c

Filesize
356KB

MD5
765be9bad9f5cb1c26fbda2a0ab4c63d

SHA1
4a8d98432e248a46a81f36d11d7168d9476d5c8b

SHA256
56b39064eeef3efbb00d9dcb7b2d01c361a274cb885d41ac90f4d0c1c769e9c9

SHA512
2cedd09768fbacd7978e184773605c578af42edd6b424e592384a02709769a332f45bba50e859c2a96aa4000f933e8d5aa6c3afc7e4ff6331955f1903959e50a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
2f859a6347c127af076bd832d5947f82

SHA1
d6a88aa56d01e5f956e21c5b6b84f303b9fb057e

SHA256
6b6656be5a61d17dcbad3476a0b97a5524227ce9044c2a1a37992fdf8c8beabf

SHA512
1270f70e827423198c297d6ab835908f904c170106c17303865bf71f8108d8dd51e1f4d7c2b3344d199be31ffaab38ced09a9310426b92b5b637bf40aa97932a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5895a4.TMP

Filesize
3KB

MD5
e84d3079e35352a3fb673b57cbebbe8e

SHA1
7e5cca9bf4e36be2b938d835ccf01f657e96fa2b

SHA256
c24278e2036ed1684b7687ff83ab2f071d8da0e907f9d79abb8097e3a4dc4399

SHA512
efecd6655c6e0298d1ee190fa188570a2ce9c67b31b51580c76c7a4192fb42af95c0db721be120f090b61aa6328d5d1eb1527f0e20f1146d6f315140baab4d2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
108KB

MD5
902622d177776fafc9f85d74f2ab73b8

SHA1
deb767db94129ecffdcd2ff94970687033409107

SHA256
84ab2d00a9c76d63c3edf4fd0139236f6b94e49bd7889e4f5f63f19941bc1ed1

SHA512
d219535bf4fd4b1561c34b2e0c9f3938de8a86a85aba4d19f31b413483d01cb6afe611077620907839f4340475f1468c2097318751aeef4a61c64a75751aea2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
fde22b64b43a59bb824413b5a0e8b080

SHA1
d505fb022672519213163d5d4a2c3e8e1d93f7dd

SHA256
50c35d9d782057c0bec9093e1f9be9bbc62f307480cdca142281611929290d54

SHA512
77d296b83a067cfa960b22098ad64dfa80c1ce1b50cd6ae8e62e9df0272ccb4f0663c4a643a25d62636bc14c3193b28abb34d9edfacdddb27f00a5fcfdf82654

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
1039c5e4557d7ee8a565f13766aab820

SHA1
72cb14eba14ebb9575e7a1dd0829b71fdbe825e4

SHA256
a621fcf9bc873671f4d804bbfabf53f8c8d1b98705693480b2296ed19d7a2db7

SHA512
f0442e339278e80b3605d83cb6851baa731d253cbbef5ab97f0ef158a780ef993e3bd49d898b703744e246510935f4f15a9a58893910b7622370ba1b4bbe3d29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
35KB

MD5
2ac4198fca913e6aa03d429e96e24348

SHA1
890ade6aece18f8adbc2b6992e90de5d64e437c2

SHA256
8cac4cff84183d6f14c711638346c9062ad521d63d000655f7c67e5029a11eae

SHA512
8a2be7ae95f562d722d13b7a52e93e358e6f76e9ee5e195a5115aa69a44c76df4ef85793a1db89787a34e21529fddb7002f913a0355182a437a13c41355ae569

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
23KB

MD5
bbdfee297f1befc3ad82b0134b2c6941

SHA1
a9f421e61ccaf52362cafdaee0869801d6fee4ae

SHA256
6bad7840ac6d9cffbd43bda4e66d4494302b2bdb37a9e3898e1388d89aafd30c

SHA512
455bcab384d570888bf184ee4cf68636bdd98bbe91084f3b2e733f53b118b27b09c66a06ebe8021ee70a4e0d54de98eb322074da76c9e0415ea8d5855f69b09f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
26KB

MD5
09e726be65032dfb8b11ba4590e945d5

SHA1
8487e2ba6504e7cc0fa7e4a2ed1e638dedcd919e

SHA256
eefbafb13db1d0e5f2926c36dc6b58f080e30926d74c0cd1b71962db11632766

SHA512
eae1afe48f733c382a88b4162724a52da964a879bb76e75f7927593417f9f96dbbeda4f491b7100725ea8dd3b104a2f41f880f07058d67ed37b04baee59a46a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
25KB

MD5
a050b644bccabd8abd32366312e2fdf3

SHA1
840d96d482ced3727c0dd26b7dddb03707629aa5

SHA256
1f8c0a782a219b8e72e17afa277ced900b293a809ab22ba6266da79462d963b4

SHA512
e0c57ef713bdca4bcb1f93cb05e51a111de8eba8e7e2495923d27ee3b32b2e14cf2db33b4d663032309af80df3f2c1bbcea729f583f295401af76de595cc7898

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
28KB

MD5
a10d0a427bef9530e0a58ac280c771e9

SHA1
f5a73393ba805b0ffe6bb755f5444b5d0087e699

SHA256
1d321784ff419e108e315acfca2ca8fcd6b80ed5cd163dd0259d44ba057139f1

SHA512
084aed9a54eea7d0ab7c23c94addc2cb3d1cb9c202d0f692739be13030f6a3c39f30d5557cff766bacbedc4a2f977532228dacab064362afcce49ba306914ce2

Download Submit
memory/320-182-0x0000015F542F0000-0x0000015F54439000-memory.dmp

Filesize
1.3MB

Download
memory/320-173-0x0000015F542F0000-0x0000015F54439000-memory.dmp

Filesize
1.3MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request