nginx

HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Fri, 21 Mar 2025 09:13:22 GMT
location: http://survey-smiles.com
server: nginx
set-cookie: sid=bd3344b7-0634-11f0-8e51-7f0a816ead9d; path=/; domain=.162.210.199.85; expires=Wed, 08 Apr 2093 12:27:30 GMT; max-age=2147483647; HttpOnly

HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Thu, 20 Mar 2025 17:25:17 GMT
location: http://dypigu.com/f.php?e=c0rzjqxHcq0iuu%2Bpg%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
server: Cowboy
set-cookie: sid=4a5d8e25-05b0-11f0-b6f9-f084bb8a1b27; path=/; domain=.kiligsuper.com; expires=Tue, 07 Apr 2093 20:39:24 GMT; max-age=2147483647; secure; HttpOnly

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3a:95:9d:ee:55:f2:4f:4e:1c:a8:8b:69:11:08:6c:e0:d1
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Feb 14 03:08:23 2025 GMT
            Not After : May 15 03:08:22 2025 GMT
        Subject: CN=kiligsuper.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:8b:d0:0e:5a:89:49:41:e5:7b:6a:aa:98:
                    e0:fc:97:91:ab:1b:6e:4c:21:50:ba:a5:30:98:65:
                    82:1e:f4:8d:3b:ff:d0:67:37:b5:68:b3:51:bd:dc:
                    73:1c:3e:f4:16:23:4c:59:66:32:ef:19:cd:e7:81:
                    7b:f1:ee:d4:66:cb:20:3d:cd:64:11:7b:6c:17:45:
                    6e:79:94:58:02:95:e1:13:6a:dc:16:6b:40:ba:01:
                    0f:5a:a4:40:0e:8c:27:aa:ae:15:2a:2b:be:9d:91:
                    6c:c9:39:66:da:cf:76:3a:42:1d:bd:db:bf:20:d5:
                    35:0a:56:70:55:cb:36:3b:c3:77:6f:71:c3:f9:e4:
                    e9:cc:6b:ae:bc:6b:c3:cb:c7:5e:8e:05:ac:85:d3:
                    82:01:09:ba:5f:00:af:dc:f2:68:c3:2b:0e:43:1e:
                    05:01:2d:e5:3a:23:15:91:86:ba:9b:40:49:33:cc:
                    ed:0b:e6:52:1d:ff:37:a9:9c:75:4d:65:8d:8e:19:
                    10:66:66:5d:ee:03:24:f7:47:a0:d1:aa:0e:41:14:
                    ed:53:5d:c7:38:3e:66:7b:f9:6b:6c:4c:79:a0:7e:
                    7e:8c:97:87:7d:01:39:8c:fc:68:3f:55:61:ab:c8:
                    64:ad:15:4e:ad:67:08:b6:cc:dc:00:83:ba:08:97:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                5A:88:C8:4C:C4:13:F4:25:7F:CC:3E:9C:4E:E9:26:67:5A:9A:E1:89
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.kiligsuper.com, DNS:kiligsuper.com
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 14 04:06:53.943 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:DC:7E:2C:00:2A:CD:A2:26:EB:D9:0A:
                                46:D5:9D:DE:25:CF:98:D0:86:C3:43:D2:88:FA:9F:01:
                                20:5C:24:6C:4A:02:21:00:CD:8C:BC:C9:6F:88:70:C9:
                                CC:B2:83:EF:D9:6F:27:52:8B:06:74:89:A3:5A:D7:50:
                                27:FD:BE:64:77:91:38:23
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Feb 14 04:06:54.164 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C2:0E:3A:57:43:66:49:DE:19:EF:90:
                                77:15:5E:40:CE:AF:33:31:05:E7:FB:D2:CB:83:D0:48:
                                32:D9:14:8F:64:02:21:00:DE:21:EA:6A:C2:9C:A0:76:
                                AA:BB:AA:B3:B3:F8:3D:FD:37:46:AB:28:44:71:A1:75:
                                94:4D:6D:67:56:D1:BA:C1
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9d:13:68:7d:d3:b1:6b:69:49:ce:de:b5:49:e5:d0:6c:b4:9a:
        1f:5d:63:ce:4f:7b:f1:01:a4:af:91:6d:b2:57:7c:02:aa:fd:
        40:65:1d:99:2b:7e:a7:7a:a5:9f:8a:d5:13:51:f7:48:ba:fc:
        26:77:d1:2c:51:d3:f7:4f:4b:7d:7b:a3:95:28:d2:49:a4:c3:
        ea:34:27:be:08:a8:61:3f:d0:b0:f1:ee:a6:ee:00:19:c6:4b:
        5a:0d:c4:ea:78:37:08:08:b2:d3:8b:b6:ca:98:41:94:0f:7f:
        9a:e8:55:e7:80:03:f4:e3:1c:3e:fc:1c:c6:d6:28:1a:04:71:
        99:12:44:4e:82:fe:cf:26:74:23:c4:99:1e:e8:20:ca:65:66:
        a2:47:0f:bd:11:ff:7a:af:95:45:93:0f:e5:9c:0b:8f:73:58:
        a0:35:6b:9b:f5:eb:86:c6:cc:60:6e:61:b3:15:f7:e0:49:f6:
        36:53:b9:08:ea:4c:d3:76:73:84:4e:0a:53:d5:d5:37:83:db:
        c3:21:9d:0a:fa:d3:df:79:ce:53:9e:97:ed:bd:59:b9:75:e2:
        e6:51:e7:16:35:63:12:ef:77:e9:ba:8e:4c:3f:a7:f4:32:32:
        2a:90:51:95:ea:2e:4c:bf:cf:c4:15:45:43:b7:f3:70:56:6c:
        73:76:a9:45

nginx

HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Fri, 21 Mar 2025 03:00:51 GMT
location: http://survey-smiles.com
server: nginx
set-cookie: sid=b2afaa2b-0600-11f0-9511-bce7182ae1a4; path=/; domain=.162.210.199.85; expires=Wed, 08 Apr 2093 06:14:58 GMT; max-age=2147483647; HttpOnly