www.maxcine.net/tag/war/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tag/war/ HTTP/1.1
Host: www.maxcine.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 28 Oct 2022 15:36:08 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 28 Oct 2022 16:36:08 GMT
Location: https://www.maxcine.net/tag/war/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qt4N4Nyz9oGuk0GKpcD37k6lAmpWPRPSomaQucJWGEUkwwjiqmVFKHUw4ASvxpLDCM75TvPcQHoLnY2ZPDs27irENeqEQEjU7eMetyysOR27BkFmgnUlevNBvOnKMlQduV4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7614becff93db505-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e997bec759570aa0db03e31bf013cc2
948fd8263ab0b40f75eaf9495f76a7f39f39d5f9
853f97990fe10ccb34066b1e73e93dac45794f42fb745b266b6a46b9e26d52e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "853F97990FE10CCB34066B1E73E93DAC45794F42FB745B266B6A46B9E26D52E9"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13488
Expires: Fri, 28 Oct 2022 19:20:57 GMT
Date: Fri, 28 Oct 2022 15:36:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 922281894182eba1fc67c2d8678e3238
e169209341b09bf4f14ebb3fc7c07b03f2121bf1
37516083f7655af68d7e426efca6f9f3709a80318ac7bb8cc492c183916141b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2080
Cache-Control: max-age=152978
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Etag: "635ba15b-1d7"
Expires: Sun, 30 Oct 2022 10:05:47 GMT
Last-Modified: Fri, 28 Oct 2022 09:31:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 922281894182eba1fc67c2d8678e3238
e169209341b09bf4f14ebb3fc7c07b03f2121bf1
37516083f7655af68d7e426efca6f9f3709a80318ac7bb8cc492c183916141b1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2080
Cache-Control: max-age=152978
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Etag: "635ba15b-1d7"
Expires: Sun, 30 Oct 2022 10:05:47 GMT
Last-Modified: Fri, 28 Oct 2022 09:31:07 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 42d84e61e6aa4d3cce623adccfafc3e2
0dba69e98be53c153a6726ff934b2d55feb20d75
2f53662c68c9ea7be85837310861c8007fd039e5e4d8eb8f0d8948d5d1571a03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F53662C68C9EA7BE85837310861C8007FD039E5E4D8EB8F0D8948D5D1571A03"
Last-Modified: Thu, 27 Oct 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15328
Expires: Fri, 28 Oct 2022 19:51:37 GMT
Date: Fri, 28 Oct 2022 15:36:09 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /mU2gOj4j1M3VG2nKvCo+SGrTzhQRTnT6r8YqQIofsqlFcnSDWdxi1fZkbw47EvJ+GlmzF071bo=
x-amz-request-id: 5JTJKB5B7GAZ75Q4
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 28 Oct 2022 14:43:39 GMT
age: 3150
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 28 Oct 2022 15:36:09 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 0421435ff9b8829b900dde14ca853de8
65ad89c6f1e8722f03e8b6008cb2e793e395c767
aa8649ec46248271df0de21f8e72477b3fffdf484fcc049ca4c56b9f6926f741
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=141908
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Etag: "635b7e3d-118"
Expires: Sun, 30 Oct 2022 07:01:17 GMT
Last-Modified: Fri, 28 Oct 2022 07:01:17 GMT
Server: nginx
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 0421435ff9b8829b900dde14ca853de8
65ad89c6f1e8722f03e8b6008cb2e793e395c767
aa8649ec46248271df0de21f8e72477b3fffdf484fcc049ca4c56b9f6926f741
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=141908
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Etag: "635b7e3d-118"
Expires: Sun, 30 Oct 2022 07:01:17 GMT
Last-Modified: Fri, 28 Oct 2022 07:01:17 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ebf576a8883ec7320a5abfe95c1d2abb
11da08de468be30e4cf71bdfa66b0f6d32516476
6366a880d911a4445e2cd2d935836583f84ac79385961c3d9c747484ba373e1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30c5107c8f49f7471978d43d30847010
9f5c74e117f8cd972c5ca0983bc4023910601113
1c4451ea36f959819a5d50296603c2352c380ff89bf8812db857df6b8ac7bf69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0e1b81fcc7a70f4aa2d9951ef290017c
bfa146eb28fbde7c3f7a08a63e5560091938a107
35f4482a0989b04bd4dd86d0895a276cb94309708f45a20804cde74c4890a9e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 6b7c0ce49b8ebb90707ec439581bc979
1affe02f362f59f8acaaa2cc16185fc2942a82cf
99057099a66b378f0825443f175ad6f84a9f69c0abb8f8db546eb348de4facb4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6572
Cache-Control: max-age=152411
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Etag: "635b8d98-1d7"
Expires: Sun, 30 Oct 2022 09:56:20 GMT
Last-Modified: Fri, 28 Oct 2022 08:06:48 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js?ver=55f6c875b3353700998a0f3cf443d943
200 OK 31 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js?ver=55f6c875b3353700998a0f3cf443d943
IP
File type ASCII text, with very long lines (65447)
Hash 7808e0e4b7a714230373852158500533
4a79d18722a68a2f38d52e2d3a11b550bdd30b3c
8ba5796bee6a065b8b31895e7e8d59ba564cfd36d2ce056e327588e67736f054
GET /ajax/libs/jquery/3.6.0/jquery.min.js?ver=55f6c875b3353700998a0f3cf443d943 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Oct 2022 16:24:50 GMT
expires: Sat, 21 Oct 2023 16:24:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
age: 601879
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?ver=55f6c875b3353700998a0f3cf443d943
200 OK 554 B URL HTTP/2 www.google.com/recaptcha/api.js?ver=55f6c875b3353700998a0f3cf443d943
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash 0f4f6d55fc7aaaaf0826a9991ba4b7eb
b66bb6776fcacd2e4508ee7bc25fc73100143f67
4bb19945506416b1845c56e3c1721a3b863908cc26dc92a9677fb1f5efa6cce5
GET /recaptcha/api.js?ver=55f6c875b3353700998a0f3cf443d943 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 28 Oct 2022 15:36:09 GMT
date: Fri, 28 Oct 2022 15:36:09 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 554
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-178278845-45
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-178278845-45
IP
File type ASCII text, with very long lines (1588)
Hash 433ab8537cea05470aa8fcb676926c6e
ee1d42ff0d3fa11d802e11fbf87bd4ed465c59bd
37672b5ad356e0694b47231c6bd0f16c2fd69e89c3b99741600b30f007a5bd6d
GET /gtag/js?id=UA-178278845-45 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 28 Oct 2022 15:36:09 GMT
expires: Fri, 28 Oct 2022 15:36:09 GMT
cache-control: private, max-age=900
last-modified: Fri, 28 Oct 2022 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43609
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ebf576a8883ec7320a5abfe95c1d2abb
11da08de468be30e4cf71bdfa66b0f6d32516476
6366a880d911a4445e2cd2d935836583f84ac79385961c3d9c747484ba373e1c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c14c3f7d8817b44fda85ba769cc83062
bf41520c5a807058748db49621e7d6ee4ecf5729
eb15bf461ab810e1487ece424600f22d33bebc4f438ef6a10927df18dda0d216
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30c5107c8f49f7471978d43d30847010
9f5c74e117f8cd972c5ca0983bc4023910601113
1c4451ea36f959819a5d50296603c2352c380ff89bf8812db857df6b8ac7bf69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d1uzjiv6zzdlbc.cloudfront.net/?ijzud=955202
200 OK 50 kB URL HTTP/2 d1uzjiv6zzdlbc.cloudfront.net/?ijzud=955202
IP
File type Unicode text, UTF-8 text, with very long lines (15952)
Hash d3a0925e9ba6106fef80d482bc036552
d7f7144f75c9009242af4ac1f8605a4cc4671a57
0026f798f65658427a131e27ee67dcea645f2e378a3e406697e284bd4e1f0beb
GET /?ijzud=955202 HTTP/1.1
Host: d1uzjiv6zzdlbc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 49685
date: Fri, 28 Oct 2022 15:36:09 GMT
access-control-allow-origin: *
cache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform
content-encoding: gzip
pragma: no-cache
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 4WN3XZnf0uBn8mvjPEuISz1s44Jews9ZVd2r_w1mo5uSTyVhrtM2vg==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 64bbb62c3c97f3578de9a1504b4b922b
9e214f9d77128675d72ea0db4596123768f5e28b
848ba470e8e1c37f2fac16b6f6144bdc1979708bfc506a1af10d4c6fce8a53d7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "848BA470E8E1C37F2FAC16B6F6144BDC1979708BFC506A1AF10D4C6FCE8A53D7"
Last-Modified: Thu, 27 Oct 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15314
Expires: Fri, 28 Oct 2022 19:51:24 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
sequelswosbird.com/r5s6EhRSlTd5NT3/54354
200 OK 25 B URL HTTP/1.1 sequelswosbird.com/r5s6EhRSlTd5NT3/54354
IP
File type ASCII text, with no line terminators
Hash d488addc5df5fc9b9ff4135bb4e3a823
6ce56f48e851df4d562b43d3bc1269a504ae83fc
d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
Analyzer Verdict Alert quad9 Sinkholed
GET /r5s6EhRSlTd5NT3/54354 HTTP/1.1
Host: sequelswosbird.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 28 Oct 2022 15:36:10 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www.maxcine.net
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sat, 29-Oct-2022 15:36:10 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjMFqg0AURXXSTCOK5UI%2FID9Qk7R2kW3TZdGFHzBY8xIGzDxxJm0mX181ULK5HA6cGwSBeE4hdIdku8m26yx%2FzTbvOWZHYoiiRNLw2bjeK1OfCLLg%2Frf2kD0dNRuI9RviG6uG94R5Ub7cuSmKS9vycjf%2BeDw0etxRIRr51j0O3eRm2nZIP1p9WVbcnt3wYhEZcsp2RHtEu%2Fq7pdVn9YX0304fMsRCW9X1fPEDPzl9oisbUnw4WHJSIPyR4g8Mt0dW; expires=Sat, 29-Oct-2022 15:36:10 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nfkZ7UXaCnE7RU/PwAeVzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tsraYhWjEQqaaurEZJh7cxB9NaY=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e7c509c69e2bda661b3dc7bc90e058df
813b35e54bd70059f8af3729a1216fe4bd37ff71
28cad22970a838ae4c5e65c17549710cec3159cb40921d9ebf33196618041f33
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28CAD22970A838AE4C5E65C17549710CEC3159CB40921D9EBF33196618041F33"
Last-Modified: Wed, 26 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20814
Expires: Fri, 28 Oct 2022 21:23:04 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e7c509c69e2bda661b3dc7bc90e058df
813b35e54bd70059f8af3729a1216fe4bd37ff71
28cad22970a838ae4c5e65c17549710cec3159cb40921d9ebf33196618041f33
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "28CAD22970A838AE4C5E65C17549710CEC3159CB40921D9EBF33196618041F33"
Last-Modified: Wed, 26 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20814
Expires: Fri, 28 Oct 2022 21:23:04 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
sobbingservingcolony.com/33/bd/19/33bd191044d7ee1e120e6f9be14a1aaf.js
403 Forbidden 0 B URL HTTP/1.1 sobbingservingcolony.com/33/bd/19/33bd191044d7ee1e120e6f9be14a1aaf.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /33/bd/19/33bd191044d7ee1e120e6f9be14a1aaf.js HTTP/1.1
Host: sobbingservingcolony.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Server: nginx/1.17.6
Date: Fri, 28 Oct 2022 15:36:10 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
sobbingservingcolony.com/0e/d6/06/0ed606cfb669900d21dd71652d13f00d.js
403 Forbidden 0 B URL HTTP/1.1 sobbingservingcolony.com/0e/d6/06/0ed606cfb669900d21dd71652d13f00d.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /0e/d6/06/0ed606cfb669900d21dd71652d13f00d.js HTTP/1.1
Host: sobbingservingcolony.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Server: nginx/1.17.6
Date: Fri, 28 Oct 2022 15:36:10 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 04ad778dc274bc9f9c74da78592805aa
56fceb158466eee25fb0b2e029eaa558e0f8ccff
6ac61a967a3cf3dae109ae586c84a0ee04f9387c99f62878a99279ebf67cfeef
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6AC61A967A3CF3DAE109AE586C84A0EE04F9387C99F62878A99279EBF67CFEEF"
Last-Modified: Thu, 27 Oct 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17327
Expires: Fri, 28 Oct 2022 20:24:57 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 04ad778dc274bc9f9c74da78592805aa
56fceb158466eee25fb0b2e029eaa558e0f8ccff
6ac61a967a3cf3dae109ae586c84a0ee04f9387c99f62878a99279ebf67cfeef
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6AC61A967A3CF3DAE109AE586C84A0EE04F9387C99F62878A99279EBF67CFEEF"
Last-Modified: Thu, 27 Oct 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17327
Expires: Fri, 28 Oct 2022 20:24:57 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
onsequentlys.xyz/cE5xaWMRLBIEXBFzE08WAiJMTFE2a0MvB0E7CwMKBngLEwccLBJHABwhBA0FAiEfHU0eKwVMUTYGFQMLACwlAjUmORIlIRcEIy01MQ8gHlISFiAdMiUmHio1Bxc3JTUDAjgEUhEWHQYVNAwaXCAcDDwsFBsLIwFXNgo3CjEyG0kgNQgbNz4mBBc0BRMlGSNRICMPKC4hMQAmLTIYKDlYOj0NI1EnJxggKDUXNiMrMjYXJB4MBhkzDSQ4GAUNJiEIIysUHBkwPBc9FgYCOiQLCQ8gJS04O1JALSMxEz0WBgIhJR8VCycmAz0iUxcCIwIhFhkjESUVJVwRBTMfIyY3NntFOxQYLSAeDxYGJx0HKCY/CyIXBxI7K0UsKTgLNw03AQczCDwiNCE6ICslQB4wAiUkDRhQADMbPD40JTo8OhQbaBsaDB4+TC1VQhokWlATF0UZN0M
200 OK 1.2 kB URL HTTP/2 onsequentlys.xyz/cE5xaWMRLBIEXBFzE08WAiJMTFE2a0MvB0E7CwMKBngLEwccLBJHABwhBA0FAiEfHU0eKwVMUTYGFQMLACwlAjUmORIlIRcEIy01MQ8gHlISFiAdMiUmHio1Bxc3JTUDAjgEUhEWHQYVNAwaXCAcDDwsFBsLIwFXNgo3CjEyG0kgNQgbNz4mBBc0BRMlGSNRICMPKC4hMQAmLTIYKDlYOj0NI1EnJxggKDUXNiMrMjYXJB4MBhkzDSQ4GAUNJiEIIysUHBkwPBc9FgYCOiQLCQ8gJS04O1JALSMxEz0WBgIhJR8VCycmAz0iUxcCIwIhFhkjESUVJVwRBTMfIyY3NntFOxQYLSAeDxYGJx0HKCY/CyIXBxI7K0UsKTgLNw03AQczCDwiNCE6ICslQB4wAiUkDRhQADMbPD40JTo8OhQbaBsaDB4+TC1VQhokWlATF0UZN0M
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3043), with no line terminators
Hash 49c50237a4e9258e3969d91f5ba82f88
b1072ff9f2b0c8b88c2e729b6d1cf023c3e8a461
ae2f53f97854d7560e5bfe2abda254a6d64a81398218498a600b0d7c4f65bd79
GET /cE5xaWMRLBIEXBFzE08WAiJMTFE2a0MvB0E7CwMKBngLEwccLBJHABwhBA0FAiEfHU0eKwVMUTYGFQMLACwlAjUmORIlIRcEIy01MQ8gHlISFiAdMiUmHio1Bxc3JTUDAjgEUhEWHQYVNAwaXCAcDDwsFBsLIwFXNgo3CjEyG0kgNQgbNz4mBBc0BRMlGSNRICMPKC4hMQAmLTIYKDlYOj0NI1EnJxggKDUXNiMrMjYXJB4MBhkzDSQ4GAUNJiEIIysUHBkwPBc9FgYCOiQLCQ8gJS04O1JALSMxEz0WBgIhJR8VCycmAz0iUxcCIwIhFhkjESUVJVwRBTMfIyY3NntFOxQYLSAeDxYGJx0HKCY/CyIXBxI7K0UsKTgLNw03AQczCDwiNCE6ICslQB4wAiUkDRhQADMbPD40JTo8OhQbaBsaDB4+TC1VQhokWlATF0UZN0M HTTP/1.1
Host: onsequentlys.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html
content-length: 1189
date: Fri, 28 Oct 2022 15:36:10 GMT
server: openresty/1.17.8.2
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9WGSyIfro8O4nM-yaxLaMees2s3ln6cHtRpsnqL0dYs6gsC9PY9jYw==
X-Firefox-Spdy: h2
slieemem.xyz/T1FhWWxgbgIqURoUCRIiNR8MPF8kECAOBGpjJzwtexU4N1U1ECAISjs4BWRVemRTaV5pIQg9UXxjRyoYLiUUKlF9YVFuSiY/BzZRfXcXZFxhaU9oXGFhRyxRfncVKQ0obFB/HDslDWRdeWdXYFt+YldgX39n
204 No Content 0 B URL HTTP/2 slieemem.xyz/T1FhWWxgbgIqURoUCRIiNR8MPF8kECAOBGpjJzwtexU4N1U1ECAISjs4BWRVemRTaV5pIQg9UXxjRyoYLiUUKlF9YVFuSiY/BzZRfXcXZFxhaU9oXGFhRyxRfncVKQ0obFB/HDslDWRdeWdXYFt+YldgX39n
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /T1FhWWxgbgIqURoUCRIiNR8MPF8kECAOBGpjJzwtexU4N1U1ECAISjs4BWRVemRTaV5pIQg9UXxjRyoYLiUUKlF9YVFuSiY/BzZRfXcXZFxhaU9oXGFhRyxRfncVKQ0obFB/HDslDWRdeWdXYFt+YldgX39n HTTP/1.1
Host: slieemem.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 28 Oct 2022 15:36:10 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b99nspqNYGQaQ6xymCsBNKIb%2B3lSQmPSM%2BbidIalsLH2Rdnf%2FnabPGMrCVByWMJaBY4HNrCq9pkRjPce2Af%2BIKLJALGyzsJdkmK9e%2BaY%2BXL3pbZnmbQo0GG3vyo8xkg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7614beda3de8b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sobbingservingcolony.com/33/bd/19/33bd191044d7ee1e120e6f9be14a1aaf.js
403 Forbidden 0 B URL HTTP/1.1 sobbingservingcolony.com/33/bd/19/33bd191044d7ee1e120e6f9be14a1aaf.js
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /33/bd/19/33bd191044d7ee1e120e6f9be14a1aaf.js HTTP/1.1
Host: sobbingservingcolony.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 403 Forbidden
Server: nginx/1.17.6
Date: Fri, 28 Oct 2022 15:36:10 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
slieemem.xyz/Y0s1aW9MdFYaUgcnWQY2UB10CAMXHmdZWhYcWRkpMQwAOzkmAhMdBgd2DFxaUXsHTx8KLwhaXUU4QQgbFjgIWEkKJVMGUkU9CFlBW2UEWUFTbUBUXkU/RQgIXnoTGRsXJwhYWVV9DF5eUH0MWl9W
204 No Content 0 B URL HTTP/2 slieemem.xyz/Y0s1aW9MdFYaUgcnWQY2UB10CAMXHmdZWhYcWRkpMQwAOzkmAhMdBgd2DFxaUXsHTx8KLwhaXUU4QQgbFjgIWEkKJVMGUkU9CFlBW2UEWUFTbUBUXkU/RQgIXnoTGRsXJwhYWVV9DF5eUH0MWl9W
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Y0s1aW9MdFYaUgcnWQY2UB10CAMXHmdZWhYcWRkpMQwAOzkmAhMdBgd2DFxaUXsHTx8KLwhaXUU4QQgbFjgIWEkKJVMGUkU9CFlBW2UEWUFTbUBUXkU/RQgIXnoTGRsXJwhYWVV9DF5eUH0MWl9W HTTP/1.1
Host: slieemem.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
date: Fri, 28 Oct 2022 15:36:10 GMT
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4w5sEW%2BMPCIS0ThLH5U%2B2Lw1hi3PIDZ4zqjvS1BS8DKevXkOJM%2Bv767kb9AyVFuf9lExl0NChAHUUcpXPPx2zRRF91E9kOP0BMIN6zB1QCpr4pdnqGvMTLA4aLuEQ9A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7614beda3dedb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 8.7 kB IP
ASN #20940 Akamai International B.V.
Hash 0e976e4a2fcc1af82fa4e8750f9e0157
1ded0586562c201a824305ec3ed4b0997e3ee8a2
00376f463c223ddf723518d2555b88237b9d0bfde9bf5f3153f316af72660621
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6AC61A967A3CF3DAE109AE586C84A0EE04F9387C99F62878A99279EBF67CFEEF"
Last-Modified: Thu, 27 Oct 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17327
Expires: Fri, 28 Oct 2022 20:24:57 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e63a6e99afc26edeaa6e0ec14ea98868
6909f81a74cb2479794f87397c2c9f7bbe759721
af5090a668f3b5293473c111761ca086d6e77a40cd9b5022d669327736034a4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 28 Oct 2022 14:41:09 GMT
expires: Fri, 28 Oct 2022 16:41:09 GMT
cache-control: public, max-age=7200
age: 3301
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 95fdbbb7a88ffbb35742af1ca111aaf4
6e0528e1c102ea6b72c7c1856712bcc6b95750b7
bb1e0405e1598b2dcdf3f2dbf2612b91a84136a05ee17119cb6d75ed6fb29467
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BB1E0405E1598B2DCDF3F2DBF2612B91A84136A05EE17119CB6D75ED6FB29467"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2240
Expires: Fri, 28 Oct 2022 16:13:30 GMT
Date: Fri, 28 Oct 2022 15:36:10 GMT
Connection: keep-alive
www.gstatic.com/recaptcha/releases/NJPGLzpIZgjszqyOymHUP0XR/recaptcha__en.js
200 OK 161 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/NJPGLzpIZgjszqyOymHUP0XR/recaptcha__en.js
IP
File type ASCII text, with very long lines (692)
Size 161 kB (161443 bytes)
Hash f08dc1af68358a3cfc29cc0f7ed68597
bcc7efc80663dd060d7e9e7513994439c0e59a68
01ceb7d3a7706a69ecefbc7863914626ccde29859326c51f98e236bea8242767
GET /recaptcha/releases/NJPGLzpIZgjszqyOymHUP0XR/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.maxcine.net
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 161443
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 28 Oct 2022 12:10:28 GMT
expires: Sat, 28 Oct 2023 12:10:28 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 24 Oct 2022 04:01:21 GMT
content-type: text/javascript
age: 12342
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=1206169820&t=pageview&_s=1&dl=https%3A%2F%2Fwww.maxcine.net%2Ftag%2Fwar%2F&ul=en-us&de=UTF-8&dt=%E2%96%B7%20Ver%20peliculas%20de%20War%20-%20Maxcine%C2%AE%20-%20Ver%20pel%C3%ADculas%20Online%20en%20casa&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=16042769&gjid=1264817912&cid=399233222.1666971370&tid=UA-178278845-45&_gid=995855122.1666971370&_r=1>m=2ouaq0&z=1093374249
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1206169820&t=pageview&_s=1&dl=https%3A%2F%2Fwww.maxcine.net%2Ftag%2Fwar%2F&ul=en-us&de=UTF-8&dt=%E2%96%B7%20Ver%20peliculas%20de%20War%20-%20Maxcine%C2%AE%20-%20Ver%20pel%C3%ADculas%20Online%20en%20casa&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=16042769&gjid=1264817912&cid=399233222.1666971370&tid=UA-178278845-45&_gid=995855122.1666971370&_r=1>m=2ouaq0&z=1093374249
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&a=1206169820&t=pageview&_s=1&dl=https%3A%2F%2Fwww.maxcine.net%2Ftag%2Fwar%2F&ul=en-us&de=UTF-8&dt=%E2%96%B7%20Ver%20peliculas%20de%20War%20-%20Maxcine%C2%AE%20-%20Ver%20pel%C3%ADculas%20Online%20en%20casa&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=16042769&gjid=1264817912&cid=399233222.1666971370&tid=UA-178278845-45&_gid=995855122.1666971370&_r=1>m=2ouaq0&z=1093374249 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.maxcine.net
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.maxcine.net
date: Fri, 28 Oct 2022 15:36:10 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e63a6e99afc26edeaa6e0ec14ea98868
6909f81a74cb2479794f87397c2c9f7bbe759721
af5090a668f3b5293473c111761ca086d6e77a40cd9b5022d669327736034a4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 28 Oct 2022 15:36:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d1uzjiv6zzdlbc.cloudfront.net/HdjhpbTkVVwcLBgJRDVAAQw1bXQtQUhoCVwYFLVsLIm1aXlovDBk5ClBMEwkERh4FDFcRBU8IVxUFWEtYElpUWR8CSAYGBANWDQhfH1YMCR8DWVQAVgxRBQFYUwovWBdGHVtdEQFRBwlWAUtMXwkYTExfCUcIR10cRXpMXwkBUQdbDVMLK0gLRkBfWRxFek-xfCQROTF54RwhcQwlfHVtdXhNbAgIcRH5bXQhGCFhdCFMKWQtQBF0PAkFTCi9cCUMWWUtMSwk
200 OK 354 B URL HTTP/2 d1uzjiv6zzdlbc.cloudfront.net/HdjhpbTkVVwcLBgJRDVAAQw1bXQtQUhoCVwYFLVsLIm1aXlovDBk5ClBMEwkERh4FDFcRBU8IVxUFWEtYElpUWR8CSAYGBANWDQhfH1YMCR8DWVQAVgxRBQFYUwovWBdGHVtdEQFRBwlWAUtMXwkYTExfCUcIR10cRXpMXwkBUQdbDVMLK0gLRkBfWRxFek-xfCQROTF54RwhcQwlfHVtdXhNbAgIcRH5bXQhGCFhdCFMKWQtQBF0PAkFTCi9cCUMWWUtMSwk
IP
File type ASCII text, with very long lines (441), with no line terminators
Hash bfc491ccdd4be0a166cec3498016a582
60604dd825bf3588a23b28de0c927ed0adfe59bc
7d57ca55fd61a09f69f28d09196758ea832c80d4e462023ba25fa939283a1675
GET /HdjhpbTkVVwcLBgJRDVAAQw1bXQtQUhoCVwYFLVsLIm1aXlovDBk5ClBMEwkERh4FDFcRBU8IVxUFWEtYElpUWR8CSAYGBANWDQhfH1YMCR8DWVQAVgxRBQFYUwovWBdGHVtdEQFRBwlWAUtMXwkYTExfCUcIR10cRXpMXwkBUQdbDVMLK0gLRkBfWRxFek-xfCQROTF54RwhcQwlfHVtdXhNbAgIcRH5bXQhGCFhdCFMKWQtQBF0PAkFTCi9cCUMWWUtMSwk HTTP/1.1
Host: d1uzjiv6zzdlbc.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://onsequentlys.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 354
date: Fri, 28 Oct 2022 15:36:10 GMT
access-control-allow-origin: *
cache-control: max-age=31556926
content-encoding: gzip
x-cache: Miss from cloudfront
via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: jT4BCWFK2_mQ7L5OvQ0i6G_c5qmVXL4rFb1suq-0awJhp8vda55Qfw==
X-Firefox-Spdy: h2
pogothere.xyz/
200 OK 24 kB IP
File type ASCII text, with no line terminators
Hash 32de1c5f11bfa45f3734d01da7542aaa
be6006226adcb4bef3d065209ede5e3891792e6d
b42b853ec58410fced69e21278e7680b9507ab65dc23e04e3eaac3a2c90b1661
GET / HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.maxcine.net/
Origin: https://www.maxcine.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 15:36:10 GMT
content-type: text/plain
set-cookie: csu=1413686891535711@1@1666971370; Max-Age=31104000; Secure; SameSite=None
access-control-allow-origin: https://www.maxcine.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5zOjgA3dYqxrYHRTLHy%2BeNw1ll0xaiCJqPCiXbIZjDGg%2Bo5TD%2FVHVemtzJgVswkzDfpqi07XYKsxjPqK1E1P3s92n33I7Q9fXGi0RzwlokVZeXivvwitZ9UlksHSExD1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7614bedb9af67749-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 95fdbbb7a88ffbb35742af1ca111aaf4
6e0528e1c102ea6b72c7c1856712bcc6b95750b7
bb1e0405e1598b2dcdf3f2dbf2612b91a84136a05ee17119cb6d75ed6fb29467
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "BB1E0405E1598B2DCDF3F2DBF2612B91A84136A05EE17119CB6D75ED6FB29467"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2239
Expires: Fri, 28 Oct 2022 16:13:30 GMT
Date: Fri, 28 Oct 2022 15:36:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3261
Expires: Fri, 28 Oct 2022 16:30:32 GMT
Date: Fri, 28 Oct 2022 15:36:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3261
Expires: Fri, 28 Oct 2022 16:30:32 GMT
Date: Fri, 28 Oct 2022 15:36:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3261
Expires: Fri, 28 Oct 2022 16:30:32 GMT
Date: Fri, 28 Oct 2022 15:36:11 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3261
Expires: Fri, 28 Oct 2022 16:30:32 GMT
Date: Fri, 28 Oct 2022 15:36:11 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92343b1e-4025-42d0-b907-d6a162cd1d33.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92343b1e-4025-42d0-b907-d6a162cd1d33.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 01e61cd2e01a587b5adb8c5eaf3c7768
44e406cc47c723ad73aa36f22d24d6ef46c481b6
980d91fcd2493b85c4285bfad0102309afe2f65a4b39cca06ab71801be146d7c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F92343b1e-4025-42d0-b907-d6a162cd1d33.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5271
x-amzn-requestid: 1fbe226c-b232-4d58-bf3c-fdcd635cae9c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw1rFHHoAMFWhg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb57-09d6264c4001434303a50531;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:47 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Uc5-VMHJZWgfPV4eXO4YrZouCIRJSn1xZg5jQPepn69Aw32CeZAQ6w==
via: 1.1 1002c05e647d0804e83147cdd205d14a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:37:31 GMT
etag: "44e406cc47c723ad73aa36f22d24d6ef46c481b6"
content-type: image/jpeg
age: 61120
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64dc32b98b1b728bf4324c6ddb8bfc21
88e5606d51d034ff9865bfd363c6a1721ccc9904
ea02af9d94c82fee1fa1f1086c6241fa4995ed4d2389fa5d5258d920c18cdb51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4510a3cc-dfbb-45ed-b8d6-9bb45a47cad9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11395
x-amzn-requestid: 74d92b9c-c8c2-43d3-b084-4a0503a2ce2c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arxL5H2mIAMFfFw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afbe5-396fc42b1c1365791d6889bf;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:45:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: NZD9FAe3wcJyD-d_EaNs9GQdz_MxgxuXklWUeQO4cbRc6DMhxOLmCg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 73cb83fe6699afc2791b5c690c1ff8c6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 23:13:31 GMT
age: 58960
etag: "88e5606d51d034ff9865bfd363c6a1721ccc9904"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 13bafc15fa2fe97e27115e17bce8b22f
9d0fc7b50cbb96a3e85ccb501ed1d60a39a164d3
734419d9f9c28185501c25db3e0df01f2dc901a1a87bcdd066028392c8c82cf5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6e2a26-e87a-4329-8df1-ba2276a57eba.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14602
x-amzn-requestid: f3e186c6-4734-4c1b-a432-aa799a12ed4e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arv9yGaMoAMFZ4A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635af9f1-05c8bdc2153acd8915e04826;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:36:49 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e0e64aPEo628l4wM0ZSZ7U2envwnHBLt6S1bpy204t1ipgKU0qsyNg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:37:37 GMT
age: 61114
etag: "9d0fc7b50cbb96a3e85ccb501ed1d60a39a164d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ec53913f994b99340024aa1958102a2
8a2e935e59efbe8a6b4f4fad1ef0b87241731dec
7a17e72f6767e8d129ce43ec41aa535827fbc90b085898f5a764166c7600b48b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2c17e2f3-4edf-44ae-9b49-0a83b2498309.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10330
x-amzn-requestid: d1306110-4c96-44f6-86c9-542354fb5f26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw3DHedoAMFegg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb60-236067d573debd7b248a3579;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:56 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: FVUtxDw9Am1zG6kWCU7KtcZYjVycBBVUpEaXAVsDUiMiC4L6XOLXew==
via: 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 21:51:24 GMT
etag: "8a2e935e59efbe8a6b4f4fad1ef0b87241731dec"
content-type: image/jpeg
age: 63887
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OV7g4Y4fcQGijljebzHQtnpKdcPKw6LTxqORxxBJL2lFPYQLLoyNuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 00:40:50 GMT
age: 53721
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a3beb47-d762-472b-9658-8a33fd7da5b8.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a3beb47-d762-472b-9658-8a33fd7da5b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 67ab2d52efde23610013edaacf8ba485
16580f7f378eede68f6f8c5361f942d6a33b862e
35ef1400e311bc04c5e48d5e9e80060a377c6a8570cc2e76ca2e25f6395f80cb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a3beb47-d762-472b-9658-8a33fd7da5b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14637
x-amzn-requestid: d2b22c2f-a677-4d97-aa1e-98e93c988c7f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aV_IjEibIAMF_DQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63524569-746ac9cf1df9428b60e84817;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 07:08:25 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BTVc8CEUo7cUgeJNAauehjyIeObm2UpYTaPqCEA_qoKpIJ47nVqU2A==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 28 Oct 2022 07:15:07 GMT
age: 30064
etag: "16580f7f378eede68f6f8c5361f942d6a33b862e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
onsequentlys.xyz/floater?cs=aUJmVTZfcVViBFF1VGwGW3VfYgE&abt=0&red=1&sm=83&k=peliculas%20maxcine%20culas%20online%20casa&v=0.8.10.0&sts=0&prn=0&emb=0&tid=955202&rxy=1280_1024&u=1413686891535711&agec=1666971370&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fwww.maxcine.net%2Ftag%2Fwar%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=td4_oi1_&_sKXQ=1666971369866&crc=1
200 OK 5.5 kB URL HTTP/2 onsequentlys.xyz/floater?cs=aUJmVTZfcVViBFF1VGwGW3VfYgE&abt=0&red=1&sm=83&k=peliculas%20maxcine%20culas%20online%20casa&v=0.8.10.0&sts=0&prn=0&emb=0&tid=955202&rxy=1280_1024&u=1413686891535711&agec=1666971370&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fwww.maxcine.net%2Ftag%2Fwar%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=td4_oi1_&_sKXQ=1666971369866&crc=1
IP
File type ASCII text, with very long lines (8959), with no line terminators
Hash f8cddf72cab0c0f21be565c8af6046ee
17e2b3dbabf1bcb33708ee30b813724fc70854e3
996afb03cf56a9bc7bba2373bf2a59e50e45db08566aaaff8b807110324db242
GET /floater?cs=aUJmVTZfcVViBFF1VGwGW3VfYgE&abt=0&red=1&sm=83&k=peliculas%20maxcine%20culas%20online%20casa&v=0.8.10.0&sts=0&prn=0&emb=0&tid=955202&rxy=1280_1024&u=1413686891535711&agec=1666971370&fs=1&t=600&m=2&ns=1&ndp=1&asi=1&ref=https%3A%2F%2Fwww.maxcine.net%2Ftag%2Fwar%2F&jst=0&enr=0&lcua=mozilla%2F5.0%20(windows%20nt%2010.0%3B%20win64%3B%20x64%3B%20rv%3A105.0)%20gecko%2F20100101%20firefox%2F105.0&tzd=0&uloc=&if=0&aa=td4_oi1_&_sKXQ=1666971369866&crc=1 HTTP/1.1
Host: onsequentlys.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.maxcine.net
Connection: keep-alive
Referer: https://www.maxcine.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/plain
content-length: 5530
date: Fri, 28 Oct 2022 15:36:11 GMT
server: openresty/1.17.8.2
access-control-allow-credentials: true
access-control-allow-origin: https://www.maxcine.net
cache-control: no-store, no-cache, must-revalidate, no-transform
pragma: no-cache
p3p: CP="NID DSP ALL COR"
set-cookie: csu=6dd702d1-6efe-4d60-bb74-849db4651be7
csu=1413686891535711
content-encoding: gzip
accept-ch: DPR, Width, Viewport-Width, Device-Memory, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version
x-cache: Miss from cloudfront
via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mmarxixuXvWASt-s1SvTHCfDhx-pttHB_6lJMIZkWEfQMQP5brsO9A==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 04c8d5a4903ef71643bca0c5396cb802
047f4ebe319a367a0d512570c2dee2888b64cf82
47df6900bb6cb686c8466f8f83643ccfd9bad52759fea3198d1fe9397b217e37
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "47DF6900BB6CB686C8466F8F83643CCFD9BAD52759FEA3198D1FE9397B217E37"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2945
Expires: Fri, 28 Oct 2022 16:25:17 GMT
Date: Fri, 28 Oct 2022 15:36:12 GMT
Connection: keep-alive
imgdelnw.com/ie?v=4&c=gm3uqYu45KzIvftsk_YXk1VfZGNEIl3kcpLqjo3iuFVThH_ahEkM8S3tJn6CXrwR-0sPnml4Lur5UqZySLYKq71v2rIF0pNXjYUdOZerDijJgAbRMfjCs0CO3wy_oqFa12sM0GuBzFt7wXDqT7x_IJfNWPwyzUEggV77lUZG3wrd0XjE9pQj4n4i7JwQPcsTAwmLeIgysLyWgGnYbsSVTQfSX73ryEuXpshcJcR8vvfatjEdHfMkRqQ1zZCQuBpS8BbWIlLyEAo-DxK3BFd2jd3q02jOMan2u1wOHCLxR59AfjNoEb99fh8xWQBcYChknTRS41ZvzA4TadVA-xWsQxrS1f1ntmSA3CCqM6oMwCeGA3aIc2e9eTpZbLu9ELCVgvA0osUJm3k37Uiy3RjaRnZ5DAytxnXiST6H3CEzulFuoXuL2KlZFXXG_CZ7wohwBQsj0sGzrzO4-xw=&v1=79&v2=67615
301 Moved Permanently 0 B URL HTTP/1.1 imgdelnw.com/ie?v=4&c=gm3uqYu45KzIvftsk_YXk1VfZGNEIl3kcpLqjo3iuFVThH_ahEkM8S3tJn6CXrwR-0sPnml4Lur5UqZySLYKq71v2rIF0pNXjYUdOZerDijJgAbRMfjCs0CO3wy_oqFa12sM0GuBzFt7wXDqT7x_IJfNWPwyzUEggV77lUZG3wrd0XjE9pQj4n4i7JwQPcsTAwmLeIgysLyWgGnYbsSVTQfSX73ryEuXpshcJcR8vvfatjEdHfMkRqQ1zZCQuBpS8BbWIlLyEAo-DxK3BFd2jd3q02jOMan2u1wOHCLxR59AfjNoEb99fh8xWQBcYChknTRS41ZvzA4TadVA-xWsQxrS1f1ntmSA3CCqM6oMwCeGA3aIc2e9eTpZbLu9ELCVgvA0osUJm3k37Uiy3RjaRnZ5DAytxnXiST6H3CEzulFuoXuL2KlZFXXG_CZ7wohwBQsj0sGzrzO4-xw=&v1=79&v2=67615
IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ie?v=4&c=gm3uqYu45KzIvftsk_YXk1VfZGNEIl3kcpLqjo3iuFVThH_ahEkM8S3tJn6CXrwR-0sPnml4Lur5UqZySLYKq71v2rIF0pNXjYUdOZerDijJgAbRMfjCs0CO3wy_oqFa12sM0GuBzFt7wXDqT7x_IJfNWPwyzUEggV77lUZG3wrd0XjE9pQj4n4i7JwQPcsTAwmLeIgysLyWgGnYbsSVTQfSX73ryEuXpshcJcR8vvfatjEdHfMkRqQ1zZCQuBpS8BbWIlLyEAo-DxK3BFd2jd3q02jOMan2u1wOHCLxR59AfjNoEb99fh8xWQBcYChknTRS41ZvzA4TadVA-xWsQxrS1f1ntmSA3CCqM6oMwCeGA3aIc2e9eTpZbLu9ELCVgvA0osUJm3k37Uiy3RjaRnZ5DAytxnXiST6H3CEzulFuoXuL2KlZFXXG_CZ7wohwBQsj0sGzrzO4-xw=&v1=79&v2=67615 HTTP/1.1
Host: imgdelnw.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
server: fasthttp
date: Fri, 28 Oct 2022 15:36:11 GMT
content-length: 0
location: https://img.vmmcdn.com/get/70453396/184316_icon.png
x-app-id: 13
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8edfb6ca2eb2ae237f5c1b39c2332dd3
b3d9e559629aee6828a361e410d3e49a04386349
ecdf58c74f112ee0ce8ffc59fd7cc27ac5aac489cd061d7745f714daaf60d61a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ECDF58C74F112EE0CE8FFC59FD7CC27AC5AAC489CD061D7745F714DAAF60D61A"
Last-Modified: Thu, 27 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18143
Expires: Fri, 28 Oct 2022 20:38:35 GMT
Date: Fri, 28 Oct 2022 15:36:12 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash afdc345deac5710eafd0a8b87dbbb133
64630d777d159b7d32b3708617e55e131bf50cf8
bcbab2f5525811c529ee49bee7d710149708c336ddb020c92e8ba5a903a99c1c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=133522
Date: Fri, 28 Oct 2022 15:36:12 GMT
Etag: "635b4fa3-1d7"
Expires: Sun, 30 Oct 2022 04:41:34 GMT
Last-Modified: Fri, 28 Oct 2022 03:42:27 GMT
Server: ECS (nyb/1D0E)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: J3FCHXQab08ybKs5w5D2sBYTjbtESGTsZXniibh8s6H5j8w_H2rLWg==
Age: 3547
img.vmmcdn.com/get/70453396/184316_icon.png
200 OK 62 kB URL HTTP/2 img.vmmcdn.com/get/70453396/184316_icon.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash fa329d162f1e5309b7539b385dcf0dec
96df011e708591c346dfc3c9412d84312a0ee080
65d24b49c18c0ac609e510698b314dd477eceeae57edc362a5eb119a5e64da44
GET /get/70453396/184316_icon.png HTTP/1.1
Host: img.vmmcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.14.1
date: Fri, 28 Oct 2022 15:36:12 GMT
content-type: image/png
content-length: 61612
last-modified: Fri, 21 Oct 2022 09:22:57 GMT
cache-control: public, max-age=604800
etag: "635264f1-f0ac"
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
eliss-vas.com/imp/3fd11313-56d6-11ed-9dfb-12b35800a033/2/e0d34cc0-1cf9-11ea-81fc-0a97765f9322/rK5SKI-5njuUTjj3hd_ZinTK9s4c-B-T19Y-rz_M02ySZJ7YfVCSvRaB_sTWd9yeALD_BLQ3HJSGnSvGKBVzxbVDiso7Ptx1xoxRunVJ1gKvQpLoe_VOCuZdAgRcARg1J8vMez4DfRyyAKWhfkHjEYb1gSgA8InXReKmvTERu-m6zrAcYRXgt0q0P5uvPJV2kMAMw7q0tnCDNpBvzpreuC_7MQ0-eVzM9p2JaaHUyCVs1xsOL7-nj1ACHVtTscurS0g2wRag7ka6vUpC2idWBCKqXUhCQH-IcJFWUy5vJ3BMKoKo-U1Gr8sdKeLdJRongPwEBf5Ntf_WGCzpWvMg9UBY-qZIiPylaKhDezVbkgmG8Ih7xRdaEL4ntM90W8jILjoHoJLUXheOVlXmtmQe49TMnXQllGagnpSQWp7X9FKrlGTMEkE4CJjua-djafuMIGt5vHyLu6cSrLOho63y2Sv_NCLex3PY-LiG-igpj_i_GgdvqEQZHyRB5HSlAmctaIIust9xhfMabw_gsB-p9EfNnsJkhtBUaGIoNt1xMbkkghlEeXI_zi1hFU-rs0wrQR6pwQ0BLrS-PnWrRHpS-PCWCkt35Hm-_JJ1Az_-ZjSd4AD3AEDHmgBSLvAlNtLF_I0UL0VvoEjrcy-mymXUncb30cbsiaOrFZU9mMZPn5SkjQ==.gHqwKrPFPdO7ODFOFYrnAA==
200 OK 6.3 kB URL HTTP/2 eliss-vas.com/imp/3fd11313-56d6-11ed-9dfb-12b35800a033/2/e0d34cc0-1cf9-11ea-81fc-0a97765f9322/rK5SKI-5njuUTjj3hd_ZinTK9s4c-B-T19Y-rz_M02ySZJ7YfVCSvRaB_sTWd9yeALD_BLQ3HJSGnSvGKBVzxbVDiso7Ptx1xoxRunVJ1gKvQpLoe_VOCuZdAgRcARg1J8vMez4DfRyyAKWhfkHjEYb1gSgA8InXReKmvTERu-m6zrAcYRXgt0q0P5uvPJV2kMAMw7q0tnCDNpBvzpreuC_7MQ0-eVzM9p2JaaHUyCVs1xsOL7-nj1ACHVtTscurS0g2wRag7ka6vUpC2idWBCKqXUhCQH-IcJFWUy5vJ3BMKoKo-U1Gr8sdKeLdJRongPwEBf5Ntf_WGCzpWvMg9UBY-qZIiPylaKhDezVbkgmG8Ih7xRdaEL4ntM90W8jILjoHoJLUXheOVlXmtmQe49TMnXQllGagnpSQWp7X9FKrlGTMEkE4CJjua-djafuMIGt5vHyLu6cSrLOho63y2Sv_NCLex3PY-LiG-igpj_i_GgdvqEQZHyRB5HSlAmctaIIust9xhfMabw_gsB-p9EfNnsJkhtBUaGIoNt1xMbkkghlEeXI_zi1hFU-rs0wrQR6pwQ0BLrS-PnWrRHpS-PCWCkt35Hm-_JJ1Az_-ZjSd4AD3AEDHmgBSLvAlNtLF_I0UL0VvoEjrcy-mymXUncb30cbsiaOrFZU9mMZPn5SkjQ==.gHqwKrPFPdO7ODFOFYrnAA==
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8992c4259b9c80b2c53f7df07cb9d559
ee38e759228661da3747c10a7adf24aa9ff48602
c5c3bbda861b749088dd9de647243bd9dba7805de8ca83dd6252ddb972ec87cb
GET /imp/3fd11313-56d6-11ed-9dfb-12b35800a033/2/e0d34cc0-1cf9-11ea-81fc-0a97765f9322/rK5SKI-5njuUTjj3hd_ZinTK9s4c-B-T19Y-rz_M02ySZJ7YfVCSvRaB_sTWd9yeALD_BLQ3HJSGnSvGKBVzxbVDiso7Ptx1xoxRunVJ1gKvQpLoe_VOCuZdAgRcARg1J8vMez4DfRyyAKWhfkHjEYb1gSgA8InXReKmvTERu-m6zrAcYRXgt0q0P5uvPJV2kMAMw7q0tnCDNpBvzpreuC_7MQ0-eVzM9p2JaaHUyCVs1xsOL7-nj1ACHVtTscurS0g2wRag7ka6vUpC2idWBCKqXUhCQH-IcJFWUy5vJ3BMKoKo-U1Gr8sdKeLdJRongPwEBf5Ntf_WGCzpWvMg9UBY-qZIiPylaKhDezVbkgmG8Ih7xRdaEL4ntM90W8jILjoHoJLUXheOVlXmtmQe49TMnXQllGagnpSQWp7X9FKrlGTMEkE4CJjua-djafuMIGt5vHyLu6cSrLOho63y2Sv_NCLex3PY-LiG-igpj_i_GgdvqEQZHyRB5HSlAmctaIIust9xhfMabw_gsB-p9EfNnsJkhtBUaGIoNt1xMbkkghlEeXI_zi1hFU-rs0wrQR6pwQ0BLrS-PnWrRHpS-PCWCkt35Hm-_JJ1Az_-ZjSd4AD3AEDHmgBSLvAlNtLF_I0UL0VvoEjrcy-mymXUncb30cbsiaOrFZU9mMZPn5SkjQ==.gHqwKrPFPdO7ODFOFYrnAA== HTTP/1.1
Host: eliss-vas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 28 Oct 2022 15:36:13 GMT
content-type: image/webp
content-length: 6332
content-disposition: inline;filename=f.txt
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 348e4d5f46d652d497f9ad078d1dea3e
7ab34ed8ae4e7048edd25f8b533d5237dea83688
dd02da6461e36a128579a3fb26da4c7f303b5683b27a7bd7a50309d4101cba3e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7ee9a743-41f5-42f0-855e-53c4f9175a44.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8323
x-amzn-requestid: 4b90019d-6e8c-498d-8627-e4f0c9dda30e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: arw0gGYKoAMFRBg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-635afb4f-620a4264143fc3fd207acc5e;Sampled=0
x-amzn-remapped-date: Thu, 27 Oct 2022 21:42:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NPWfRW5iNN1bcEzJGGlGa8kBWq-t_cOrbImZBUTaFi7QjGhjAj0GZQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 27 Oct 2022 22:32:34 GMT
age: 61424
etag: "7ab34ed8ae4e7048edd25f8b533d5237dea83688"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.maxcine.net/tag/war/
200 OK 0 B IP
GET /tag/war/ HTTP/1.1
Host: www.maxcine.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 28 Oct 2022 15:36:09 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=0
expires: Fri, 28 Oct 2022 15:36:09 GMT
last-modified: Fri, 28 Oct 2022 04:04:58 GMT
vary: Accept-Encoding,Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y7XzOZkV2FF7kcCR02byGVjgOYPZf54JqNMerDV19PnEx%2FrwId9G72dA3EfGJPOH1E8HF9CWwofNNRhDDl21%2F%2FUvVma5jFLOLvE%2FT4lhlFrpbqpJr8iPqUJkoJvtSmzfm8w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7614bed2eeacb51d-OSL
content-encoding: br
X-Firefox-Spdy: h2
pogothere.xyz/asd100.bin
200 OK 0 B IP
GET /asd100.bin HTTP/1.1
Host: pogothere.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.maxcine.net/
Origin: https://www.maxcine.net
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 28 Oct 2022 15:36:10 GMT
content-type: binary/octet-stream
access-control-allow-origin: https://www.maxcine.net
access-control-allow-credentials: true
access-control-allow-methods: GET
access-control-allow-headers: X-Requested-With, content-type
cache-control: max-age=14400
cf-cache-status: EXPIRED
last-modified: Fri, 28 Oct 2022 12:35:49 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ijair6%2FGorAd%2FznE5XpweMrg%2B2coHoB5fFhaTuCq5ZdfbAvKSeMsougsMkQTqTrMjTt%2B155PXvSGawM8CgKnlvuM9nMqW6uufiV6%2BAhk%2FGNh16PN7clJWPdingrMbx%2Fo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7614bedb9ada7749-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
104.21.84.178
93.184.220.29
142.250.74.138
23.36.76.226
46.4.121.113
104.21.84.178
23.109.87.209