r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bbea1550fedd5eb9c265712fab75b137
2c2f981747898a380265f766345f2bb9c8c983fd
c728286e38c31a4d3f7a39702e0a5f69c14bf69e01a88bc4479714953fbda278
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C728286E38C31A4D3F7A39702E0A5F69C14BF69E01A88BC4479714953FBDA278"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12299
Expires: Thu, 22 Dec 2022 09:08:03 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b8fbcd7ca1a893d05677318a8a198e7a
0851654c21f6e3741887e7deab8098c1dc56f33c
edbade5913ace2fcbb932922e9af69acb2e8759474a2eeaec216307247fea361
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EDBADE5913ACE2FCBB932922E9AF69ACB2E8759474A2EEAEC216307247FEA361"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9627
Expires: Thu, 22 Dec 2022 08:23:31 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 22 Dec 2022 04:46:00 GMT
content-type: application/json
age: 3424
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f4b32de26d9af2cba6afcdcf716d3fb8
644ead4436a8f2fc1f0dd25e4484b64f6ed63347
525123034cb53d750d5ebd487015911452d2cd3c34301e6628f2f52f3f0bfc88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "525123034CB53D750D5EBD487015911452D2CD3C34301E6628F2F52F3F0BFC88"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19540
Expires: Thu, 22 Dec 2022 11:08:44 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +xUPffFCeLPzeRWYRkDrI4w+M+gkO2yv7YqLIEq+3Yv8+JyDkn0cJ3hX1iVwjmdaq6Huf4vxYpCGm9ygg2XuiA==
x-amz-request-id: TKFV7JCKWFFBNS8B
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 22 Dec 2022 04:53:31 GMT
age: 2973
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/
301 Moved Permanently 707 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.ml domain
GET / HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
location: https://spit-on-the-ceiling.ml/
vary: User-Agent
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 22 Dec 2022 05:43:04 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5324676160cf588473ef920b9b7d31e9
b71a4564f337c1b140f15e95e1d30c9c3b551a4c
d2cb12a63f11e5c38f0ad191d14734d1156b833327b9d2e19defb8b2bd3b791a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2CB12A63F11E5C38F0AD191D14734D1156B833327B9D2E19DEFB8B2BD3B791A"
Last-Modified: Thu, 22 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 22 Dec 2022 11:43:04 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
spit-on-the-ceiling.ml/
200 OK 9.5 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4574)
Hash 9d766ba36ce2dd4681454f18618b98ec
9a27b01d9b82544d0e0a6533e9d2e9216ff02bb7
52e81569c734f77e0b41fb7f67b73739f8f453bcd8b0962c7d2f780b2a03da6c
NIDS Severity Alert suricata medium ET INFO HTTP Request to a *.ml domain
GET / HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html
content-length: 9486
content-encoding: br
vary: Accept-Encoding,User-Agent
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/css2
200 OK 5.0 kB URL HTTP/2 spit-on-the-ceiling.ml/site/css2
IP
Hash 971e061382cec34fac035b421693f0e2
73417a9523674b818652c8535e00cb381ae7b1df
59e07632252311c85e959b1b8a6a7408ea1afbdb3f6e82867583e484843a232c
GET /site/css2 HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:35 GMT
etag: "1368-62b5ef1b-c2178ea910cd49b;;;"
accept-ranges: bytes
content-length: 4968
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4788a7ca38a4ce59d72382035cc8272b
d69009c5effdbc9f7334b895afe7dc43c52a28db
6ca22ea0e792a06ee3d04e7fecfad709dd017c9088ef5b1d35017a805fa8ea55
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6CA22EA0E792A06EE3D04E7FECFAD709DD017C9088EF5B1D35017A805FA8EA55"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6541
Expires: Thu, 22 Dec 2022 07:32:05 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4788a7ca38a4ce59d72382035cc8272b
d69009c5effdbc9f7334b895afe7dc43c52a28db
6ca22ea0e792a06ee3d04e7fecfad709dd017c9088ef5b1d35017a805fa8ea55
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6CA22EA0E792A06EE3D04E7FECFAD709DD017C9088EF5B1D35017A805FA8EA55"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6641
Expires: Thu, 22 Dec 2022 07:33:45 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4788a7ca38a4ce59d72382035cc8272b
d69009c5effdbc9f7334b895afe7dc43c52a28db
6ca22ea0e792a06ee3d04e7fecfad709dd017c9088ef5b1d35017a805fa8ea55
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6CA22EA0E792A06EE3D04E7FECFAD709DD017C9088EF5B1D35017A805FA8EA55"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11208
Expires: Thu, 22 Dec 2022 08:49:52 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4788a7ca38a4ce59d72382035cc8272b
d69009c5effdbc9f7334b895afe7dc43c52a28db
6ca22ea0e792a06ee3d04e7fecfad709dd017c9088ef5b1d35017a805fa8ea55
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6CA22EA0E792A06EE3D04E7FECFAD709DD017C9088EF5B1D35017A805FA8EA55"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11208
Expires: Thu, 22 Dec 2022 08:49:52 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4788a7ca38a4ce59d72382035cc8272b
d69009c5effdbc9f7334b895afe7dc43c52a28db
6ca22ea0e792a06ee3d04e7fecfad709dd017c9088ef5b1d35017a805fa8ea55
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6CA22EA0E792A06EE3D04E7FECFAD709DD017C9088EF5B1D35017A805FA8EA55"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6579
Expires: Thu, 22 Dec 2022 07:32:43 GMT
Date: Thu, 22 Dec 2022 05:43:04 GMT
Connection: keep-alive
spit-on-the-ceiling.ml/site/bootstrap.min.css
200 OK 39 kB URL HTTP/2 spit-on-the-ceiling.ml/site/bootstrap.min.css
IP
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash 8abd5e141b380fae6bf37b265757e331
dba7ad696d26d8459ddd1cb97f895b9235b0b20d
5b2be0c64b50541d0fb029933d3203f478004ab7eeca597512e7b2edfae9e744
GET /site/bootstrap.min.css HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:04 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 17:06:33 GMT
etag: "28021-62b5ef19-21dba59f1b6be0d7;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 38988
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/style.css
200 OK 3.4 kB URL HTTP/2 spit-on-the-ceiling.ml/site/style.css
IP
Hash a31f8a250f8bf0887362262383328558
372f420c75c22bea96cecf9dae8fc85b07d0529d
51dc1cd4ff4253e1dae76bd360e28f8e983846ed1e7739a6cf923c170abb94ef
GET /site/style.css HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:04 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 17:06:56 GMT
etag: "27d3-62b5ef30-b5fff859884b9086;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 3397
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/all.css
200 OK 15 kB URL HTTP/2 spit-on-the-ceiling.ml/site/all.css
IP
File type ASCII text, with very long lines (56994)
Hash 2fc5758a7e099fe989e74857ac5e2ee6
9114b8ccb3290ce889c35a1e2658a4fa3179d8b2
4285a7b2153708fff0e4d3ad7d99f6ed3b55132bd5d778a30a6367c336fc04ed
GET /site/all.css HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:04 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 17:06:28 GMT
etag: "df5c-62b5ef14-6ab5d99970e082d1;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 14911
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Last-Modified, Retry-After, Content-Type, Alert, Pragma, ETag, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 22 Dec 2022 05:33:24 GMT
age: 580
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 859d899d982bb69df5fb16b8393fa119
580215f1d4f81cda04012c0889cfd9b18ba11863
38159dd549e94d45798b614efa5f968de7b74830c845220d1b6c1435f3940a94
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4798
Cache-Control: max-age=103424
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 05:43:04 GMT
Etag: "63a2ccaa-1d7"
Expires: Fri, 23 Dec 2022 10:26:48 GMT
Last-Modified: Wed, 21 Dec 2022 09:06:50 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c680b84d8f30f61d514055574e4e82e
f235bf760652570f4970ad13a02927a605f39afb
ce44694d5ddb64223fdf20f143ef8eb8ca0a4ee89756434f3563b46d414047e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE44694D5DDB64223FDF20F143EF8EB8CA0A4EE89756434F3563B46D414047E2"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10034
Expires: Thu, 22 Dec 2022 08:30:19 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 444c4a75fe403bf32011bc7ed0672414
4df40007d40155798fc784e172ecb0d0d45eeeac
baf872410221a63b0e5743cd6d9a9adcf2b29a0dc5051592df3f1a1c3daf4a54
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BAF872410221A63B0E5743CD6D9A9ADCF2B29A0DC5051592DF3F1A1C3DAF4A54"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7128
Expires: Thu, 22 Dec 2022 07:41:53 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c680b84d8f30f61d514055574e4e82e
f235bf760652570f4970ad13a02927a605f39afb
ce44694d5ddb64223fdf20f143ef8eb8ca0a4ee89756434f3563b46d414047e2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CE44694D5DDB64223FDF20F143EF8EB8CA0A4EE89756434F3563B46D414047E2"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10003
Expires: Thu, 22 Dec 2022 08:29:48 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4788a7ca38a4ce59d72382035cc8272b
d69009c5effdbc9f7334b895afe7dc43c52a28db
6ca22ea0e792a06ee3d04e7fecfad709dd017c9088ef5b1d35017a805fa8ea55
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6CA22EA0E792A06EE3D04E7FECFAD709DD017C9088EF5B1D35017A805FA8EA55"
Last-Modified: Tue, 20 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6578
Expires: Thu, 22 Dec 2022 07:32:43 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
spit-on-the-ceiling.ml/site/translateelement.css
200 OK 5.0 kB URL HTTP/2 spit-on-the-ceiling.ml/site/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash b99ac17dfa3f6d2effe17d1dce986b3a
11c8d16fd641bf1cc02cdcc373cf6cbd1f45fbcc
abaf28a714a92f14be6b21e9d85007c3a144b0f5bc1615bee39f445f718faf21
GET /site/translateelement.css HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:04 GMT
content-type: text/css
last-modified: Fri, 24 Jun 2022 17:06:59 GMT
etag: "4924-62b5ef33-9879453e01c9b6d6;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding,User-Agent
content-length: 4978
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/surf.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
200 OK 3.8 kB URL HTTP/2 spit-on-the-ceiling.ml/site/surf.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash b388776b29caf14801ae1fe5c680b38e
e02641a034a85102d136bc3dea3ac706abe9394d
00c12427637402f5e01ecfe768ca7c4473c1f1382f445a0f41b6977a8b8b853c
GET /site/surf.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:57 GMT
etag: "eaf-62b5ef31-57eda0bdf738e9c5;;;"
accept-ranges: bytes
content-length: 3759
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/common.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
200 OK 1.1 kB URL HTTP/2 spit-on-the-ceiling.ml/site/common.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
Hash 44b7e34bb7af218e7fc9a66d7ce2c7d0
02a1916b0ad65471b5d68d35940dd07975ea9aba
ede207c18efa910548dac27b61044f77ac587239fd6a69e3545b0abbf107970c
GET /site/common.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:34 GMT
etag: "42a-62b5ef1a-539d88a063b9f1c1;;;"
accept-ranges: bytes
content-length: 1066
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
adrek.ru/l.php?id=7338
200 OK 471 B IP
Hash b4c4f104fda885faf8b9309865676c77
08f228b0d665ba6c84b74b8ab6545dfa680706c3
7f02d3940466c404d9c8f363b3e7aa44942dd13d094c1ecc6d4b456e71891433
GET /l.php?id=7338 HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=ceg0v04u5vfb2iqe4lam960dod; path=/
SID=ceg0v04u5vfb2iqe4lam960dod; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
dt=ok; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
Content-Encoding: gzip
adrek.ru/b.php?id=14131
200 OK 521 B IP
Hash 993302fcf01c51aa7494e79c15c83a28
9dc33e8b89683d87783eb4b53365bad2e64dc60f
c3a237acb13d7497a35c8b5e00eaa7a37b00e03fc0154453c4d67f9868a85d3b
GET /b.php?id=14131 HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=v0taeaqjmurgbbntpmn7dfub0h; path=/
SID=v0taeaqjmurgbbntpmn7dfub0h; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
dt=ok; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
Content-Encoding: gzip
adrek.ru/b.php?id=14130
200 OK 521 B IP
Hash b37492aba84464710b557726aa521e57
bd885f0218560e11e661dd887eb744bea1873d28
1af8aad7fceefc4422e9a0908dbcd3f19ca09a4d6ba9bad653ba9c9c7d693e44
GET /b.php?id=14130 HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=9nlnip04t3nphhbubar2k1tjmm; path=/
SID=9nlnip04t3nphhbubar2k1tjmm; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
dt=ok; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
Content-Encoding: gzip
spit-on-the-ceiling.ml/site/jquery.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
200 OK 88 kB URL HTTP/2 spit-on-the-ceiling.ml/site/jquery.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
File type ASCII text, with very long lines (65451)
Hash 220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
GET /site/jquery.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:45 GMT
etag: "15851-62b5ef25-a2e3a121ea2cd792;;;"
accept-ranges: bytes
content-length: 88145
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/element.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
200 OK 84 kB URL HTTP/2 spit-on-the-ceiling.ml/site/element.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
File type ASCII text, with very long lines (574)
Hash b91ebda4d5b4c4b31f820dbbd927ffc6
b5b9dae8b5faafab24a076dd9c072c3f25a01696
26e244b4197f239e7f3ac1c895c333c767688248cdc999fa2b40712aea2514cc
GET /site/element.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:37 GMT
etag: "1483e-62b5ef1d-2a3380af4ac6a403;;;"
accept-ranges: bytes
content-length: 84030
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/bootstrap.bundle.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
200 OK 78 kB URL HTTP/2 spit-on-the-ceiling.ml/site/bootstrap.bundle.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
File type ASCII text, with very long lines (65299)
Hash 7ccd9d390d31af98110f74f842ea9b32
a85e681624c91a106a514c31eacf80de817b2cc3
f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3
GET /site/bootstrap.bundle.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:31 GMT
etag: "13131-62b5ef17-af214a48e70f2636;;;"
accept-ranges: bytes
content-length: 78129
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/tag.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
200 OK 209 kB URL HTTP/2 spit-on-the-ceiling.ml/site/tag.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (724)
Size 209 kB (209422 bytes)
Hash 5c601999825b4d661e7487c301883812
255adb7ba1949814e12a73efe15d1047a91a87d0
2e659e0f969f5480ed08dd487919407dffafd61bf3cac8bb93d2484250cce027
GET /site/tag.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:59 GMT
etag: "3320e-62b5ef33-2c8ddf53524d600d;;;"
accept-ranges: bytes
content-length: 209422
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/st1.png
200 OK 2.0 kB URL HTTP/2 spit-on-the-ceiling.ml/site/st1.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c6b7ca100e4c9264cebd057c988bcfa
4bbfd3648a5e0ad56911a01a20f2de4dc3519757
37a9df32166ac817600cebde8cd5a5f9d791ab4958e05fb8a2e7f68fe3a7e587
GET /site/st1.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:54 GMT
etag: "7dc-62b5ef2e-92584efca596be29;;;"
accept-ranges: bytes
content-length: 2012
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/st2.png
200 OK 1.9 kB URL HTTP/2 spit-on-the-ceiling.ml/site/st2.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash b10bfd2013c48a2d7525ca329bbc0fa6
21877a21506aa8674c9c70e8ebe274e1b5a4e348
d29b1325b59287bf36490f5c2ee3ae00b165b19237b230fada8eddf4b8c5285c
GET /site/st2.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:54 GMT
etag: "799-62b5ef2e-1b35af9eb66aa1e0;;;"
accept-ranges: bytes
content-length: 1945
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/st3.png
200 OK 1.6 kB URL HTTP/2 spit-on-the-ceiling.ml/site/st3.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 8244e39578354f46516b3595295d34af
4e02de6660c1cde20dd70cfa48f14b795010164e
ecd9ea47337b192f69cdd75e6452fa073e82f1f8159688a3499a826e78c6e737
GET /site/st3.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:55 GMT
etag: "657-62b5ef2f-af6ad1c13efd0cd2;;;"
accept-ranges: bytes
content-length: 1623
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/st4.png
200 OK 1.6 kB URL HTTP/2 spit-on-the-ceiling.ml/site/st4.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 33d49c380ec572361e21615ca39ebbac
4d2ef6a7cdee4691ac28aacefa6f04c618570a3d
50ce2cee06aa99c76c6de1e6c72d35f91ba0bdc8c0f5aa2bd523c985c341f45a
GET /site/st4.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:55 GMT
etag: "62f-62b5ef2f-f43052511aeb12ea;;;"
accept-ranges: bytes
content-length: 1583
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/img/logo.gif
404 Not Found 708 B URL HTTP/2 spit-on-the-ceiling.ml/img/logo.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /img/logo.gif HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/vk.png
200 OK 1.6 kB URL HTTP/2 spit-on-the-ceiling.ml/site/vk.png
IP
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 5fcddc06eba8a5ccfa45cf934782f058
564a329fcfdd3f2f5f0f908f16f8cc5c79cf4f95
6dcd477345ccad5161a6f66f669a29237d225c58203da436eac458cc92aeb3cf
GET /site/vk.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:07:02 GMT
etag: "643-62b5ef36-bf6fd810ed20ccef;;;"
accept-ranges: bytes
content-length: 1603
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/podarok.png
200 OK 927 B URL HTTP/2 spit-on-the-ceiling.ml/site/podarok.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b1498074c3b6323819b0e610f8f0bd5a
3a5d09bc5589579ab2eac0526b50274c1f06d346
54c69cf918c912cdfb472213af2d6b26ecc366895c75af21650b8fb016750bbf
GET /site/podarok.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:52 GMT
etag: "39f-62b5ef2c-a0596bba055da34a;;;"
accept-ranges: bytes
content-length: 927
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/ludi.png
200 OK 818 B URL HTTP/2 spit-on-the-ceiling.ml/site/ludi.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 99d58e327d6dc9144e85991b7b6004c3
4eedfeeb4a9e49b8ab423c94fee7efbf590d19c9
a210409ae3f28976acc1df52882d2b99508d562ea847f25521c8e48131c3a6c9
GET /site/ludi.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:47 GMT
etag: "332-62b5ef27-cc50cf02b8746b02;;;"
accept-ranges: bytes
content-length: 818
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/star.png
200 OK 814 B URL HTTP/2 spit-on-the-ceiling.ml/site/star.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 719521e95320eba9fe417c167e75fd92
b8c95570907b389e822178a674a427c5ed72ff60
c0b3a3afc0b12469faa10339ee8c7d697118c500f00e2bf64b12b2d0f19ecec7
GET /site/star.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:56 GMT
etag: "32e-62b5ef30-61fe529d0cc00ecd;;;"
accept-ranges: bytes
content-length: 814
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/eye.png
200 OK 866 B URL HTTP/2 spit-on-the-ceiling.ml/site/eye.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f552606fae0f713e952e8fce88261697
94c1078ac337bdfc599679818c821d98834fcbf7
2ae40b608ab12102f573ffd2c940afeaa7087322c7967224c60284d9eeefeb0e
GET /site/eye.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:37 GMT
etag: "362-62b5ef1d-816f41c91140d08a;;;"
accept-ranges: bytes
content-length: 866
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/money.png
200 OK 1.4 kB URL HTTP/2 spit-on-the-ceiling.ml/site/money.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 213ea6eff728343f5ec6282380c61a5b
abc3345d9fdc31e994546cfb590c8b6ce430f591
47a752161b32a02299d5f8f8d197da706e9dcaa744e972b29a9d48109b6973c4
GET /site/money.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:49 GMT
etag: "578-62b5ef29-8827dafb7fdd71b7;;;"
accept-ranges: bytes
content-length: 1400
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/galka.png
200 OK 748 B URL HTTP/2 spit-on-the-ceiling.ml/site/galka.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash acc4f9b26659ab5715f27995add69d16
d3d3e0ea8df9564eee0ee599384e74d2fcfce9ca
91361a7ffa8f4d0ffc1fe33fabfec675724cafa986bd8880a6b01d90af3e3d89
GET /site/galka.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:38 GMT
etag: "2ec-62b5ef1e-cae51329d18d3b05;;;"
accept-ranges: bytes
content-length: 748
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/us.png
200 OK 830 B URL HTTP/2 spit-on-the-ceiling.ml/site/us.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e87070269567df94c2a3d2c792fd926
75b0a61311c8a421e7cbcb734b71f2b0bd1c5741
c1d7eeef61038f399b31885c6ebfbab44954165ce471d0a1d5c902c860cb70c2
GET /site/us.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:07:00 GMT
etag: "33e-62b5ef34-e999a0c4de45aff2;;;"
accept-ranges: bytes
content-length: 830
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/ru.png
200 OK 487 B URL HTTP/2 spit-on-the-ceiling.ml/site/ru.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ddf50d1327e2ecc28a980e93b9f538a
581fa9ecc609a1a07fca205b6c9751e8c28f1ebb
1bdc7040f02e999a17f291b59767d4101adefa2d89775272ac7c66f37c710fff
GET /site/ru.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:53 GMT
etag: "1e7-62b5ef2d-a696ef196a8bb262;;;"
accept-ranges: bytes
content-length: 487
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/ua.png
200 OK 574 B URL HTTP/2 spit-on-the-ceiling.ml/site/ua.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash e2b587a3b15e34cb226afa3e572af279
192d98c5d5d5b34123e8717c38b6733d8f7e5648
4ec4c568d064866640e472adfb0b9f0f11162a94f179ea925f7b50cfe60fc470
GET /site/ua.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:07:01 GMT
etag: "23e-62b5ef35-37bf18482d355e13;;;"
accept-ranges: bytes
content-length: 574
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/es.png
200 OK 873 B URL HTTP/2 spit-on-the-ceiling.ml/site/es.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 8bf31a924501d6db655fe75696b5f046
94ba0f8d4db0c35c1246a55fcbd6e0ef3cd7f0e2
5ae9561f31199bf8a892f797a69db1bc5d477e2f8318f2b7e95487f025f66f28
GET /site/es.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:36 GMT
etag: "369-62b5ef1c-d5ca1ad90707bec;;;"
accept-ranges: bytes
content-length: 873
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/it.png
200 OK 642 B URL HTTP/2 spit-on-the-ceiling.ml/site/it.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 922efc02f080135a63137dde4ffea287
a4583be3e579a69a03a0d1f09995fdb6d1244f7d
510116996dc4979a225c07962d84bb76e2b6340234c2c5e4280596ad08a632cb
GET /site/it.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:40 GMT
etag: "282-62b5ef20-3802461025aedb90;;;"
accept-ranges: bytes
content-length: 642
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/de.png
200 OK 602 B URL HTTP/2 spit-on-the-ceiling.ml/site/de.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a2ba86f3b7de7562445967e2c21843b
3046cd0b51721f180c2dc75513fd4bfd316b45b5
cc318f3be9ba75def2af54bd9d0fab4f3e316517de9bf138e40dee06d332602d
GET /site/de.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:35 GMT
etag: "25a-62b5ef1b-cb896fcce65250f8;;;"
accept-ranges: bytes
content-length: 602
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/fr.png
200 OK 637 B URL HTTP/2 spit-on-the-ceiling.ml/site/fr.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 930f08c6829077e96cf25d58f26bd6d3
0dfa244548435053bbebd2ed5914e2785f0f3dc3
594f333e3a8fe65a0466e4f9c140dab97e6b6a073579edf130a87b86614d7ec8
GET /site/fr.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:38 GMT
etag: "27d-62b5ef1e-96a274733c043437;;;"
accept-ranges: bytes
content-length: 637
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/ae.png
200 OK 563 B URL HTTP/2 spit-on-the-ceiling.ml/site/ae.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash dbbaf02cf2c4e47cbcfdbe0d31d12b96
767790e81ed2eb7d25b1416824ec996a6969fc35
ab6e2352ae53d1dba645ec56d0b6a2b5a39780634c81d6bf5708322b2d5ed0b9
GET /site/ae.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:26 GMT
etag: "233-62b5ef12-63dafa7a03464054;;;"
accept-ranges: bytes
content-length: 563
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/tr.png
200 OK 923 B URL HTTP/2 spit-on-the-ceiling.ml/site/tr.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f9619dd9adc7fbb5244483ca00cace60
4970f612a0e86100cf07629da3b9ea12af8891e5
d11d2b8956d975cff1ea2a49763f6eec736506498be297be7ac1c4363cc95ee5
GET /site/tr.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:58 GMT
etag: "39b-62b5ef32-f923ec42cf9128fc;;;"
accept-ranges: bytes
content-length: 923
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/bd.png
200 OK 998 B URL HTTP/2 spit-on-the-ceiling.ml/site/bd.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 4ca06cc43cb4583621b15579bf442277
f11c7647aa9cb58e6033d479eb021682e01157d9
bcce012504ef3ade83802b67982bbade6d3c94cbd07bbd0d1e085f5e5a80e976
GET /site/bd.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:31 GMT
etag: "3e6-62b5ef17-ee6f6395bb7ff677;;;"
accept-ranges: bytes
content-length: 998
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/ms.png
200 OK 1.4 kB URL HTTP/2 spit-on-the-ceiling.ml/site/ms.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 78480973f903d9f97824d31b8acf9484
32d35416f2b683be456a12a65761db9e38006984
14349cba3e4a9cb4a1f37de42167b654cc34eb2a616870eb44f28c3a0e3bbc91
GET /site/ms.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:50 GMT
etag: "56b-62b5ef2a-4f6296cd9827b24e;;;"
accept-ranges: bytes
content-length: 1387
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/vn.png
200 OK 818 B URL HTTP/2 spit-on-the-ceiling.ml/site/vn.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 931fa5c7d5aa2805b11fbc974b816d77
8eb02f52bbe074b5dd681b95c6196890e49651fa
06fc7512126a48e27890c8ac939d5821da05cc0b08d4d11698b2d95b32c3ab66
GET /site/vn.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:07:02 GMT
etag: "332-62b5ef36-467d93f8c7fd9d94;;;"
accept-ranges: bytes
content-length: 818
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/googlelogo_color_42x16dp.png
200 OK 910 B URL HTTP/2 spit-on-the-ceiling.ml/site/googlelogo_color_42x16dp.png
IP
File type PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash efa6bb2bfe459bc6f4bdafa3db0383f6
52d15ce52fe50643e542c17812de43f4ed1b6ee0
6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2
GET /site/googlelogo_color_42x16dp.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:39 GMT
etag: "38e-62b5ef1f-b282d4bf8911ac2c;;;"
accept-ranges: bytes
content-length: 910
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/payeer.png
200 OK 3.6 kB URL HTTP/2 spit-on-the-ceiling.ml/site/payeer.png
IP
File type PNG image data, 170 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 2f6900013b88873b6b384fa5faa48546
8296aaa64c17410ad7ae07132547beafbc4c731a
11551b680f8e3f8d34212c9ea9e88fff7bfb6697976b50856a70ce09b52d7c30
GET /site/payeer.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:51 GMT
etag: "de6-62b5ef2b-79ebedceda303192;;;"
accept-ranges: bytes
content-length: 3558
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/small-white-2.png
200 OK 1.7 kB URL HTTP/2 spit-on-the-ceiling.ml/site/small-white-2.png
IP
File type PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced\012- data
Hash 897ef65b22d1544e654754d887fd7096
539f3920a54c78c114c6ef374fea64fc872d9aa9
1c040c91320f82fefe519b70a8e426c1b7597e78c42cc06994dfee01a9992afa
GET /site/small-white-2.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:53 GMT
etag: "6b7-62b5ef2d-5da07ef3a7434760;;;"
accept-ranges: bytes
content-length: 1719
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/translate_24dp.png
200 OK 846 B URL HTTP/2 spit-on-the-ceiling.ml/site/translate_24dp.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e9cd262114358f26b7608b56905185dc
6dbde0a96deaab2b529723ce26c62043cf9180ab
5a861509b658aa24fc3aed2867ac3c061e7d818d90b9990959afc6d1b5d4ff99
GET /site/translate_24dp.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:07:00 GMT
etag: "34e-62b5ef34-9d17717435a6f42;;;"
accept-ranges: bytes
content-length: 846
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/banner.gif
200 OK 23 kB URL HTTP/2 spit-on-the-ceiling.ml/site/banner.gif
IP
File type GIF image data, version 89a, 468 x 60\012- data
Hash e4d3745109e90e4aaa26b5e9d99cd710
488600d171fdd818ee7578b919267e10bb8924c1
7a780fb1986c9a0e9e23feca0aff74cfa6404f322dd13bdd66dd93979615096f
GET /site/banner.gif HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/gif
last-modified: Fri, 24 Jun 2022 17:06:30 GMT
etag: "5942-62b5ef16-8170c4f5fe7533c4;;;"
accept-ranges: bytes
content-length: 22850
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: a91KOLMQggBw4Kg6DMEONA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3DHvP0xQ3Kj6FU0EaoqJIz3UrsQ=
spit-on-the-ceiling.ml/img/logo.gif
404 Not Found 708 B URL HTTP/2 spit-on-the-ceiling.ml/img/logo.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /img/logo.gif HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/img/promo-bg.jpg
404 Not Found 708 B URL HTTP/2 spit-on-the-ceiling.ml/img/promo-bg.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 2382378378c002d88b9a507c712c3349
2e894db3808b554abadc8b144338ad9e2ea937ba
37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa
GET /img/promo-bg.jpg HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/site/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 708
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/car.png
200 OK 32 kB URL HTTP/2 spit-on-the-ceiling.ml/site/car.png
IP
File type PNG image data, 677 x 250, 8-bit colormap, non-interlaced\012- data
Hash 48fd755034bfd187c3fbdb1f8d9ced2b
d7d1a43014d99ab45026577e5a48a7a7c2e5f7f3
58354ec863f4881181d581bd4a9fcb88c8fb5437be4658f0b8be29aeede22694
GET /site/car.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:05 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:34 GMT
etag: "7f11-62b5ef1a-3f1cbf54c77527a9;;;"
accept-ranges: bytes
content-length: 32529
date: Thu, 22 Dec 2022 05:43:05 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a677501b4490b3352220a1d60a3b88bf
9a5339c0bd6f3e1ae8af0116362efb71426807fc
4dea04acde2396c347e04123c6f97d0efc70695facc6a615a731b6dee801be18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 05:43:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adrek.ru/view_b.php?ref=&id=14130&h=939&t=2524&fr=n
200 OK 937 B URL HTTP/1.1 adrek.ru/view_b.php?ref=&id=14130&h=939&t=2524&fr=n
IP
File type Unicode text, UTF-8 text, with very long lines (464)
Hash 6fb0fa2acdbe99c1f248a0e3114a9daa
9031df5a58cb2110c55484c5bdbc3572a9c40057
2fd0babba083c071584949fe73781cd4f9afdfa3e13ef44bf00930513d7b4baf
GET /view_b.php?ref=&id=14130&h=939&t=2524&fr=n HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Cookie: SID=9nlnip04t3nphhbubar2k1tjmm; dt=ok
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=9nlnip04t3nphhbubar2k1tjmm; path=/
adr=%7C9001%7C; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
dt=22.12.22; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
Content-Encoding: gzip
translate.googleapis.com/translate_static/css/translateelement.css
200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Dec 2022 05:38:52 GMT
expires: Thu, 22 Dec 2022 06:38:52 GMT
cache-control: public, max-age=3600
age: 253
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
adrek.ru/view_l.php?ref=&id=7338&h=939&t=2558&fr=n
200 OK 689 B URL HTTP/1.1 adrek.ru/view_l.php?ref=&id=7338&h=939&t=2558&fr=n
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (335)
Hash f45a52d4b22135c014d04b20b9c42c69
c76f6393247757a40a848d88780fcae05d06847c
703bb926dc51d54f64daee38a3c38bf447cb94b21f3d94019788181d9a94b98e
GET /view_l.php?ref=&id=7338&h=939&t=2558&fr=n HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Cookie: SID=9nlnip04t3nphhbubar2k1tjmm; dt=ok
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=9nlnip04t3nphhbubar2k1tjmm; path=/
adr=%7C9001%7C; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
dt=22.12.22; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
Content-Encoding: gzip
adrek.ru/view_b.php?ref=&id=14131&h=939&t=2524&fr=n
200 OK 938 B URL HTTP/1.1 adrek.ru/view_b.php?ref=&id=14131&h=939&t=2524&fr=n
IP
File type Unicode text, UTF-8 text, with very long lines (464)
Hash e0701e405d452971521445602d91af12
22dbbbd533bbf7d264d904fa460b08966c94f527
c5b95e03e5e84993974017898493c63a653b713681fa3b9d0c779ea1e606e81c
GET /view_b.php?ref=&id=14131&h=939&t=2524&fr=n HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Cookie: SID=9nlnip04t3nphhbubar2k1tjmm; dt=ok
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=60
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.1
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=9nlnip04t3nphhbubar2k1tjmm; path=/
adr=%7C9001%7C; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
dt=22.12.22; expires=Fri, 23-Dec-2022 05:43:05 GMT; Max-Age=86400; secure; SameSite=None
Content-Encoding: gzip
adrek.ru/images/promo/468x60.gif
200 OK 11 kB URL HTTP/1.1 adrek.ru/images/promo/468x60.gif
IP
Hash 2e5e98af446a25ed22b8ca079c78cb5d
0ed7d8655f2d58d49d08254195d7d91c01408833
77b15a783ba8fd53bb905744961357d06cf0e54e8ea09f8577a1f886fb566fde
GET /images/promo/468x60.gif HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Cookie: SID=9nlnip04t3nphhbubar2k1tjmm; dt=22.12.22; adr=%7C9001%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: image/gif
Content-Length: 10633
Last-Modified: Sat, 01 Aug 2020 12:01:46 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "5f2559aa-2989"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
adrek.ru/images/promo/728x90.gif
200 OK 17 kB URL HTTP/1.1 adrek.ru/images/promo/728x90.gif
IP
File type GIF image data, version 89a, 728 x 90\012- data
Hash 4f6b918859343d78d483753fb32af6c7
f03b356acf5c035f85c820a50c9e91d860744d8d
f5f8a77016038a3024af05b918b9ca746a3e47221afaa31d1b430fef702a0a68
GET /images/promo/728x90.gif HTTP/1.1
Host: adrek.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Cookie: SID=9nlnip04t3nphhbubar2k1tjmm; dt=22.12.22; adr=%7C9001%7C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 22 Dec 2022 05:43:05 GMT
Content-Type: image/gif
Content-Length: 16874
Last-Modified: Sat, 01 Aug 2020 12:01:47 GMT
Connection: keep-alive
Keep-Alive: timeout=60
ETag: "5f2559ab-41ea"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a906bc33e35af092892bfc9574009f9d
e094d53c8b11eeb2aebe1ad7ab3645ed99afb159
4ebe97b7d1294c36cd5abacddd4af73377c7af3130f9ccd275c0eaa0f0a15887
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4EBE97B7D1294C36CD5ABACDDD4AF73377C7AF3130F9CCD275C0EAA0F0A15887"
Last-Modified: Wed, 21 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Thu, 22 Dec 2022 11:42:18 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a906bc33e35af092892bfc9574009f9d
e094d53c8b11eeb2aebe1ad7ab3645ed99afb159
4ebe97b7d1294c36cd5abacddd4af73377c7af3130f9ccd275c0eaa0f0a15887
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4EBE97B7D1294C36CD5ABACDDD4AF73377C7AF3130F9CCD275C0EAA0F0A15887"
Last-Modified: Wed, 21 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 22 Dec 2022 11:43:05 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a906bc33e35af092892bfc9574009f9d
e094d53c8b11eeb2aebe1ad7ab3645ed99afb159
4ebe97b7d1294c36cd5abacddd4af73377c7af3130f9ccd275c0eaa0f0a15887
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4EBE97B7D1294C36CD5ABACDDD4AF73377C7AF3130F9CCD275C0EAA0F0A15887"
Last-Modified: Wed, 21 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21524
Expires: Thu, 22 Dec 2022 11:41:49 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 8d901f0d5fc2c2d9b61e615dc2dc246f
0d3753ab50dd978dcda9a66bcd14578853fccb59
b8208a50e3ddb4b323032dab374dec50e543f96968c2d4b7f81c5ff4b0cd08a0
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B8208A50E3DDB4B323032DAB374DEC50E543F96968C2D4B7F81C5FF4B0CD08A0"
Last-Modified: Tue, 20 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6427
Expires: Thu, 22 Dec 2022 07:30:12 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a677501b4490b3352220a1d60a3b88bf
9a5339c0bd6f3e1ae8af0116362efb71426807fc
4dea04acde2396c347e04123c6f97d0efc70695facc6a615a731b6dee801be18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 05:43:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hot-line.top/img/pay/icon/binance.png
200 OK 2.1 kB URL HTTP/2 hot-line.top/img/pay/icon/binance.png
IP
ASN #200313 WEB_GroupInternet INC
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash d7a8982cc5608dbad2e7602a419fd79b
edb12c1eda0d1ce54d66f57d1c26cbaa12215410
71237e07d14b62f8c3d32bc0ba38c274183ee0b4f03908e4a0746bf032a9b737
GET /img/pay/icon/binance.png HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/png
content-length: 2106
last-modified: Tue, 23 Nov 2021 22:43:52 GMT
etag: "619d6ea8-83a"
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a906bc33e35af092892bfc9574009f9d
e094d53c8b11eeb2aebe1ad7ab3645ed99afb159
4ebe97b7d1294c36cd5abacddd4af73377c7af3130f9ccd275c0eaa0f0a15887
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4EBE97B7D1294C36CD5ABACDDD4AF73377C7AF3130F9CCD275C0EAA0F0A15887"
Last-Modified: Wed, 21 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 22 Dec 2022 11:43:05 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a906bc33e35af092892bfc9574009f9d
e094d53c8b11eeb2aebe1ad7ab3645ed99afb159
4ebe97b7d1294c36cd5abacddd4af73377c7af3130f9ccd275c0eaa0f0a15887
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4EBE97B7D1294C36CD5ABACDDD4AF73377C7AF3130F9CCD275C0EAA0F0A15887"
Last-Modified: Wed, 21 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21539
Expires: Thu, 22 Dec 2022 11:42:04 GMT
Date: Thu, 22 Dec 2022 05:43:05 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 262ab960b9c7a7e0406e5a7aec04fe55
6d2022c15425b88acc2d29415f678750c71f38ed
7d2818b8e8e70b0f9ceddb23c6a87d22733f11b09596c618ef8b3dfda4f122cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 05:43:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hot-line.top/img/pay/icon/alfa.png
200 OK 9.9 kB URL HTTP/2 hot-line.top/img/pay/icon/alfa.png
IP
ASN #200313 WEB_GroupInternet INC
File type PNG image data, 294 x 294, 8-bit/color RGBA, non-interlaced\012- data
Hash 54d51e63a0ea6f2181f0a1f0f3c4945d
7b5f73e623b515cd93085fa5d7a652850996d1db
51bd7aaa12b0cbf4971c093e49a9d511f7e274f42f03ecf5f0883ff951814ec2
GET /img/pay/icon/alfa.png HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/png
content-length: 9913
last-modified: Tue, 23 Nov 2021 23:11:18 GMT
etag: "619d7516-26b9"
accept-ranges: bytes
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/payeer.png
200 OK 9.1 kB URL HTTP/2 hot-line.top/img/pay/icon/payeer.png
IP
ASN #200313 WEB_GroupInternet INC
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 58cecfa00bb06889eb14d93b46a82015
e42f4758516085f00c00a087d2a93df3974084ed
552c59f4feb54b5ad000f9b74495ce44c72505cbc70311e722d6228e9bbfb078
GET /img/pay/icon/payeer.png HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/png
content-length: 9130
last-modified: Tue, 23 Nov 2021 22:32:54 GMT
etag: "619d6c16-23aa"
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 262ab960b9c7a7e0406e5a7aec04fe55
6d2022c15425b88acc2d29415f678750c71f38ed
7d2818b8e8e70b0f9ceddb23c6a87d22733f11b09596c618ef8b3dfda4f122cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 05:43:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
hot-line.top/img/pay/icon/piastrix.png
200 OK 10 kB URL HTTP/2 hot-line.top/img/pay/icon/piastrix.png
IP
ASN #200313 WEB_GroupInternet INC
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash b8674422c6f47d0d94b9ff15b6a8d07d
9e589951d92ff4fee7308601568c5618dccfb310
ef0cdc43ed77c1646f779d5be927c691faad0fe01ad9db5cc237323be6e955b9
GET /img/pay/icon/piastrix.png HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/png
content-length: 10154
last-modified: Tue, 23 Nov 2021 22:47:42 GMT
etag: "619d6f8e-27aa"
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.gstatic.com/s/nunito/v24/XRXV3I6Li01BKofINeaB.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v24/XRXV3I6Li01BKofINeaB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35824, version 1.0\012- data
Hash ff747412e3296ebea122c1724effd069
0f198fc5b3a3f9d8bb9a1d2e5987d05d363537ad
69b8ac258645cd62f67125ff4a3a5d997f93132e45ab6cf945a5152fbe0910b2
GET /s/nunito/v24/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://spit-on-the-ceiling.ml
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35824
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Dec 2022 22:31:03 GMT
expires: Sun, 17 Dec 2023 22:31:03 GMT
cache-control: public, max-age=31536000
age: 371522
last-modified: Mon, 09 May 2022 19:23:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/nunito/v24/XRXV3I6Li01BKofIMeaBXso.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/nunito/v24/XRXV3I6Li01BKofIMeaBXso.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20228, version 1.0\012- data
Hash 3a27950ae69b1a752ff3dface2d136d0
5adc3fe60bd389e0d3185c5443e125bbac6e15d2
abfdcbf33ab3a3e52be57b2910c27cc4f890717a06cf02904c4b33ce9d5d8946
GET /s/nunito/v24/XRXV3I6Li01BKofIMeaBXso.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://spit-on-the-ceiling.ml
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20228
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 21:45:01 GMT
expires: Wed, 20 Dec 2023 21:45:01 GMT
cache-control: public, max-age=31536000
age: 115084
last-modified: Mon, 09 May 2022 19:41:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/tether.svg
200 OK 867 B URL HTTP/2 hot-line.top/img/pay/icon/tether.svg
IP
ASN #200313 WEB_GroupInternet INC
Hash 71d3c433ff0a34f74bddfe38edeea31e
d3822ecd065d311437be3676a166bc00e1313777
cdc49ecd4c828e1320b04ccbab496f85908c4db5f664ac650686968c4c589207
GET /img/pay/icon/tether.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:32:46 GMT
etag: W/"619d7a1e-261"
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/G4DwwdLMWpc
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/G4DwwdLMWpc
IP
Hash 39b67666d7af8a0d9137d5110587d48d
6fb35ed3a578be1a3a81493f3e32974c155ce04b
452e1afdb65106a5cf32ba4f226c4276a4c804c0b31436db2bb852daaeb3502f
POST /s/gts1p5/G4DwwdLMWpc HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 22 Dec 2022 05:43:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
spit-on-the-ceiling.ml/site//icon.png
200 OK 568 B URL HTTP/2 spit-on-the-ceiling.ml/site//icon.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e9923c8c1a3bf514f1f41f3d1c391f5c
b80dd543262f1d1b5c010ce0b3041ab7c5076f80
5b2458679cc847421913ce99e96951114923012279ecb1793df3ed47a9b7a8c1
GET /site//icon.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:06 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:39 GMT
etag: "238-62b5ef1f-7a7c6e00045cfd5;;;"
accept-ranges: bytes
content-length: 568
date: Thu, 22 Dec 2022 05:43:06 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/icon.png
200 OK 568 B URL HTTP/2 spit-on-the-ceiling.ml/site/icon.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e9923c8c1a3bf514f1f41f3d1c391f5c
b80dd543262f1d1b5c010ce0b3041ab7c5076f80
5b2458679cc847421913ce99e96951114923012279ecb1793df3ed47a9b7a8c1
GET /site/icon.png HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:06 GMT
content-type: image/png
last-modified: Fri, 24 Jun 2022 17:06:39 GMT
etag: "238-62b5ef1f-7a7c6e00045cfd5;;;"
accept-ranges: bytes
content-length: 568
date: Thu, 22 Dec 2022 05:43:06 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2653
Expires: Thu, 22 Dec 2022 06:27:19 GMT
Date: Thu, 22 Dec 2022 05:43:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2653
Expires: Thu, 22 Dec 2022 06:27:19 GMT
Date: Thu, 22 Dec 2022 05:43:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 746409a88b1342fe7b570306c302c71e
e08a7bf55e08a498f2eed6a35b90107fc0bdb303
9352308fd047bafceddfaf2a9a6eab650593f16ff5632330a4bf745750704650
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9352308FD047BAFCEDDFAF2A9A6EAB650593F16FF5632330A4BF745750704650"
Last-Modified: Tue, 20 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2653
Expires: Thu, 22 Dec 2022 06:27:19 GMT
Date: Thu, 22 Dec 2022 05:43:06 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b67d0976563ea9460d94e27ff920f9da
f1998577eb3bc2214f195f72a8a1b4ad8aa6bc92
c7ec3c4b87b700796008690562a6033481a7ad826fb2f45875cd6add06189568
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda2ee895-fc83-4df7-99f1-2bbc9cf77c8b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10154
x-amzn-requestid: f317432b-7dda-439b-bc02-9c76412e9de1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ddt_DGlfoAMF5Rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a229f9-13a5af4c477a1019544222f4;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 21:32:41 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: hmIpamyZaOLQ8eQrYQBFhpOuRUVo-QDZJHVaPq0Pv7FGpRMIOTAOmw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 3bb2b699cd244bf37141ea08a6a61732.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 21:54:39 GMT
age: 28107
etag: "f1998577eb3bc2214f195f72a8a1b4ad8aa6bc92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01873799-f599-4f82-a53f-277ef7496596.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01873799-f599-4f82-a53f-277ef7496596.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a690552536ccc61e7bec94d9a15042e
413ca0f3801920896cb63f55a2e77ff896b10128
4e5cf75249af308c3fe579c0b11ccb6bd3bfeee1f13229bf709df30afad835ee
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01873799-f599-4f82-a53f-277ef7496596.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10977
x-amzn-requestid: d4c0e7f1-8056-4a56-b37c-dd36f2b5227c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhBhQFrBIAMFrxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37c6e-2b85071e123524dc6c69bdea;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: V5-mY-CnuJztKyXcVEfJj_FPIkG1UCNjhwCpMja_LC4IaJqcK3Tehg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 22:07:35 GMT
age: 27331
etag: "413ca0f3801920896cb63f55a2e77ff896b10128"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5dd6622433d537fbb91a04bd3b57d873
552f216608b819b4f65f0574e421f4a761f0d721
5e9b03133d928378a775ab52ec6e58cd7753aa2975a4966534353c0d6bc46af5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5fe4d96f-b35a-4cc6-9fe3-c52ed693df34.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11471
x-amzn-requestid: 20d9459a-710b-4fcf-bfce-9f0c5f513740
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dbNEqGPnoAMFcDg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a12884-4a93ab9047181db109d328e2;Sampled=0
x-amzn-remapped-date: Tue, 20 Dec 2022 03:14:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qFwWS-f0U1hSbrFFgBiGNzXRvZyvR90n_MI7jfYfWsyv2W6jH8D-9w==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 03:23:59 GMT
age: 8347
etag: "552f216608b819b4f65f0574e421f4a761f0d721"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb884452-5df2-48ab-a4ec-32115997faa9.webp
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb884452-5df2-48ab-a4ec-32115997faa9.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f7de42ebe61ecc6711724d27f95eb4c
6ce397b409ef839c0dc05f8b252de815ebd8c8a1
19717a5dcc74517c24f1262ab65461a76318bce3f65f35588c4012dc84d7fddc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb884452-5df2-48ab-a4ec-32115997faa9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8077
x-amzn-requestid: c66fc249-f713-4224-9c5a-520f048ff2ef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhCLGGv2IAMFisw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37d7a-2ccd93dd6cd5b63c6cd49bff;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:41:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZM8BwKszwJEeP_iYPkg5reOkom9LgZVKx0whx1DapZr9CEKEJBPX0Q==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 21:53:40 GMT
age: 28166
etag: "6ce397b409ef839c0dc05f8b252de815ebd8c8a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90b79dbf-e3b6-4ad2-b197-fb6b74218bd0.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90b79dbf-e3b6-4ad2-b197-fb6b74218bd0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9de9a9418a2a6dbe33d5e7cdb3dbd8d8
227cdc06cd59c7814312e5c5ab98e428ebc0d68d
f9920b5ef389a504181ba8e5078ba056a88470c9bb8b5f9290618374e5e0c217
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90b79dbf-e3b6-4ad2-b197-fb6b74218bd0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6139
x-amzn-requestid: caacc528-02d9-44a8-992f-9fb2e62544f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhBhQFbgoAMF_nA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37c6e-56b3cdd227cbc7884c48b380;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:36:46 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: y5ADFyoEnWq73I9osGQJKbkZ2mbwa63DTUou_c-uLyL9A7574NGuCg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 22:07:21 GMT
age: 27345
etag: "227cdc06cd59c7814312e5c5ab98e428ebc0d68d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0542b49b-db40-4512-8fc4-0ccd6d73f961.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0542b49b-db40-4512-8fc4-0ccd6d73f961.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4ebed0a822bd9266e21642e0c2f5169
7192f376b8995cd061e71a4b91224ae7eb3bb219
fc9d0455de2dc0f3dc31f29c19edce153e134a8ded01e5e2c61b27e7bb40ba62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0542b49b-db40-4512-8fc4-0ccd6d73f961.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10368
x-amzn-requestid: f5e84e3a-012c-4ecf-89ac-59ac1597f245
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhBhJFlNIAMFyNg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37c6d-39baf37a412e1cce278db6c0;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:36:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TCngU_qcQqz6zxIbkoJ6i-Mon-SCkBPAfI-IIygq9fasWiW0ihmvGA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Dec 2022 21:53:44 GMT
etag: "7192f376b8995cd061e71a4b91224ae7eb3bb219"
content-type: image/jpeg
age: 28162
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/dogecoin.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/dogecoin.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/dogecoin.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:43:00 GMT
etag: W/"619d7c84-8b8"
content-encoding: gzip
X-Firefox-Spdy: h2
linkslot.ru/bancode.php?id=342541
200 OK 0 B URL HTTP/2 linkslot.ru/bancode.php?id=342541
IP
GET /bancode.php?id=342541 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: application/javascript; charset=windows-1251
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6CHwrT7NSz%2F8XqUQSTHTrxuV4rc4DLaIMqnT65gNb7GTBSObSy29c6DK0BgNklIYNLzuXxv5QtZOqL5seustrAjdPlWT5SYYwqaP8FM3fhTXFzbKCdnrQfDqZmpfeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689affafa1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/webmoney.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/webmoney.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/webmoney.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:39:44 GMT
etag: W/"619d7bc0-3a0"
content-encoding: gzip
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/pbank.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/pbank.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/pbank.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:25:44 GMT
etag: W/"619d7878-15c"
content-encoding: gzip
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/logo.gif
200 OK 0 B URL HTTP/2 spit-on-the-ceiling.ml/site/logo.gif
IP
GET /site/logo.gif HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Thu, 29 Dec 2022 05:43:04 GMT
content-type: image/gif
last-modified: Fri, 24 Jun 2022 17:06:47 GMT
etag: "157c44-62b5ef27-59db256c57dc5629;;;"
accept-ranges: bytes
content-length: 1408068
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
linkslot.ru/bancode.php?id=342540
200 OK 0 B URL HTTP/2 linkslot.ru/bancode.php?id=342540
IP
GET /bancode.php?id=342540 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: application/javascript; charset=windows-1251
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z5hdXwLWoxAu94hAOuu9HgZRI3oHYxvCmYq2lxulB65TyKeH85Qw4bWYIVka4gN0uYt9RKgdwBrxfpAz78vLyMcSFOSkozqNTZIad48vreKSKcjLNvlyBnbAJbHTAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689afeaf11bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/ethereum2.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/ethereum2.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/ethereum2.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Fri, 26 Nov 2021 17:07:40 GMT
etag: W/"61a1145c-2b1"
content-encoding: gzip
X-Firefox-Spdy: h2
nvuti.direct/?i=1196227
302 Found 0 B IP
GET /?i=1196227 HTTP/1.1
Host: nvuti.direct
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Thu, 22 Dec 2022 05:43:05 GMT
location: https://nvuti.help/?i=1196227
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TV1DsRqXznr%2F53QUKNJoE50TzZDugmpup5eW%2BUuUmVU8IPXerJCtGHdcYwvtcFsQG%2BQ5flQ3i7xmH5fhE0mnP5CxGXfZ5XJS1Lh3KcHAPb55uHlfl1HXGy%2FWWXijGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77d689b48d74b511-OSL
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/advcash.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/advcash.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/advcash.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:37:48 GMT
etag: W/"619d7b4c-207"
content-encoding: gzip
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/pm.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/pm.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/pm.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:27:04 GMT
etag: W/"619d78c8-41c"
content-encoding: gzip
X-Firefox-Spdy: h2
nvuti.help/?i=1196227
200 OK 0 B IP
GET /?i=1196227 HTTP/1.1
Host: nvuti.help
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://spit-on-the-ceiling.ml/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:06 GMT
content-type: text/html; charset=UTF-8
set-cookie: ref=1196227; expires=Sat, 21-Feb-2026 13:43:06 GMT; Max-Age=99993600; secure
vary: Accept-Encoding
x-frame-options: DENY
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Y9BMh%2B776Nh55%2FBSawK0sCF%2Fs2z3O2BT9Has4q2%2FWK11EPZrwM%2FERMAWp6wSgufkx%2Bb7rJipYh4DKRhWNJavSR2HDhir%2B1OZWHVr%2B2CF1kQKX7sE6BYIBePs1TE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689b64f30b4ed-OSL
content-encoding: br
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/ltc.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/ltc.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/ltc.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:31:40 GMT
etag: W/"619d79dc-15e"
content-encoding: gzip
X-Firefox-Spdy: h2
spit-on-the-ceiling.ml/site/m=el_main
200 OK 0 B URL HTTP/2 spit-on-the-ceiling.ml/site/m=el_main
IP
GET /site/m=el_main HTTP/1.1
Host: spit-on-the-ceiling.ml
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Jun 2022 17:06:51 GMT
etag: "37fab-62b5ef2b-128d590f2e4be0d4;;;"
accept-ranges: bytes
content-length: 229291
date: Thu, 22 Dec 2022 05:43:04 GMT
server: LiteSpeed
vary: User-Agent
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/umoney.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/umoney.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/umoney.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Fri, 26 Nov 2021 17:04:00 GMT
etag: W/"61a11380-26e"
content-encoding: gzip
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/qiwi2.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/qiwi2.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/qiwi2.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Fri, 26 Nov 2021 17:05:12 GMT
etag: W/"61a113c8-662"
content-encoding: gzip
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/sber.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/sber.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/sber.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:46:30 GMT
etag: W/"619d7d56-101f"
content-encoding: gzip
X-Firefox-Spdy: h2
linkslot.ru/bancode.php?id=342538
200 OK 0 B URL HTTP/2 linkslot.ru/bancode.php?id=342538
IP
GET /bancode.php?id=342538 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: application/javascript; charset=windows-1251
set-cookie: ring=%23V; expires=Sat, 21-Jan-2023 05:43:04 GMT; Max-Age=2592000
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlpS4Jz%2FIV4gUaKVzVBb4b3eth7KME8JZ2FTbSMLlgtpgcy8ABJj74dFXL4Xvp7U5QkoVOFRcx%2BoA9AyyKVh%2BOWqopy3X3E7Hi3Rv9yd9toxfEvjiX6oqNqFy3KWWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689afdae81bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
linkslot.ru/bancode.php?id=342537
200 OK 0 B URL HTTP/2 linkslot.ru/bancode.php?id=342537
IP
GET /bancode.php?id=342537 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: application/javascript; charset=windows-1251
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R5VGCDi7uE3ZS%2FZ2%2F2bfx52GTwDPtbAt5X8sC6%2BdLGXy0Rd3qSfHPRNeVWntXnViWFwbkaLQ5bzrGmVZ4KyqVnxinheSIU7VPHrlm%2Fft9Kh0KjS%2FMFLRkSH0vTxHoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689afeaf21bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
linkslot.ru/bancode.php?id=342539
200 OK 0 B URL HTTP/2 linkslot.ru/bancode.php?id=342539
IP
GET /bancode.php?id=342539 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: application/javascript; charset=windows-1251
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rSJTjr5O9pC7Fu0L6cjEMkHemamcZl5HV4ifnDCN328IXw9KTtTh%2BWJBnd3uB%2F1IYBar5alBQOsNw6JrpNnUqp0tf0qwyY%2FdQNd%2FRuQIGuNvQf4TrfOn4b0SI4M9yw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689afeaed1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
linkslot.ru/lincode.php?id=342542
200 OK 0 B URL HTTP/2 linkslot.ru/lincode.php?id=342542
IP
GET /lincode.php?id=342542 HTTP/1.1
Host: linkslot.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: application/javascript; charset=windows-1251
x-frame-options: SAMEORIGIN
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IkE6MN901WGVmv8ruWLDeiimlLUKXV6bn5MLfySDIfkJZogZAfrVqzXwM080uBmUiX6l%2F7%2BvmVQ7kCpNZa6ftC%2FDqgFjYMT%2Fjs3msFGUdjKh1Xe%2FvmgR5JCgOqnH4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77d689b00afd1bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/btc.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/btc.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/btc.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:34:20 GMT
etag: W/"619d7a7c-398"
content-encoding: gzip
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/dash.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/dash.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/dash.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:30:40 GMT
etag: W/"619d79a0-18d"
content-encoding: gzip
X-Firefox-Spdy: h2
hot-line.top/img/pay/icon/visa.svg
200 OK 0 B URL HTTP/2 hot-line.top/img/pay/icon/visa.svg
IP
ASN #200313 WEB_GroupInternet INC
GET /img/pay/icon/visa.svg HTTP/1.1
Host: hot-line.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://spit-on-the-ceiling.ml/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.22.0
date: Thu, 22 Dec 2022 05:43:05 GMT
content-type: image/svg+xml
last-modified: Tue, 23 Nov 2021 23:28:36 GMT
etag: W/"619d7924-11f9"
content-encoding: gzip
X-Firefox-Spdy: h2
185.22.155.51
142.250.74.42
23.36.76.226
93.184.220.29
45.83.123.39
104.21.78.39