download1482.mediafire.com/cfkj6j3sblyg/znqa0pj8syqzj27/@beta+r3+pro+salmangsmworld.com.zip
205.196.123.170302 Found 0 B URL HTTP/1.1 download1482.mediafire.com/cfkj6j3sblyg/znqa0pj8syqzj27/@beta+r3+pro+salmangsmworld.com.zip
IP 205.196.123.170:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /cfkj6j3sblyg/znqa0pj8syqzj27/@beta+r3+pro+salmangsmworld.com.zip HTTP/1.1
Host: download1482.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: bd-0.1.15
location: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
content-length: 0
date: Wed, 30 Nov 2022 18:26:31 GMT
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2d2e7649ce9e9ba6fc8b68aa89352e3c
0153d1d3d830a457043e16bb40d48a0b9ddef4b8
8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2683
Expires: Wed, 30 Nov 2022 19:11:14 GMT
Date: Wed, 30 Nov 2022 18:26:31 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4475
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:31 GMT
Last-Modified: Wed, 30 Nov 2022 17:11:56 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 18:18:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 508
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6965
Expires: Wed, 30 Nov 2022 20:22:36 GMT
Date: Wed, 30 Nov 2022 18:26:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 7F61fTWPjCP0m3PyZ9hu0J/SIBoz2J6JoFCi1LLFfye3AzKvAQP4QNzAIVf9jBaSUnsXb0hKoF4=
x-amz-request-id: MQK9TRYX5ZNZSYFC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 17:45:19 GMT
age: 2472
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 18:26:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
104.16.53.48200 OK 16 kB URL HTTP/1.1 www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9111)
Hash 38aa06a7dd001ff4d7341aa6766420ff
41204554bd7bba542c21dd514b30a9be528277ea
5b1a91b6c3987a7563367987fb5e29ad0c29c755e9d0b18a80bc3763b1370111
GET /download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154 HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
Content-Security-Policy: frame-ancestors *.mediafire.com
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noindex, nofollow
CF-Cache-Status: DYNAMIC
Set-Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; expires=Sun, 30-Nov-2042 18:26:32 GMT; Max-Age=631152000; path=/; domain=.mediafire.com; HttpOnly
dr_znqa0pj8syqzj27=1; expires=Wed, 30-Nov-2022 18:36:32 GMT; Max-Age=600; path=/; domain=.mediafire.com; HttpOnly
__cf_bm=G8nNsqOssRS35IRDiZlOxWqghxwsLgvsFB2nSwzMVT4-1669832792-0-AY20mQMXYuZpqco3I+jPR33LA2eiIF0yvU611d9r0MwwvyeeMylcPdHWifHNv0mMVGDnHfEUV4RuJE9qL4sQvRg=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1c58823b521-OSL
Content-Encoding: gzip
static.mediafire.com/js/master_121891.js
104.16.53.48200 OK 152 kB URL HTTP/1.1 static.mediafire.com/js/master_121891.js
IP 104.16.53.48:0
File type ASCII text, with very long lines (64001), with CRLF, LF line terminators
Size 152 kB (152078 bytes)
Hash 67ab94cd3866a95e274843f9e3c0e49d
6a6fffd32d40af8bb6c87692204e936468b64081
c47bf83f5cd96c7bdb98d9fbd420724ad085789561cca8837ef27643af343891
GET /js/master_121891.js HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2022 15:57:46 GMT
Vary: Accept-Encoding
ETag: W/"6363e4fa-8d704"
Expires: Fri, 30 Dec 2022 16:18:03 GMT
Cache-Control: max-age=2592000
Content-Encoding: gzip
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 6084
Set-Cookie: __cf_bm=xIwuEnEp.g3P6bvD8TGWZeOmR7N9GiMFCJnH6wESBPI-1669832792-0-Adjwqsl8b+TCj+pYDFP4zmDaaZxGztYkwMxtSAO9ziVawXqJjMpc4bPhSMzAJvowMZZyt9HZOzThTonqfzc5kfY=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1c7de831c0e-OSL
static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
104.16.53.48200 OK 53 kB URL HTTP/1.1 static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
IP 104.16.53.48:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6e2df673cf4661a6709df74b340a712e
78951ef50dd7d443f8480af8c8cbe8f2a00aba5e
5adbc8850a787767d3726dc34e3cc71f4d91382f2392a34ca9c97f7aa411f182
GET /css/mfv4_121891.php?ver=nonssl&date=2022-11-30 HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: public
Cache-Control: max-age=
Expires: Wed, 14 Dec 2022 14:30:21 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Last-Modified: Wed, 30 Nov 2022 14:30:21 GMT
CF-Cache-Status: HIT
Age: 9372
Set-Cookie: __cf_bm=IxSyjF0odc6XfNfJrLSSZEHKHSltQ_OmwUrum8u2kpI-1669832792-0-AT8i6ca2+Dt+Ffs6O2R6iONvAgfExZve/5i7FP9skIcjdkz2K52UvyBh6I9XdYnnRnCSj4slVvYr0hmtD/u0Ucw=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1c7c8190af6-OSL
static.mediafire.com/css/mfv3_121891.php?ver=nonssl
104.16.53.48200 OK 43 kB URL HTTP/1.1 static.mediafire.com/css/mfv3_121891.php?ver=nonssl
IP 104.16.53.48:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 835da5ce578821a6af3fbd3d62850a00
ec949ecb0cc4b1a0cf8e07de7d18f689e7466426
b2d886a3101ff0d73394a1a453432689b57de1a915f1c1350ddbb69981860d8e
GET /css/mfv3_121891.php?ver=nonssl HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/css;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Pragma: public
Cache-Control: max-age=
Expires: Wed, 14 Dec 2022 16:19:00 GMT
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Last-Modified: Wed, 30 Nov 2022 16:19:00 GMT
CF-Cache-Status: HIT
Age: 825
Set-Cookie: __cf_bm=SMSxooEGOTnizxQ2Kqsks65pqfvJcmWn_dPJFhg9c_o-1669832792-0-AVR4rmPJldIeiRgN4fn4XQMfLTq1oW66zgoEGpnVWru+FShdN/rQjjFddIzs372Q3EVvBG88izKW7TODbzhqJIc=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1c7cec4b509-OSL
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 4a97a1bfa6628e650263b4fa7ca74f6b
4cb78834b08d9d5def0c12f271f0fff9589a4ff0
d39fb3f530e100f5e51271869f0e0e8abf8654c5cd9e71f5e651d30ebdcb75fa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4472
Cache-Control: max-age=135042
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Etag: "6386fb62-117"
Expires: Fri, 02 Dec 2022 07:57:14 GMT
Last-Modified: Wed, 30 Nov 2022 06:42:42 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8f58cd30443a495eed3ec0d9827550c1
fd0f53d2acc63ae015b7b42155136ade5841ebc7
333a3cae36081ea37371e32dc9587faacfda5970daa476b3b36cd6f587ce1594
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js
142.250.74.132200 OK 553 B URL HTTP/2 www.google.com/recaptcha/api.js
IP 142.250.74.132:0
File type ASCII text, with very long lines (850), with no line terminators
Hash 1309ff133720d219cc98090d66a051ed
b96fc5a893e42be16d687d7abdecdb13d348a019
358683c66634ea5ee3021c93111d8621d583880bcbbfadf3ec2ff87a15ea1038
GET /recaptcha/api.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 30 Nov 2022 18:26:32 GMT
date: Wed, 30 Nov 2022 18:26:32 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 553
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-829541-1
142.250.74.168200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-829541-1
IP 142.250.74.168:0
File type ASCII text, with very long lines (1921)
Hash e284bf6bae5f9c45c00d9e4fe0eca4ff
cb1663de841715049fdb1deb4d21b9e57decdbd9
e4f26f43f6e9432f85ba4ca5f067bce3efdd01c5b6a2fdc17c3fa8217ca40abd
GET /gtag/js?id=UA-829541-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 30 Nov 2022 18:26:32 GMT
expires: Wed, 30 Nov 2022 18:26:32 GMT
cache-control: private, max-age=900
last-modified: Wed, 30 Nov 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43570
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 18:08:56 GMT
cache-control: public,max-age=3600
age: 1056
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color_reversed.svg
104.16.53.48200 OK 2.1 kB URL HTTP/1.1 static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color_reversed.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (929)
Hash de7b9565df481e463f5932a40d1bdb86
3fbc789bcf9b65a9a8264c8ef70da4612fabb86a
40a6cf19a9c8ac4cdc7c282edd7c5f4c87eb1195e5de80fe5e78e6a71ec219c9
GET /images/backgrounds/header/mf_logo_u1_full_color_reversed.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-11ca"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 822
Set-Cookie: __cf_bm=RmMAWlxDgRdFc3ybGc3Gz8CGytLHwThzrDs2pkkGJqo-1669832792-0-AWcQUkWaZcUMlY9ZFqSRqT6yexOaLDjHfUGePfWcAku4qK/7Inow+Z6/4A8LgsSYPQcLZ6aPKhtQxUw16d70BQs=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c8f98d0af6-OSL
Content-Encoding: gzip
www.mediafire.com/images/icons/myfiles/default.png
104.16.53.48200 OK 363 B URL HTTP/1.1 www.mediafire.com/images/icons/myfiles/default.png
IP 104.16.53.48:0
File type PNG image data, 42 x 42, 8-bit gray+alpha, non-interlaced\012- data
Hash 853e3c671adabbc17b0ad9929d507085
d778bef4963b1359a96fc44be0f5154b47b065b6
873b28a0419545d56f83b0e1cc449ce219f35c579bb7ce2cdf2d8fd6d374a2f1
GET /images/icons/myfiles/default.png HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/png
Content-Length: 363
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=424
Etag: "62deda56-1a8"
Expires: Fri, 30 Dec 2022 16:47:50 GMT
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
CF-Cache-Status: HIT
Age: 822
Accept-Ranges: bytes
Set-Cookie: __cf_bm=UkbLmfG5zj795KU1J1zLtX2fn4T999z.kZ8j11eO1zQ-1669832792-0-AYsLpG4HXieNtgsVUNgPN2rsuiK18p3oWhOzHuMUyPKsAL6aveyQ61vYxUmwOHdyovf7gW7Vn7QSAap0Du1Yz+k=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c8fcf5b521-OSL
static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color.svg
104.16.53.48200 OK 2.1 kB URL HTTP/1.1 static.mediafire.com/images/backgrounds/header/mf_logo_u1_full_color.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (929)
Hash 9c44539b0f00d89967dca26915687b20
f1532a68c9ec0c4c96efe6ba0ca02d1fdfc2ecd4
80185489d9891cf0ae437c2d520983fee2c58d13a51fff5c2c91988bc90444ed
GET /images/backgrounds/header/mf_logo_u1_full_color.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-121c"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 822
Set-Cookie: __cf_bm=hHG3uceej1zvzjKGAC7DoxHiVk_LoK_5tWpGGowXd.E-1669832792-0-AeHTLUIkRSL+tQvpUGXuRnI5OQo1tI5HKZVDamC533T17AkR5EuNM5th8MiTjDajWkr6DqHcUGZ57/66jLtLKec=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c8ffe91c0e-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 33f732b4dfbd5fb3ed7345eba2896fe6
2652f214cf7127302cc65b1d4e42f48a80907d5d
904ce722469d356f8ec20c14bd51ca3ce459012ea0869f7d14821a963310a494
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:800,700,400,300
142.250.74.74200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:800,700,400,300
IP 142.250.74.74:0
Hash 8448e7bd032736644d130f6fb74ece49
01038daaa4c904333792223920e56523254545fd
4484de9d0e74ca702021cbf86c116e1c1e8d700d1576bcb2a785c808298f4ebe
GET /css?family=Open+Sans:800,700,400,300 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 18:26:32 GMT
date: Wed, 30 Nov 2022 18:26:32 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
static.mediafire.com/images/icons/svg_light/facebook.svg
104.16.53.48200 OK 298 B URL HTTP/1.1 static.mediafire.com/images/icons/svg_light/facebook.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (401), with no line terminators
Hash 30e6b8d9ca6a7c33a0a2d7c703a83a55
5929ca9657ee00ed38930b1e6a11380bf743f9af
80e0797ce68bdbf238bcf74bbae8974a9a4bbfc8363ca3aa3d17dc22cf67226a
GET /images/icons/svg_light/facebook.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-191"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 820
Set-Cookie: __cf_bm=RkvNq5t820oy3G6tgfTVY_EdxLyFNqjPrqTLj6GGUcg-1669832792-0-AeRboV/jhOBp+sxcVGyp9GU4KzWO5BvbSynpzatxb2tO5KrZNxzf/Olgc1DCXqkLhAefWx1Dy3qZA2Gy39HaLvE=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c9da960af6-OSL
Content-Encoding: gzip
static.mediafire.com/images/icons/svg_dark/icons_sprite.svg
104.16.53.48200 OK 8.4 kB URL HTTP/1.1 static.mediafire.com/images/icons/svg_dark/icons_sprite.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- exported SGML document, ASCII text, with very long lines (1204)
Hash 067d59f783674f48b96a1ba8a7b8e01d
24d51d7d02603be45efb6e9accbcb6067a038362
1cf5ef26510e5bf379272a3ceb1724c53077afacfc1d599e044c5cb18a904ebf
GET /images/icons/svg_dark/icons_sprite.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-90ab"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 821
Set-Cookie: __cf_bm=nmrrU3OaAYzEm_5xL5Y9uuK5mg3mEFKjHWTJJW4KIKI-1669832792-0-AfAolMMEjzsER5nbGQGSqTBuc6+EK1kafbYetaX+i32No0Ef0NWYxntk3/Ybxx1B6duWw+f1al8/zE3NDVN2mLE=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c9c9f01c0e-OSL
Content-Encoding: gzip
static.mediafire.com/images/icons/svg_light/twitter.svg
104.16.53.48200 OK 553 B URL HTTP/1.1 static.mediafire.com/images/icons/svg_light/twitter.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (949), with no line terminators
Hash 82ba787198f055f3f5250e77b05028d2
e9632c217e30d5f9e09992e709c87fea6b409877
f18bde83cb5d6e2f542b0848838d7ccd36342d2ddd9b305f0eae1158eca90229
GET /images/icons/svg_light/twitter.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-3b5"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 820
Set-Cookie: __cf_bm=lVoGbqsBD1_DEpeZN84C8CjiG3hAORg3xFIxw6y2OHY-1669832792-0-AVx0tZhmzgl5PkZz+lJ1gtMxOkm1YucIEQl/ICs+0i+ld+guuMBD+yKFQbYMilqNEEdB/xxzMRzZFYs0FHjNd7s=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c9d9b0b509-OSL
Content-Encoding: gzip
static.mediafire.com/images/backgrounds/download/download_status/download_new_key.svg
104.16.53.48200 OK 603 B URL HTTP/1.1 static.mediafire.com/images/backgrounds/download/download_status/download_new_key.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text
Hash 0fe2df85e7b3b7ffc379e41547d1e5cb
d4c38b3828d95438581c97b3f050e80db0ee6c24
45298153a5d403a7823ac6c0c11493040eb8caede8ebf4d5820225f4ecb4ecb9
GET /images/backgrounds/download/download_status/download_new_key.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv3_121891.php?ver=nonssl
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-4d3"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 820
Set-Cookie: __cf_bm=1dtFQXZPny1BrHi3C8GOrJccaADF3jjM52f_Kuj3XnY-1669832792-0-AYMN8Czxbd0WL8eDeVnECPx87o7Eadr7Qx6exvMM1F81rJj1p1Dp4WJqAGVbjkR2s3gbd/VT1hiuAxyQmBcN1ik=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c9db540b49-OSL
Content-Encoding: gzip
static.mediafire.com/images/icons/svg_dark/social_icons_sprite.svg
104.16.53.48200 OK 2.0 kB URL HTTP/1.1 static.mediafire.com/images/icons/svg_dark/social_icons_sprite.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- exported SGML document, ASCII text, with very long lines (1074)
Hash dd5914414a88484054cfd2251501f2c9
0645059e8ed90fa09bcd13961bb3e1a56475543c
379b63590c5f885f9ee31f7807eed90abe10cc4b383dcb5b7b82a487ce964984
GET /images/icons/svg_dark/social_icons_sprite.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-1300"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 6084
Set-Cookie: __cf_bm=7E.zR9I6G8UvaESemVDXbfRIVZdau2AZ2SAIyNnV5tQ-1669832792-0-AYGdbtBO7Z44ybuzkLJQnFbdxq7dLqLmxK4JY4+Ch5PvrE5+eXRZt2RToQ8RdxnI3rMXWfb4zc77aYmEuEU5siA=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1c9eaa70af6-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.35200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:41 GMT
expires: Tue, 28 Nov 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 171231
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.mediafire.com/templates/upgrade/upgrade_button.php
104.16.53.48200 OK 1.5 kB URL HTTP/1.1 www.mediafire.com/templates/upgrade/upgrade_button.php
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3863673ae3b449a68499044ef7ca790a
18a7ffd4bf8296972b79876cf4a6af7c2602c195
a83308c73877dc223f6b3f8abffca019876ae0406fb808b515cb8e94837e5a9a
GET /templates/upgrade/upgrade_button.php HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Vary: Accept-Encoding
X-Robots-Tag: noindex, nofollow
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=aLr04MMaEi3QQ_OSNlXm2J4E69ZuPthZGGEiovc4gkI-1669832792-0-AQpiBk2lTcJIDC6aUPUiF5M+uSO+6AbLtunHcnICUQcSn3Fo2Jz7nBXaz2YCVClp2FM2iAidGF3AHP8UfrJNRAM=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1c96b81b4e8-OSL
Content-Encoding: gzip
www.mediafire.com/blank.html
104.16.53.48200 OK 174 B URL HTTP/1.1 www.mediafire.com/blank.html
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 44d1639b57dce29ed088c8654e354b1e
dce8b31eca75bcfc601bf32236b77d316e594595
3c17b749a725f2b5d60fcb2abb90379d607e89e43d0ad13d90495da9ded5d36c
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Security-Policy: frame-ancestors *
Last-Modified: Thu, 03 Nov 2022 15:57:34 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=Xd5uEXMtimedfUGwZ1i8YhcvZSV_O4tOKvGynSKQZD4-1669832792-0-Aa23+M6KYxNfN3gzMXVpCcgOVRSKgrsr361nvHLIPh6gjLXSa9YFtij1qNnATaM2EFdTdqaaN+8w1/N8OxAqEeA=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1c96d88b521-OSL
Content-Encoding: gzip
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
142.250.74.35200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 19:09:57 GMT
expires: Tue, 28 Nov 2023 19:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 170195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.mediafire.com/apple-touch-icon.png
104.16.53.48200 OK 2.2 kB URL HTTP/1.1 www.mediafire.com/apple-touch-icon.png
IP 104.16.53.48:0
File type PNG image data, 180 x 180, 8-bit colormap, non-interlaced\012- data
Hash ae70c6b6aeb89aa05c4da56bf59f7243
89743ff38221d32397fc4c3c43605a354bf46c82
f500eeaa6ecd664e06bcc112ed75b8013345c5d426463d745a2e48c56f9fc5c3
GET /apple-touch-icon.png HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/png
Content-Length: 2155
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=2384
Etag: "62deda56-950"
Expires: Fri, 16 Dec 2022 16:13:55 GMT
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
CF-Cache-Status: HIT
Age: 1217422
Accept-Ranges: bytes
Set-Cookie: __cf_bm=c7zH0.wPNBsjMl8vY5FlVoAO5EJPdZWXySS_A2VMTng-1669832792-0-AcHz3rMy1XaIF2txTByo0crTUfYG+g3MCEKIEGH4+DBDiFj2ik7ZEiXpxD+xsenEwqmaaP735QfNTavCADattAo=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1ca6d37b4ee-OSL
www.mediafire.com/favicon.ico
104.16.53.48200 OK 1.5 kB URL HTTP/1.1 www.mediafire.com/favicon.ico
IP 104.16.53.48:0
File type MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 24x24, 8 bits/pixel\012- data
Hash 6b472b0c8ab8d2274a51755ff936a0f7
de4c3b0b30ff224d77da7a948920f2f26d1b2f91
9b449aabaaa0d0700a85bcd5ed84bd8a179553495846152d690b81807ba11f8b
GET /favicon.ico HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Etag: W/"62deda56-2a46"
Expires: Fri, 30 Dec 2022 16:13:19 GMT
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
CF-Cache-Status: HIT
Age: 7381
Set-Cookie: __cf_bm=0ibbqRr3AXfiapnq5qItkTxETePDHje.zXTY7vMgVv8-1669832792-0-AaZ/ZQfb2aol2TGiHNkCSmFpFZoeo3lTtI2ma0wGtNSrlV9Il5YuKECZDXBpOe4/3zAr5kufRVvRh05DhEvOnpc=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1ca6d960afa-OSL
Content-Encoding: gzip
connect.facebook.net/en_US/fbevents.js
31.13.72.12200 OK 27 kB URL HTTP/1.1 connect.facebook.net/en_US/fbevents.js
IP 31.13.72.12:0
File type ASCII text, with very long lines (64348)
Hash 44ecaa3c2a4929a40141edc4540aaf84
f29a573182333b2500d41bfc389d6c5232dfb348
6589fe14578dedd4df678a909afadd7e5bc7f57c7e3e24518a7f5faac7383396
GET /en_US/fbevents.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
Pragma: public
Cache-Control: public, max-age=1200
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
X-FB-Debug: /9FegcnwaZW9dAO5V/AMd+8a1GEjdvtcn6vqgRyQYhlTf9b/Cj6LaiuWr3VCMZg4DQY+AiSJ/rRsxgehR/WD9g==
X-FB-TRIP-ID: 1904183273
Date: Wed, 30 Nov 2022 18:26:32 GMT
Alt-Svc: h3=":443"; ma=86400
Connection: keep-alive
Content-Length: 27340
cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js
54.230.245.120200 OK 22 kB URL HTTP/2 cdn.amplitude.com/libs/amplitude-8.5.0-min.gz.js
IP 54.230.245.120:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 660c3b546f2a131de50b69b91f26c636
70f80e7f10e1dd9180efe191ce92d28296ec9035
fd91362b7111a0dcc85ef6bd9bc776881c7428f8631d5a32725711dce678bff9
GET /libs/amplitude-8.5.0-min.gz.js HTTP/1.1
Host: cdn.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 22154
date: Tue, 06 Sep 2022 00:40:16 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-max-age: 3000
last-modified: Fri, 13 Aug 2021 22:37:42 GMT
etag: "660c3b546f2a131de50b69b91f26c636"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: NY8_7uBz3xoXYJBVsMSBAGHOz8ixMBS3
accept-ranges: bytes
server: AmazonS3
vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method
x-cache: Hit from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UuP5TP_guOZeuO6h0aB7KZMWlluAQmJEJvCEQu4_IZA_4RvalkjSZQ==
age: 7407976
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
142.250.74.110301 Moved Permanently 0 B URL HTTP/1.1 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP 142.250.74.110:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 30 Nov 2022 18:26:32 GMT
Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Cross-Origin-Opener-Policy: same-origin-allow-popups
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9c70aeb1d5dc937cb0f0668addc0d185
b14b223e8bd64f17784185266edf0b52d9a1e6c5
1257c74d178fb6425525857d02bdf15acf116fa7cf25521c7dd5e10b6269ab54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4561
Cache-Control: max-age=95569
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Etag: "638660d8-1d7"
Expires: Thu, 01 Dec 2022 20:59:21 GMT
Last-Modified: Tue, 29 Nov 2022 19:43:20 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
www.mediafire.com/blank.html
104.16.53.48200 OK 174 B URL HTTP/1.1 www.mediafire.com/blank.html
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 44d1639b57dce29ed088c8654e354b1e
dce8b31eca75bcfc601bf32236b77d316e594595
3c17b749a725f2b5d60fcb2abb90379d607e89e43d0ad13d90495da9ded5d36c
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Security-Policy: frame-ancestors *
Last-Modified: Thu, 03 Nov 2022 15:57:34 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=iJtonQgWh0V59rrt4Qa1R9Ulas7TV2pRU12bAT5LNPM-1669832792-0-AcYxfkrp9uVlWCa7KvTpc3Wu44zoz/4IkspE69EQbJZ/YCzi4Z8cAytvVLfA5d9uLQq+X5dTfScZ/Yz+WgGrLgA=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1caaf23b521-OSL
Content-Encoding: gzip
www.mediafire.com/blank.html
104.16.53.48200 OK 174 B URL HTTP/1.1 www.mediafire.com/blank.html
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 44d1639b57dce29ed088c8654e354b1e
dce8b31eca75bcfc601bf32236b77d316e594595
3c17b749a725f2b5d60fcb2abb90379d607e89e43d0ad13d90495da9ded5d36c
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Security-Policy: frame-ancestors *
Last-Modified: Thu, 03 Nov 2022 15:57:34 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=Z.2Hr3qmJi.3B33.gQb9cO2a_Q3ljEaaGnD6I2pI3r0-1669832792-0-ASEY6mv8Jy2fBzjtPw3/iV5k0KZnfl8NsRtHELDRnRhF2MUMgJAoas2VnaPhYmR9QNvD71dbd0OuXAJvg4hqiXw=; path=/; expires=Wed, 30-Nov-22 18:56:32 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1caad6fb4e8-OSL
Content-Encoding: gzip
connect.facebook.net/signals/config/542578585845936?v=2.9.89&r=stable
31.13.72.12200 OK 86 kB URL HTTP/2 connect.facebook.net/signals/config/542578585845936?v=2.9.89&r=stable
IP 31.13.72.12:0
File type ASCII text, with very long lines (64471)
Hash 5068e5d3da8a82ee1bf994ba594330a5
70ad75851929f80cf275a2789ca27b40d45bf2d5
6fc3ded2761042abd489e8fbb9b46bb237289b35e09bbea6dba2409246a1fb32
GET /signals/config/542578585845936?v=2.9.89&r=stable HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: application/x-javascript; charset=utf-8
content-security-policy: default-src facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com data: blob: 'self';script-src *.fbcdn.net *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net *.facebook.net fbcdn.net *.fbcdn.net fbsbx.com *.fbsbx.com;connect-src *.fbcdn.net *.facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
pragma: public
cache-control: public, max-age=1200
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
x-fb-debug: RWCeEOe8yNAdZMJuU5HycUx8Ok83iWv9a+BDMt3KjLRTOV75XV+kd3YfRXPybFmZUwlvT39LJQ/z3bcStwtD+g==
content-length: 86394
x-fb-trip-id: 1904183273
date: Wed, 30 Nov 2022 18:26:32 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 9c70aeb1d5dc937cb0f0668addc0d185
b14b223e8bd64f17784185266edf0b52d9a1e6c5
1257c74d178fb6425525857d02bdf15acf116fa7cf25521c7dd5e10b6269ab54
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4561
Cache-Control: max-age=95569
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:32 GMT
Etag: "638660d8-1d7"
Expires: Thu, 01 Dec 2022 20:59:21 GMT
Last-Modified: Tue, 29 Nov 2022 19:43:20 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
142.250.74.110200 OK 104 kB URL HTTP/2 fundingchoicesmessages.google.com/f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8=
IP 142.250.74.110:0
Size 104 kB (104449 bytes)
Hash 42dd2fb9842e358f30a13d63ce5fb762
6d1269427c5262f6758abad6b0a94f1ac03ed400
9b177879235f44dc6c37f01a1a58f591df82dd68b526243ae76dffb8d8fa0661
GET /f/AGSKWxXrjtEH6OsIEa1eMxJNrJTV18lP5XKGKMJi5rI13IlsGpcs5yT-0hk0wJuzpkaKFvH14rtURv0da3wnJCfhkp8= HTTP/1.1
Host: fundingchoicesmessages.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 18:26:32 GMT
cross-origin-opener-policy: same-origin
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'nonce-1uaAsHkWK4CohQ9u9G7-FQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
142.250.74.110200 OK 46 kB URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP 142.250.74.110:0
File type ASCII text, with very long lines (560)
Hash f5245dc656803ace3152b5c37c4c4124
bb4bfa3188457aa92b2690f2083beccfc61b5d3d
8b4909be95a5fd9151bf9fb22568b5b62083c5da8c2a169e0d3e92866db25e84
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.mediafire.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 18:26:32 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+487; expires=Fri, 29-Nov-2024 18:26:32 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.googleapis.com/translate_static/css/translateelement.css
142.250.74.42200 OK 3.6 kB URL HTTP/2 translate.googleapis.com/translate_static/css/translateelement.css
IP 142.250.74.42:0
File type ASCII text, with very long lines (18670)
Hash 897ba9a21d9625286674da769dacc2e2
84b4923ab7dee562395160824d53496314499b77
696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
GET /translate_static/css/translateelement.css HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 17:56:45 GMT
expires: Wed, 30 Nov 2022 18:56:45 GMT
cache-control: public, max-age=3600
age: 1788
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
content-type: text/css
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.qvkLIg6MEVc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoxsXHCM1CnEJ_o5xsmnbdq_po64A/m=el_main
142.250.74.42200 OK 75 kB URL HTTP/2 translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.qvkLIg6MEVc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoxsXHCM1CnEJ_o5xsmnbdq_po64A/m=el_main
IP 142.250.74.42:0
File type ASCII text, with very long lines (1613)
Hash 110765e1accf41111543c29721c78b52
3eeceb853d592a297162325f20f0420e136c875a
b5fb084ee4491e64fca48643106c0eb338212638caafdad88ff91e0d4198b589
GET /_/translate_http/_/js/k=translate_http.tr.no.qvkLIg6MEVc.O/d=1/exm=el_conf/ed=1/rs=AN8SPfoxsXHCM1CnEJ_o5xsmnbdq_po64A/m=el_main HTTP/1.1
Host: translate.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 75035
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 16:18:10 GMT
expires: Wed, 29 Nov 2023 16:18:10 GMT
cache-control: public, max-age=31536000
age: 94103
last-modified: Sat, 12 Nov 2022 06:10:12 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.166.172.24101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.166.172.24:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EjjpQgzOELNtn1/s2k/CUg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jNHkA/11ndQwnA1G24hmroEd6/I=
www.facebook.com/tr/?id=542578585845936&ev=PageView&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3Dcfkj6j3sbly%26qkey%3Dznqa0pj8syqzj27%26ip%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522ip%2522%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669832791844&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669832791841.477307278&it=1669832791593&coo=false&rqm=GET
31.13.72.36200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=542578585845936&ev=PageView&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3Dcfkj6j3sbly%26qkey%3Dznqa0pj8syqzj27%26ip%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522ip%2522%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669832791844&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669832791841.477307278&it=1669832791593&coo=false&rqm=GET
IP 31.13.72.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=542578585845936&ev=PageView&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3Dcfkj6j3sbly%26qkey%3Dznqa0pj8syqzj27%26ip%3D_removed_%26_filteredParams%3D%257B%2522unwantedParams%2522%253A%255B%2522ip%2522%255D%252C%2522sensitiveParams%2522%253A%255B%255D%257D&rl=&if=false&ts=1669832791844&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=30&fbp=fb.1.1669832791841.477307278&it=1669832791593&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 30 Nov 2022 18:26:33 GMT
X-Firefox-Spdy: h2
www.mediafire.com/blank.html
104.16.53.48200 OK 174 B URL HTTP/1.1 www.mediafire.com/blank.html
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 44d1639b57dce29ed088c8654e354b1e
dce8b31eca75bcfc601bf32236b77d316e594595
3c17b749a725f2b5d60fcb2abb90379d607e89e43d0ad13d90495da9ded5d36c
GET /blank.html HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Content-Security-Policy: frame-ancestors *
Last-Modified: Thu, 03 Nov 2022 15:57:34 GMT
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Set-Cookie: __cf_bm=TbHBq5M5wqhY1GidEhu1MtjHiL7R96Dzr4mBROasB0M-1669832793-0-AWvQ7z9tccvHFdr+lIA1dwa/gQRX4iK3vu3GhndOzrgp95kac9C6FpV6T0khvn+r4jGFrUTkrDnuEk5eQ55x0mw=; path=/; expires=Wed, 30-Nov-22 18:56:33 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1caad9fb4ee-OSL
Content-Encoding: gzip
ocsp.comodoca.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash f15e471c24424484b2bebcd675bd294c
78fbec83f71c32557a78b0e09df2888e77155eed
955e56f58c5c1d1fb224cc75775957a49e5bc8328d22219031d9bbc1191f8af0
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:33 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 30 Nov 2022 03:38:20 GMT
Expires: Wed, 07 Dec 2022 03:38:19 GMT
Etag: "78fbec83f71c32557a78b0e09df2888e77155eed"
Cache-Control: max-age=602536,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 1047
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1ce4ae6b50b-OSL
translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20221115
142.250.74.110204 No Content 3.6 kB URL HTTP/1.1 translate.google.com/gen204?sl=en&nca=te_ap&client=te&logld=vTE_20221115
IP 142.250.74.110:0
File type gzip compressed data, max compression\012- data
Hash 036ab84deceff7402209490bb9ffb431
760955163c3153c750b4a1cde0ee8a597e6a218c
e9abcb91eaa0a9e9ab1eefc6c130b9c28592848d3ba270185049ba4db8253b28
GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20221115 HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
HTTP/1.1 204 No Content
Content-Type: image/gif; charset=us-ascii
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cross-Origin-Resource-Policy: cross-origin
Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-XcRZofLGkFC1D6Drby9Slw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5f53eac27302554bb029ae36aa283c
2d71b909d1a1bbe2e81269d0c6200ba807fcd4aa
a4644d46e0e2b270572d06530145486bac01335dada14ccd6079bd9543e710d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60
216.58.207.225200 OK 12 kB URL HTTP/2 lh3.googleusercontent.com/YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60
IP 216.58.207.225:0
File type PNG image data, 366 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash f232511b689198ef4eac18e967da3040
38d0f3381708819be8db2df251be3e391a5b0ecf
cf7137aae8e21d7b4a5d0a322b25dfc27c7a1e9b1a06bb4d5f813ef9e3459df3
GET /YxmihnhFt54cZYUpI8Vki3ux02R2TgdxT2JLItC4sk0NMsB8q5xXuZr3KKhXns_325CVgfI3IAWpwJrMtsUf1HdwXaWps_lxmzvqH8R5aBB2P50trKqeLQ=h60 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12249
x-xss-protection: 0
date: Wed, 30 Nov 2022 15:29:57 GMT
expires: Mon, 28 Nov 2022 15:05:09 GMT
cache-control: public, max-age=86400, no-transform
age: 10596
etag: "v1"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 8d5f53eac27302554bb029ae36aa283c
2d71b909d1a1bbe2e81269d0c6200ba807fcd4aa
a4644d46e0e2b270572d06530145486bac01335dada14ccd6079bd9543e710d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
104.16.53.48200 OK 244 B URL HTTP/1.1 static.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (315), with no line terminators
Hash 438c74ce96fb46c379506f9a1a4b9882
0449a026abfda3ef8498ea612951d167202e44c8
3529bb7eb84889386b8b3dfaf3cb475fecbd83e1912d80fd43b790ca90aadb1f
GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv4_121891.php?ver=nonssl&date=2022-11-30
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832791.0.0.0
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:33 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-13b"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 814
Set-Cookie: __cf_bm=SwoPBqyfxK8FuKpCMFTja8ZB9YbmTRmeqlwYGKy1In8-1669832793-0-Ac+upYvxol1wEwsOggXgXiE2UrtQgbFm7OXFv63/tG64xnBVZkS/y+vE3AILQvM4U+XHmAJQzcfQAedvN2RMftI=; path=/; expires=Wed, 30-Nov-22 18:56:33 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1cf58101c0e-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
142.250.74.35200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v139/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 20:33:17 GMT
expires: Fri, 24 Nov 2023 20:33:17 GMT
cache-control: public, max-age=31536000
age: 510796
last-modified: Thu, 25 Aug 2022 00:26:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-829541-1&cid=326244354.1669832792&jid=896325781&gjid=1590036929&_gid=1861607263.1669832792&_u=YEBAAUAAAAAAACAAI~&z=1589826727
64.233.165.157200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-829541-1&cid=326244354.1669832792&jid=896325781&gjid=1590036929&_gid=1861607263.1669832792&_u=YEBAAUAAAAAAACAAI~&z=1589826727
IP 64.233.165.157:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-829541-1&cid=326244354.1669832792&jid=896325781&gjid=1590036929&_gid=1861607263.1669832792&_u=YEBAAUAAAAAAACAAI~&z=1589826727 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.mediafire.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Wed, 30 Nov 2022 18:26:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
api.amplitude.com/
44.238.9.245200 OK 7 B IP 44.238.9.245:0
File type ASCII text, with no line terminators
Hash 260ca9dd8a4577fc00b7bd5810298076
53a5687cb26dc41f2ab4033e97e13adefd3740d6
aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27
POST / HTTP/1.1
Host: api.amplitude.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 1025
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 18:26:33 GMT
content-type: text/html;charset=utf-8
content-length: 7
access-control-allow-origin: *
access-control-allow-methods: GET, POST
trace-id: Root=1-6387a059-28060eda7c6b192b7d273a08
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.mediafire.com/cdn-cgi/rum?
104.16.53.48204 No Content 0 B URL HTTP/1.1 www.mediafire.com/cdn-cgi/rum?
IP 104.16.53.48:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
content-type: application/json
Content-Length: 16367
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832791.0.0.0
HTTP/1.1 204 No Content
Date: Wed, 30 Nov 2022 18:26:33 GMT
Connection: keep-alive
access-control-allow-origin: http://www.mediafire.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
Server: cloudflare
CF-RAY: 7725a1d04ed6b4ee-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-829541-1&cid=326244354.1669832792&jid=896325781&_u=YEBAAUAAAAAAACAAI~&z=1612023696
142.250.74.67200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-829541-1&cid=326244354.1669832792&jid=896325781&_u=YEBAAUAAAAAAACAAI~&z=1612023696
IP 142.250.74.67:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-829541-1&cid=326244354.1669832792&jid=896325781&_u=YEBAAUAAAAAAACAAI~&z=1612023696 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 30 Nov 2022 18:26:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 3402a11f28d369c1ad537c8e44ba5568
17c9fc852ca71dc4d46f786537adda4ee0e9a3ef
dd142866516f3293fab9f67f092d37b70c39fc58512734c8e88dab5c5faf7264
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.google-analytics.com/g/collect?v=2&tid=G-K68XP6D85D>m=2oebs0&_p=852124741&cid=326244354.1669832792&ul=en-us&sr=1280x1024&_s=1&sid=1669832791&sct=1&seg=0&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3Dcfkj6j3sbly%26qkey%3Dznqa0pj8syqzj27%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_ss=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-K68XP6D85D>m=2oebs0&_p=852124741&cid=326244354.1669832792&ul=en-us&sr=1280x1024&_s=1&sid=1669832791&sct=1&seg=0&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3Dcfkj6j3sbly%26qkey%3Dznqa0pj8syqzj27%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-K68XP6D85D>m=2oebs0&_p=852124741&cid=326244354.1669832792&ul=en-us&sr=1280x1024&_s=1&sid=1669832791&sct=1&seg=0&dl=http%3A%2F%2Fwww.mediafire.com%2Fdownload_repair.php%3Fflag%3D4%26dkey%3Dcfkj6j3sbly%26qkey%3Dznqa0pj8syqzj27%26ip%3D91%252E90%252E42%252E154&dt=File%20sharing%20and%20storage%20made%20simple&en=page_view&_fv=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.mediafire.com
date: Wed, 30 Nov 2022 18:26:33 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7042
Expires: Wed, 30 Nov 2022 20:23:56 GMT
Date: Wed, 30 Nov 2022 18:26:34 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7042
Expires: Wed, 30 Nov 2022 20:23:56 GMT
Date: Wed, 30 Nov 2022 18:26:34 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7042
Expires: Wed, 30 Nov 2022 20:23:56 GMT
Date: Wed, 30 Nov 2022 18:26:34 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7042
Expires: Wed, 30 Nov 2022 20:23:56 GMT
Date: Wed, 30 Nov 2022 18:26:34 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash a97c452e75cf1d4833e777d7ba7f2c47
58f15763fd33f742ce870f49f1c2dbed5b41205f
39bb874a415db37a81432942eb84151b0134d1aacaa31d364b6dadae4388c6a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39BB874A415DB37A81432942EB84151B0134D1AACAA31D364B6DADAE4388C6A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7042
Expires: Wed, 30 Nov 2022 20:23:56 GMT
Date: Wed, 30 Nov 2022 18:26:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 777ce44582c70bf01a31da4cab366f36
57e1d34f146d5ccd9943aa97bcc3158f7103bb07
fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: e4GuUolL0WIMXvnF7BZ80j-dMMSILN2gd-1mqFwNns-zCUBsJa8iHQ==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:43:04 GMT
age: 74610
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5508d05a290b663fd89ead9b58f2efd8
53650399f9a986ba54addd668b4557109d12003b
65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: qftF-GQkcjKTs30KMGCTDymw2SVSXeAYKGNWUnaMfvIb8HjtfHUx8A==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:46 GMT
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
age: 74508
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
34.120.237.76200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e00769bd1391b8f4f5b8ab128a825355
e4ddf955e8ac1986045ed55880c43c69e588a021
81ca4d20c28fed8fd3135515daadc1fdbfb4198535d7c46021b418b8b98e59a5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7298
x-amzn-requestid: 381e55bb-876b-46ad-84b6-1ddf9f876f56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDcE3poAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-7c12394600900afc7281e858;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7mRG070F4NZnewfowUhVhMerJaGjJd4G6O1tvTPiKyvTAzq-Y16-jw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:51 GMT
etag: "e4ddf955e8ac1986045ed55880c43c69e588a021"
content-type: image/jpeg
age: 73783
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7LVxajVjJ1N2W-jxCmKpYHg1rS1MbrRnAVc15QmM0iH94CH1yJnR0w==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 04:53:01 GMT
age: 48813
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
34.120.237.76200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 59baec8db5ced0210ab766ea5636a5fd
f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GydenCzPtpFdVLqN4ssiZ4dKN48WGneS3mwzEdDE81pobtLznfC4VQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:07:59 GMT
age: 73115
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 72902
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.mediafire.com/images/icons/svg_dark/loading_indeterminate.svg
104.16.53.48200 OK 363 B URL HTTP/1.1 static.mediafire.com/images/icons/svg_dark/loading_indeterminate.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 6d6aec0ded9d209ce013f7d3ed7c510f
72cfbe865fb201441c7b4c5e8206b102a2170573
e862d62dacbb833bab392baee1bd6607c26a2b8d4bac82de6379d5e96db9b584
GET /images/icons/svg_dark/loading_indeterminate.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://static.mediafire.com/css/mfv3_121891.php?ver=nonssl
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832791.0.0.0
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:37 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-23a"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 817
Set-Cookie: __cf_bm=W2LMVnvfVPhCq9M_Nj1bWum6scSGJihIRPgNHhgGhAk-1669832797-0-AQiZLmGCkY2fuZaY3Pf8s6WVzjph74yU9apnEeTrhzPGLz1mnX+Pn+nvGAYyev6wO5ANI/9Cdb7hh0jCNKYGUyU=; path=/; expires=Wed, 30-Nov-22 18:56:37 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1e90d4d1c0e-OSL
Content-Encoding: gzip
www.mediafire.com/cdn-cgi/rum?
104.16.53.48204 No Content 0 B URL HTTP/1.1 www.mediafire.com/cdn-cgi/rum?
IP 104.16.53.48:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json
Content-Length: 544
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 204 No Content
Date: Wed, 30 Nov 2022 18:26:40 GMT
Connection: keep-alive
access-control-allow-origin: http://www.mediafire.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
Server: cloudflare
CF-RAY: 7725a1fa9dfeb4ee-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash d08f7863a3076bd91658ec10c0a99d7c
e9b4383c10deb3518c3ad73a0862b7d6ef255d36
2cb70e764d01f2ced26956f4a8db1d9350bc3a3af4ca01d3533931be7a8f876e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4363
Cache-Control: max-age=107243
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:40 GMT
Etag: "63868f40-118"
Expires: Fri, 02 Dec 2022 00:14:03 GMT
Last-Modified: Tue, 29 Nov 2022 23:01:20 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 280
static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg
104.16.53.48200 OK 1.5 kB URL HTTP/1.1 static.mediafire.com/images/backgrounds/header/mf_logo_full_color.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (3357), with no line terminators
Hash cd8619bb27c40ac285ca7ca5cc0e12c6
71a679f2e69914390e27de9b12fbebd6740b420d
348ca0cfaec31819e81ec29c3ea7808a7f9142d8448ba06edfca37e5363f967b
GET /images/backgrounds/header/mf_logo_full_color.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 28 Oct 2016 22:22:42 GMT
ETag: W/"5813cfb2-d1d"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 9921
Set-Cookie: __cf_bm=H03Sh1V2LXNU1RLIQS8WME6D84toS3XN8AzCSNGfIgE-1669832800-0-AUYMVaQDg3lAcD3FNjSCik6GztUKe5u7j0YbcBDJ8CBg2a1VIHmKnutH5DOVvdGIbhWAfMgvXUkj0hqSE9TqZqI=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fadc031c0e-OSL
Content-Encoding: gzip
www.mediafire.com/js/prebid5.17.0.js
104.16.53.48200 OK 80 kB URL HTTP/1.1 www.mediafire.com/js/prebid5.17.0.js
IP 104.16.53.48:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 57054ccba30c2dedde9b6139f72bf37e
04d436872be1c702db70b33b56b97b9daa17ec48
c4808b176fc686e19da8d088b99f9e607ea2a9040f736397343f8b35e0fc6511
GET /js/prebid5.17.0.js HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=2592000
Cf-Bgj: minify
Cf-Polished: origSize=269036
Etag: W/"62deda56-41aec"
Expires: Fri, 30 Dec 2022 17:05:58 GMT
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
Vary: Accept-Encoding
CF-Cache-Status: HIT
Age: 1667
Set-Cookie: __cf_bm=2ihAXE_3SaPnRAYxWPTtWswNJ76WoXyFMKRh4GYWKJE-1669832800-0-Ackv8BOgDioBwrEDNsb04NINHVeJEqX+Arc+RO5i3W2PoF0koCCgVo/go4aHVSh1MjfQcrFuHcm8LhJdevkUt4E=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1face47b4ee-OSL
Content-Encoding: gzip
static.mediafire.com/images/backgrounds/download/social/fb_16x16.png
104.16.53.48200 OK 181 B URL HTTP/1.1 static.mediafire.com/images/backgrounds/download/social/fb_16x16.png
IP 104.16.53.48:0
File type PNG image data, 16 x 16, 4-bit colormap, non-interlaced\012- data
Hash 78226526732869add09512e9b4be3090
f1ce9c760e17e69509cabe114392a108a6c839bc
720671166ac43aba99e3952b0b9341ab4e0fee1fd891db54e2a07f05db653142
GET /images/backgrounds/download/social/fb_16x16.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/png
Content-Length: 181
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: "62deda56-b5"
Expires: Fri, 30 Dec 2022 12:18:26 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 9922
Accept-Ranges: bytes
Set-Cookie: __cf_bm=EgoppvUxOV6XooKdBTrcRWMtK7uJ5DImdGgUdY8mvYM-1669832800-0-AaFvpCZoLkySFmC22bSzcEdnw7k0FSabXUN4bnhfTaXmZgxscjjrzpKpt7ZT/Osp5BPCi0kt984qjqO38uxOQkM=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fafc1e1c0e-OSL
static.mediafire.com/images/backgrounds/download/apps_list_sprite-v6.png
104.16.53.48200 OK 8.1 kB URL HTTP/1.1 static.mediafire.com/images/backgrounds/download/apps_list_sprite-v6.png
IP 104.16.53.48:0
File type PNG image data, 36 x 828, 8-bit colormap, non-interlaced\012- data
Hash d3df203853c4482e8753a856e13b0b07
bcee90ce0ef36a1aecdfc64596fee107b5a07a3a
dc54b817820f14ce6395ba2a037f37d4bb0af75d5b017336140793fbe2f7f738
GET /images/backgrounds/download/apps_list_sprite-v6.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/png
Content-Length: 8145
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: "62deda56-1fd1"
Expires: Fri, 30 Dec 2022 16:20:24 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 3492
Accept-Ranges: bytes
Set-Cookie: __cf_bm=_AlMW4WiXYn6v9JChtOkbQV3AecCBIA8rtcvW0Z3MTQ-1669832800-0-AVKKuZ/4SQ39iGamVerETEsUsblvGNo2kQIX77Vx8Ci9xMJbzJQiOPBUZV3DGP0HVcQUJ62qzoNiHl5HzX8CZNQ=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1faed84b509-OSL
www.mediafire.com/images/icons/svg_light/icons_sprite.svg
104.16.53.48200 OK 8.4 kB URL HTTP/1.1 www.mediafire.com/images/icons/svg_light/icons_sprite.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- exported SGML document, ASCII text, with very long lines (1204)
Hash c01bdde26a363ed7260b44fd1a731e98
669c691b1e1e4210ce80997387536c2aee7733f3
158cb8de96c09cdecff36d1b3de54c2853a1e57d32693d6e41f34572e6df6062
GET /images/icons/svg_light/icons_sprite.svg HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Etag: W/"62deda56-90ab"
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
CF-Cache-Status: HIT
Age: 3795
Set-Cookie: __cf_bm=05jmyMkEr0WHlZRlmnvPf_XiVqJRiP_hN380weszkeE-1669832800-0-AaVy2iR93q87LILpcMi9xaJ20rKg1d6TRTD7b9ekZQIisSnErw+H9myQgDtwfwC9KaSUuqaIIu07DhnR4WrETq4=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fae8e7b4e8-OSL
Content-Encoding: gzip
static.mediafire.com/images/filetype/file-zip-v3.png
104.16.53.48200 OK 1.9 kB URL HTTP/1.1 static.mediafire.com/images/filetype/file-zip-v3.png
IP 104.16.53.48:0
File type PNG image data, 43 x 58, 8-bit/color RGBA, non-interlaced\012- data
Hash a23b8b7059e953fc1b74bf87a77ebb0c
f23e0ad301389083104f04d4164fa57423387b17
4448e430d3c53bad548a5d135e1c7e2f9593e806ba47892640d430ea752e979e
GET /images/filetype/file-zip-v3.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/png
Content-Length: 1872
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: "62deda56-750"
Expires: Fri, 30 Dec 2022 12:17:01 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 13205
Accept-Ranges: bytes
Set-Cookie: __cf_bm=x7yUY_Wdwy3q0MEVBourlP59X36KQ701PR.BZlg7O3c-1669832800-0-Ae3ROlOwkwxjCKotNFJMNFliVOzES1V53UxDaFEtlVQmXvmdZN/DbLvkDDsjmo5p7sprtX134zte1tHsqlpG2oc=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1faebce0af6-OSL
www.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
104.16.53.48200 OK 244 B URL HTTP/1.1 www.mediafire.com/images/icons/svg_dark/arrow_dropdown.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (315), with no line terminators
Hash 438c74ce96fb46c379506f9a1a4b9882
0449a026abfda3ef8498ea612951d167202e44c8
3529bb7eb84889386b8b3dfaf3cb475fecbd83e1912d80fd43b790ca90aadb1f
GET /images/icons/svg_dark/arrow_dropdown.svg HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Etag: W/"62deda56-13b"
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
CF-Cache-Status: HIT
Age: 9927
Set-Cookie: __cf_bm=GSn.97wK_n_KdjUxIDJYNUiztZ8oEZQVYfcobIHRvRk-1669832800-0-AXIqzEnMWEDcoZrDOayB2f0GYXUVOTQfzAa3p4QyCoOchP6eZUPTcORH/4bVhV+d/t4AHzzaBOJKf77U8rrA1Bw=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fae8030afa-OSL
Content-Encoding: gzip
static.mediafire.com/images/icons/svg_dark/check_circle_green.svg
104.16.53.48200 OK 300 B URL HTTP/1.1 static.mediafire.com/images/icons/svg_dark/check_circle_green.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (444), with no line terminators
Hash 748ded416c9ac6cf3e6bf71899654ef4
f4c9e5092d30f4c19acb2150f58cd5829e0bdeed
2e81ec62e6a56b57437ae015adff93fb3e729e441755d3f58ebe3e39003aa487
GET /images/icons/svg_dark/check_circle_green.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-1bc"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 9922
Set-Cookie: __cf_bm=2h.o7vIpjLRgFVdgqWYKNYCVu0yfOhAPOOgee_3et5g-1669832800-0-AfPUJVoWtvP0agscnH9g4Y44U3CJPQYFq58w/RhfMU1uqQTwnCsozaumf44BNXCwBbVnRwdGShwugBitNKAAJAM=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fae87f0b49-OSL
Content-Encoding: gzip
www.mediafire.com/file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip
104.16.53.48200 OK 86 kB URL HTTP/1.1 www.mediafire.com/file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip
IP 104.16.53.48:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (62979)
Hash 0caff2b3b075806c35ba69506b797973
1b93e8ea69f9c35927c72bacd9a36f52206e5abc
0a4ca7390ced3b87b0871f805023b59fd16168794da6c2a891dfc26ecad6cb1d
GET /file/znqa0pj8syqzj27/%40Beta+R3+Pro+salmangsmworld.com.zip HTTP/1.1
Host: www.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/download_repair.php?flag=4&dkey=cfkj6j3sbly&qkey=znqa0pj8syqzj27&ip=91%2E90%2E42%2E154
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832791.0.0.0
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: http://www.mediafire.com
Cache-Control: no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0
Expires: 0
Pragma: no-cache
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noindex, nofollow
CF-Cache-Status: DYNAMIC
Set-Cookie: znr1=1; expires=Sat, 03-Dec-2022 18:26:40 GMT; Max-Age=259200; path=/; domain=.mediafire.com; HttpOnly
ad_count=1; expires=Wed, 30-Nov-2022 18:56:40 GMT; Max-Age=1800; path=/; domain=.mediafire.com; HttpOnly
conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D; expires=Fri, 30-Dec-2022 18:26:40 GMT; Max-Age=2592000; path=/; domain=.mediafire.com
__cf_bm=KZaJ4eIfl7fQL.wo_FJs2ZKizjTOu1SE9ZB.tAPIh4Y-1669832800-0-AWo7mAS79czCG1g9jrs9yRskG+uy3jI6XXEksCdQ4DayU86+xxoUgMcAbjukKaJKbQdaxAYuouB+/vuLRuHAg+4=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Server: cloudflare
CF-RAY: 7725a1f8bb5ab521-OSL
Content-Encoding: gzip
static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
104.16.53.48200 OK 583 B URL HTTP/1.1 static.mediafire.com/images/backgrounds/footer/social/footerIcons.png
IP 104.16.53.48:0
File type PNG image data, 112 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash e0abc4fea89d2c5153b73cd02ac5ba13
00465ef774805c82fb5b8a40b743f7b1a1d1a7d6
f917a9105c311331b1d40f4d2bdbf11233c1c465616c1a9c46232f451463b061
GET /images/backgrounds/footer/social/footerIcons.png HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/png
Content-Length: 583
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: "62deda56-247"
Expires: Fri, 30 Dec 2022 12:15:26 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 9921
Accept-Ranges: bytes
Set-Cookie: __cf_bm=avR2iK3y9a1Yd2XhpeElNdHPUm8p9ljFsLTIDZt7M0g-1669832800-0-AXrgBKlwuazC81Xdx/eJtKCxc/pNyKGcrtsGMnzjZZ2TG64SZIKKXDukXjspvHZUzWZ5Ie7V+rLRjFgGoZsN2ZI=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fb0d510b51-OSL
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3f9e32fa1f80e000274a483756dbb548
8a8037577a36ea621471f28eb9c8ed4b0eabec0e
2f4cdc55bde48003acf10eb84c6ababb56b8ed0b65f7135f3ea19a1ac69411d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3844
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:40 GMT
Etag: "6386f462-117"
Last-Modified: Wed, 30 Nov 2022 17:22:36 GMT
Server: ECS (amb/6BC1)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 3f9e32fa1f80e000274a483756dbb548
8a8037577a36ea621471f28eb9c8ed4b0eabec0e
2f4cdc55bde48003acf10eb84c6ababb56b8ed0b65f7135f3ea19a1ac69411d5
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3844
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:40 GMT
Last-Modified: Wed, 30 Nov 2022 17:22:36 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
static.mediafire.com/images/backgrounds/download/additional_content/flag.svg
104.16.53.48200 OK 204 B URL HTTP/1.1 static.mediafire.com/images/backgrounds/download/additional_content/flag.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash 47d7d3db93bf1c6d312c0a1eea858eae
3add4272aec9039a339d1a1c8ab0a296d2e0f714
0571284e5e17e3e8108d921ccd12926cd2a5783bace1f254289cdd67e275e976
GET /images/backgrounds/download/additional_content/flag.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-ea"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 3786
Set-Cookie: __cf_bm=t6nRYrq1xTf5.1cP_vWNzfDTUanYHEHCF4L4yzQyKKU-1669832800-0-ARQmjAyNbhjQSto/sOkJXJ990Mh/xyqv8vALGn2O298a0iN7CEnt0A1PN3J4a6iswqmQZ5yfQYSM3kmh/4VYUqs=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fcc814b509-OSL
Content-Encoding: gzip
static.mediafire.com/images/backgrounds/download/additional_content/world.svg
104.16.53.48200 OK 54 kB URL HTTP/1.1 static.mediafire.com/images/backgrounds/download/additional_content/world.svg
IP 104.16.53.48:0
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (25749)
Hash 39420d41720521a11d7702874b0f049d
03ea3f6b14b69be89446f623ef575b82ab51f941
05c7adadf096e46886f288b977e2905a49d9cae8ba5c15ebcc11a30aa5d67579
GET /images/backgrounds/download/additional_content/world.svg HTTP/1.1
Host: static.mediafire.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.mediafire.com/
Cookie: ukey=8mc6269vbws39bg6dznxzm3anc991jk8; dr_znqa0pj8syqzj27=1; amp_28916b=U8QpdRN5IoxzQxSXnRLYqH...1gj4skli6.1gj4skli6.0.1.1; _fbp=fb.1.1669832791841.477307278; _ga=GA1.1.326244354.1669832792; _gid=GA1.2.1861607263.1669832792; _gat_gtag_UA_829541_1=1; _ga_K68XP6D85D=GS1.1.1669832791.1.0.1669832799.0.0.0; znr1=1; ad_count=1; conv_tracking_data-2=%7B%22mf_source%22%3A%22regular_download-34%22%2C%22mf_content%22%3A%22Free%22%2C%22mf_medium%22%3A%22windows%5C%2FFirefox%22%2C%22mf_campaign%22%3A%22znqa0pj8syqzj27%22%2C%22mf_term%22%3A%221954cc078e71dccfea0193a93aaf25fd%22%7D
HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 18:26:40 GMT
Content-Type: image/svg+xml
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 25 Jul 2022 18:00:54 GMT
ETag: W/"62deda56-23ce2"
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Age: 3786
Set-Cookie: __cf_bm=ywgvv660pG3kMDAm_jTK6p4AN7WcERqrHVNQNoZ_KH8-1669832800-0-AT7yr8ftjZgVih8kAyldIrnOLkXYY5tJUIwGuk8cxaa7d05oN3KeHPkT6sl/TE+3vyotCrLE3yfpTZU2OOkK6Dw=; path=/; expires=Wed, 30-Nov-22 18:56:40 GMT; domain=.mediafire.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7725a1fcbe5d1c0e-OSL
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash cfb3e2e3f1e952f9b78769abd48397be
18b14921200c6ac131abe8205f3c0cec95fedbc7
98f2971c4516e1c9e43acd2e83d262f2da231c240b5352ac9ebac1b61cec80a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4358
Cache-Control: max-age=143949
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:40 GMT
Etag: "63871ea7-117"
Expires: Fri, 02 Dec 2022 10:25:49 GMT
Last-Modified: Wed, 30 Nov 2022 09:13:11 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash cfb3e2e3f1e952f9b78769abd48397be
18b14921200c6ac131abe8205f3c0cec95fedbc7
98f2971c4516e1c9e43acd2e83d262f2da231c240b5352ac9ebac1b61cec80a8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4358
Cache-Control: max-age=143949
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 18:26:40 GMT
Etag: "63871ea7-117"
Expires: Fri, 02 Dec 2022 10:25:49 GMT
Last-Modified: Wed, 30 Nov 2022 09:13:11 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 279
cdn.otnolatrnup.com/Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0
104.19.215.37200 OK 0 B URL HTTP/2 cdn.otnolatrnup.com/Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0
IP 104.19.215.37:0
GET /Scripts/infinity.js.aspx?guid=5ff0fb62-0643-4ff1-aaee-c737f9ffc0e0 HTTP/1.1
Host: cdn.otnolatrnup.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 18:26:40 GMT
content-type: application/x-javascript; charset=utf-8
vary: Accept-Encoding
cache-control: public, no-transform, max-age=900
content-encoding: gzip
p3p: CP="CAO PSA OUR IND"
access-control-allow-origin: *
last-modified: Wed, 30 Nov 2022 18:19:55 GMT
cf-cache-status: HIT
age: 158
server: cloudflare
cf-ray: 7725a1fc1be7b517-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
104.16.57.101200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993
IP 104.16.57.101:0
GET /beacon.min.js/vaafb692b2aea4879b33c060e79fe94621666317369993 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.mediafire.com
Connection: keep-alive
Referer: http://www.mediafire.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 30 Nov 2022 18:26:32 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2022.10.1
last-modified: Fri, 21 Oct 2022 01:56:09 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7725a1c85910b511-OSL
content-encoding: gzip
X-Firefox-Spdy: h2